プライバシーポリシー

Last updated: October 2026

1. Introduction

Welcome to Open ID Photo ("we", "us", or "our"). This プライバシーポリシー explains how we collect, use, process, and protect your personal information when you use our AI搭載 ID photo generation service at www.openidphoto.com.

We are committed to protecting your privacy in compliance with the Personal Information Protection Law (PIPL) of China, the General Data Protection Regulation (GDPR) of the European Union, and other applicable data protection laws.

2. Facial Photos as Sensitive Personal Information

Facial photographs constitute sensitive personal information under both PIPL (Article 28) and GDPR (Article 9). 生体認証 data derived from facial images can uniquely identify individuals, requiring 高さened protection.

We acknowledge the special nature of this data and apply enhanced safeguards throughout its lifecycle. We process your facial photo solely for the purpose of generating compliant ID photos and for no other purpose whatsoever.

3. Local AI Processing

All AI processing — including 背景削除, head positioning adjustment, size cropping, and compliance checking — is performed on our own servers. We do not use any third-party AI services, cloud AI APIs, or external processing platforms.

This means your facial photo is never transmitted to, accessed by, or visible to any third-party service provider during the AI processing stage.

4. Automatic Deletion After Processing

Your uploaded photos and generated results are automatically deleted from our servers within 10 minutes after processing is complete or the session ends, whichever comes first.

We do not maintain long-term storage of any user photos. No photo archives, backups containing personal images, or persistent copies are retained. Once deleted, the data is irrecoverable.

5. Data Not Shared with Third Parties

We do not share, sell, license, or otherwise disclose your personal information or facial photos to any third parties. This includes:

  • No advertising networks or data brokers
  • No social media platforms
  • No analytics providers receiving personal data
  • No government entities (unless legally compelled by a valid court order, in which case we will notify you where legally permissible)

6. PIPL Compliance

In accordance with China's Personal Information Protection Law:

  • Separate consent: We obtain your separate, explicit consent before processing your facial photo. A consent dialog is presented before any photo upload or processing begins.
  • Purpose limitation: Your photo is used exclusively for ID photo generation. No secondary uses are permitted.
  • Data minimization: We collect only the photo you choose to upload. No account registration or additional personal data is required.
  • Right to deletion: Photos are automatically deleted after processing. You may also request immediate deletion at any time.

7. GDPR Compliance

For users in the European Economic Area, in accordance with the GDPR:

  • Lawful basis: We process your facial photo based on your explicit consent (Article 6(1)(a) and Article 9(2)(a)).
  • Right of access: You may request information about what personal data we hold.
  • Right to erasure: You may request deletion of your data at any time ("right to be forgotten").
  • Data portability: You receive your processed photo directly for download.
  • No automated decision-making: While AI is used for image processing, no decisions producing legal or similarly significant effects are made about you.

8. Consent Mechanism

Before you upload a photo, we present a clear and prominent consent dialog that explains:

  • That facial photos are sensitive personal information
  • That the photo will be processed by AI on our servers
  • That the photo will be automatically deleted after processing
  • That the photo will not be shared with any third party

Processing only begins after you explicitly click "Accept and Continue." You may decline at any time, and no data will be collected or processed.

9. Technical and セキュリティ Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encrypted data transmission (HTTPS/TLS)
  • Access controls limiting server access to authorized personnel only
  • Automated deletion scripts ensuring timely data removal
  • Regular security audits and vulnerability assessments

10. Children's プライバシー

Our service is not directed at children under the age of 14 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this プライバシーポリシー from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. お問い合わせ Us

If you have any questions, concerns, or requests regarding this プライバシーポリシー or our data practices, please contact us through our website at www.openidphoto.com.