Draft, awaiting legal review. This wording may change before IDshot takes its first order.

Who runs IDshot

IDshot is run by ValueCap LTDA. Questions about this page, and every request below, go to help@idshot.com.

The check stays on your device

The check runs in your browser. Your photo stays on this device while it is checked and sized and its background is made plain white, and nothing about it is sent to IDshot until you continue to checkout.

What is uploaded at checkout, and why

When you continue to checkout, three things are uploaded:

• the finished photo, the 600×600 file you download;
• a reduced copy of the photo as you took it, so the expert can compare the two;
• the measurements the check made: head height, eye height, the angle of your face, the light on it, how cleanly the background was separated, and the file's size.

When you pay, Paddle gives IDshot your email address, so the result and the photo can be sent to you.

Who sees your photo

Only the expert who reviews it, on a page behind a password. The emails that tell the expert an order is waiting carry a link to it, never the photo.

When it is deleted

• The photos and the measurements: 24 hours after the expert's result.
• An order that is refunded or closed: 24 hours after it closes.
• A checkout that was never paid: 24 hours after it started, photos included.
• A visit, with its pages and clicks: 90 days after it.
• The record of each email IDshot sends you, which keeps the address, the subject and when it was sent: 90 days after it is sent.

What stays is the order's reference, your email address, the expert's result and the dates, so the money-back promise can be honoured. Your photo is never used to train anything.

Payment

Paddle handles the payment as the seller of record and holds your payment details. IDshot never sees your card number. Paddle's notice that you paid, which names the card's type and its last four digits, is deleted 30 days after it is processed.

Visits and clicks

IDshot's own server records each visit to its pages: the site or campaign that sent you, your browser and device, your IP address with its last part removed, the pages you view and the buttons and links you click. It holds nothing about your photo, and no one else receives it. Two cookies tell one visit from another: ahoy_visit, which lasts four hours, and ahoy_visitor, which lasts 90 days. When you pay, the order is linked to the visit that led to it.

Counts

IDshot also counts how many times each step of the flow is reached each day, for each document: how many photos were checked, how many passed, how many orders were paid. A count carries no photo, no address and nothing else that identifies who reached the step. Besides the two cookies above, one cookie keeps the pages working, such as a message carried from one page to the next.

Where it is kept

IDshot's servers are rented from Hetzner. Emails go out through Amazon Web Services.

A copy, or an early deletion

To ask for a copy of what IDshot holds about you, or to have it deleted before the times above, write to help@idshot.com with your order's reference.