Privacy Policy

Last updated: March 30, 2026. This is a template — have counsel review before production.

Who we are

DocReadyPix (support@docreadypix.com) operates this photo preparation service.

Data we collect

• Account identifiers (e.g., email) from Supabase Auth
• Uploaded images and generated exports stored in secure object storage
• Technical metadata (file size, MIME type, timestamps)
• Consent records with timestamps and policy versions
• Payment metadata from Stripe (we do not store full card numbers)
• Validation scores and notes produced by our preparation pipeline

Purposes

We process images solely to create, validate, and deliver your requested exports. We do not use your photos to train machine learning models. We do not sell biometric data.

Processors

Infrastructure may include Supabase (auth, database, storage), Vercel (hosting), Stripe (payments), Fal (optional generative image step, server-side only), Resend (transactional email), and analytics providers you configure (e.g., PostHog).

Retention

Original uploads are targeted for deletion after 24 hours. Generated assets are targeted for deletion after 72 hours unless you request different handling or applicable law requires otherwise. Cron jobs and scripts implement cleanup; verify in your environment.

Your rights

Depending on your region, you may have rights to access, correct, delete, or export personal data, and to object or restrict certain processing. EU users may contact us to exercise GDPR rights. California residents may use our data deletion / request flow for deletion requests.

Biometric / face data

We store only what is needed to fulfill your order. We do not use uploaded portraits for model training and do not sell biometric information.

Your uploaded images are processed only to create and validate your photo export. We do not use your images to train models.