Privacy Policy

At Last Min ID Photo (www.lastminidphoto.com), we are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data.

We operate in accordance with the Personal Data Protection Act (PDPA) of Singapore and other applicable data protection regulations.

1. Information We Collect

1.1 Photos You Upload

When you use our service, you upload photographs or selfies that are processed by our AI to generate your ID photo. These images temporarily pass through our systems and are processed to create your final photo.

1.2 Payment Information

When you purchase a photo, we collect:

• Email address: Required for payment processing and to send you your purchased photo
• Payment details: Processed securely through third-party payment processors (such as Stripe). We do not directly store your credit card or banking information

1.3 Device and Usage Information

We automatically collect certain information when you visit our website:

• Device type, operating system, and browser type
• IP address and general location information
• Pages visited and time spent on our site
• Referral source (how you found our website)

1.4 Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience, analyze site usage, and for analytics purposes. You can control cookie preferences through your browser settings.

2. How We Use Your Information

We use the information we collect to:

• Provide our service: Process your uploaded photos using AI to generate professional ID photos
• Process payments: Complete transactions and deliver your purchased photos via email
• Improve our service: Analyze usage patterns to enhance features and user experience
• Communicate with you: Send transactional emails (purchase confirmations, delivery of photos)
• Ensure security: Prevent fraud, abuse, and maintain the security of our platform
• Comply with legal obligations: Meet regulatory and legal requirements

3. How We Store and Process Your Data

3.1 Photo Storage

We use Supabase for secure cloud storage. Photos are deleted after a reasonable retention period to allow you to download your purchased photos. We do not retain your photos indefinitely.

3.2 AI Processing

Your photos are processed using the NanoBanana API, a third-party AI service. Photos sent to this service are used solely for generating your ID photo and are subject to their data processing practices.

3.3 Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (HTTPS) and secure storage practices. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

4. Data Sharing and Third Parties

We do not sell your personal data to third parties. We only share your information with:

• Payment processors: Such as Stripe, to process your payments securely
• Cloud storage providers: Supabase, for secure photo storage
• AI service providers: NanoBanana API, for photo processing
• Analytics providers: To help us understand website usage and improve our service
• Legal authorities: When required by law or to protect our legal rights

5. Cookies and Analytics

We use cookies and analytics tools to:

• Remember your preferences and settings
• Understand how visitors use our website
• Improve website performance and user experience
• Analyze traffic patterns and popular features

You can disable cookies through your browser settings, but this may affect your ability to use certain features of our service.

6. Your Rights

Under the PDPA (Singapore Personal Data Protection Act) and other applicable laws, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request corrections to inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal obligations)
• Withdraw consent: Withdraw your consent for data processing where applicable
• Object: Object to certain types of data processing

To exercise any of these rights, please contact us at artificialreply@gmail.com.

7. Data Retention

We retain your personal data only for as long as necessary to provide our service and comply with legal obligations. Uploaded photos are deleted automatically after a reasonable retention period. Payment and transaction records may be retained longer for accounting and legal purposes.

8. International Data Transfers

Our service operates from Singapore. Your data may be transferred to and processed in jurisdictions outside your country of residence, including by our third-party service providers. We ensure appropriate safeguards are in place to protect your data in accordance with applicable laws.

9. Children's Privacy

Our service is not intended for users under 18 years of age. If you are under 18, you must obtain parental or guardian consent before using our service. We do not knowingly collect personal data from children without appropriate consent.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically. Your continued use of our service after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: