EU privacy notice

Who is the controller

PhotoGovis the controller for personal data processed when you use the photo pipeline. The operator's contact details are listed under support@photogov.app. For privacy-specific requests use the same address with the subject line "GDPR request".

What personal data we process

• The photo you upload — processed in your browser, not transmitted to our servers during validation.
• The email you supply at checkout, used to deliver the processed files.
• Order metadata: the document type you chose, the package you bought, the amount, timestamps.
• If you sign in to retrieve a past order: hashed sign-in code and the timestamps of your login attempts.

Lawful basis

• Contract performance for order processing, file delivery, and refunds.
• Legitimate interest for fraud prevention and security logging.
• Legal obligation for tax records, refund disputes, and other regulator-mandated retention.
• Consent for any optional analytics or marketing; revocable at any time.

Your rights

As a data subject under GDPR you may request: access, correction, deletion (right to be forgotten), restriction, data portability, and the right to object to processing. Email support@photogov.appwith the subject "GDPR request" and we will respond within 30 days.

Retention

See the Security page for retention windows by data category. Personal data is deleted from active storage when its retention window expires, except where retention is legally required (e.g. tax records).

Transfers outside the EU/EEA

Some processors (e.g. email delivery, payment processing) are based outside the EU. Where applicable, transfers are covered by Standard Contractual Clauses (SCCs) or an equivalent mechanism.

Lodging a complaint

You have the right to lodge a complaint with your local data protection authority. A list of EU/EEA supervisory authorities is published by the European Data Protection Board (edpb.europa.eu).