Your photo, your session.

This preview release formats adult portraits with automatic white-background removal or the original background. It does not identify people, create identity embeddings, or train models on uploads.

Updated 15 October 2026. The data controller is Arete Digital OÜ, registry code 16442473, Endla tn 47-14, Kristiine Linnaosa, Tallinn, Harju maakond, 10615, Estonia. Contact support@aretedigital.ee for privacy or support requests.

Background removal stays in our worker

A pretrained portrait-matting model separates the person from the background and composites the result onto white. Processing runs inside our own worker, not an external photo-editing API. The uploaded original and editing copy remain unchanged by background removal. Models are bundled when the worker image is built; processing does not upload your photo to a model provider.

Hair, transparent items, clothing, and other edges can be cut incorrectly. Review the result before downloading or printing.

What the application stores

The uploaded image, a normalized editing copy, watermarked previews, finished JPEGs and print PDFs, your selected document profile, crop and background settings, limited check results, and opaque job/payment references. Files are private; the application does not create public sharing links. EXIF metadata is removed from generated images and is not included in print PDFs.

Why we use this information

We process the information necessary to provide the photo service you request and respond to service enquiries, including taking steps at your request and performing the service agreement. Our legitimate interests in securing and operating the service support limited operational logging and abuse prevention. We retain information required by applicable legal obligations where relevant. Do not upload another person's image without permission.

If you do not provide the image and essential session information, we cannot process or deliver your photo. Automated checks offer guidance; they do not make an identity-verification or government-acceptance decision about you.

Guest access, not an account

An essential, HttpOnly session cookie keeps browser photos separate. API clients use a bearer token. Tokens are stored hashed on the server. Keep this browser and its cookies: there is no email login, account recovery, or cross-device sync in this release.

Expiry and deletion

Original and editing-source access expires 24 hours after job creation. Preview and download access expires seven days after creation, not after checkout or an edit. Deleting a photo immediately revokes application access and queues file deletion. Cleanup runs periodically and depends on storage availability; it is not a promise of deletion at an exact minute. An existing write-only upload authorization can remain valid for up to 15 minutes from job creation; cleanup repeats after that window closes.

Azure lifecycle deletion provides a fallback. Expired photo reports and crop settings are cleared during cleanup. Opaque job and test-payment references may remain in the database; database backups follow the Azure SQL backup policy. The deployed operational-log workspace has 30-day retention. Support correspondence is kept as needed to handle the request, related follow-up, and applicable legal obligations.

Payments and logs

Local simulated payments never contact a payment provider. When configured, Stripe receives the product description, order references, and the information entered in its hosted test checkout, but not your photo. Only test-mode keys are accepted. Do not enter real card details or personal billing information in this preview.

The application does not use advertising or analytics cookies. Operational logs contain error types, release IDs, and opaque job IDs, not image bytes, authorization tokens, signed upload URLs, or filenames. Azure platform telemetry may also record request metadata.

Service providers and international processing

Microsoft Azure provides hosting, private storage, the database, queues, and operational monitoring. The current preview processes and stores photos in Azure Central US; a .ee company website does not mean EU-only hosting. Stripe processes the information you submit to its test checkout but does not receive the uploaded photo. Email providers process correspondence when you contact support.

These providers may process information outside the European Economic Area. Their applicable data-protection terms describe international-transfer safeguards, including standard contractual clauses where applicable: see the Microsoft data-protection addendum and Stripe data-processing agreement. Contact us for information about the safeguards relevant to your data.

Your rights and questions

Depending on applicable law, you may request access, correction, erasure, restriction, or portability of your personal data, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. These rights are subject to legal conditions; deleting a photo in the photo editor is the quickest way to revoke access.

Email support@aretedigital.ee. We may need proportionate information to locate the record and establish your entitlement, but do not send photos, identity documents, session credentials, or bank details unsolicited. You may complain to the Estonian Data Protection Inspectorate or your local data-protection authority.

Separate company website

The Arete Digital company website has its own privacy and optional-analytics notice. Its analytics consent does not enable analytics in ID Photo Prep.

See our terms, refund and delivery policy, and contact details. Live payments remain disabled.