Privacy Policy

Depending on how you use the Service, we may process:

• Account data: email, credentials, profile information (if you create an account).
• Imported contacts (optional): if you connect Google Contacts from an invite tool, names and email addresses for contacts that include an email address.
• Order data: order number, payment status, purchase history, invoicing details.
• Uploaded photos: selfies / candidate photos you upload.
• Produced outputs: final portrait, previews (e.g., watermarked), printable boards, compliance reports.
• Support and refunds: messages, feedback, attachments you provide.
• Technical data: cookies and session data, IP address, user-agent, logs, anti-abuse signals.

Payment card details are not stored by YapaPhoto; they are processed by the payment processor.

We use personal data to:

• Provide the Service: upload, same-person verification, produce outputs and run compliance checks, delivery of files.
• Fulfill orders: payments, invoices, access to downloads.
• Support your invite flows: if you connect Google Contacts, keep an imported address book inside your account so you can reuse your own contacts later.
• YapaPhoto marketing: only for people who directly opt in to YapaPhoto communications. Imported address-book contacts do not automatically become YapaPhoto marketing contacts.
• Support and refunds: respond to requests and handle complaints.
• Security: fraud prevention, protecting the Service, abuse detection.
• Legal compliance: accounting, dispute handling, regulatory obligations.

We may use third-party service providers (processors) to operate the Service. Categories typically include:

• Payments (third-party payment processor).
• Hosting and storage (servers, file storage, CDN).
• Email delivery (transactional and support emails).
• Face verification / image production (technical services used to verify and produce outputs).

These providers only access personal data as necessary to provide their services, under appropriate contractual commitments.

We retain personal data for as long as needed to provide the Service, provide access to purchased files, and handle support/refund requests. We then delete or anonymize it when it is no longer needed, subject to legal obligations (for example, accounting and invoicing).

Imported contacts stored in your account are retained for your later use while the feature remains active, or until you delete them or disconnect the import. YapaPhoto marketing contacts are kept in a separate audience based only on direct consent to hear from YapaPhoto.

Access to downloads may be time-limited. Data necessary to evidence purchases and meet legal obligations may be retained longer.

The Service uses cookies and/or local storage required for core functionality (session, security, authentication, CSRF protection, preferences).

You can configure your browser to block certain cookies; in that case, some features may not work properly.

Depending on applicable law, you may have rights to access, correct, delete, restrict, or object to the processing of your personal data.

For privacy-related requests, contact [email protected].

See also our Terms and Conditions.