Privacy policy

What we collect

• The portrait photo you upload is sent to Google's AI image service only after your explicit consent to create the document photo. Small encrypted previews of the source and the result are retained for no more than 7 days, then deleted automatically; only the owner's password-protected dashboard can access them. If you decline, generation does not start.
• The preview does not require a payment card. Payment details are requested only after you have seen the result and ordered the digital HD set for 7.99 USD or 6.99 EUR, depending on your region; the card is charged in hryvnia at your bank's exchange rate.
• The result taken to checkout is encrypted and retained for up to 24 hours if unpaid, or up to 30 days after successful payment for download and support.
• Plata by mono processes card data. Anfas.Pro does not receive or store the full card number or CVV; we retain the order number, amount, status and technical payment identifiers.
• Basic analytics (page visits, country, browser) is collected by Plausible in aggregate, cookieless, and is not linked to your photo or email.
• Error reports are captured by Sentry without your photo, email, or payment data — only stack traces and request metadata.

Legal basis (GDPR)

Where portrait processing falls within GDPR Article 9, generation starts only after your explicit consent in the checkbox shown before the Generate button. The source and the result are sent to Google AI; small encrypted previews are retained for no more than 7 days for the password-protected owner dashboard and then deleted automatically. If you decline, no image is generated. You can withdraw before a future generation by leaving the checkbox unticked; send data-rights requests to privacy@anfas.pro.

What we do not do

• We do not sell, rent or share your photo with anyone other than the sub-processors listed below.
• Small encrypted previews are retained only after explicit generation consent and are automatically deleted within 7 days.
• We do not use your photo to train any model — Google's AI image service on a paid tier with abuse-review opt-out is configured to not train on your input.
• We do not send marketing emails unless you opt in explicitly.

Sub-processors

The following companies process your data on our behalf as GDPR data processors. Each has its own privacy policy, listed:

• Google LLC / Google Ireland Ltd (AI image service, United States) — runs the AI model that generates your document photo from the portrait you upload. Cross-border transfer is governed by EU Standard Contractual Clauses.
• Vercel Inc. (United States) — application hosting and serverless functions.
• Neon Inc. (United States) — storage for metrics, order data, encrypted short-lived previews and the encrypted selected result for the periods stated above.
• Universal Bank / Plata by mono (Ukraine) — acquiring and secure card-data processing.
• Plausible Analytics (Germany / EU) — cookieless aggregate page analytics.
• Sentry (United States) — server-side error reporting.

International data transfer

Your portrait photo is transmitted to Google's AI image service in the United States to generate the document photo. The transfer is covered by EU Standard Contractual Clauses (SCCs), and Google's processing is governed by the configured paid API project's terms. For checkout, only the selected result is separately encrypted and retained for up to 24 hours if unpaid or up to 30 days after successful payment.

Your rights

Under GDPR you can request a copy of any personal data we hold about you (Art. 15), correction (Art. 16), deletion (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and you may withdraw consent or object to processing (Art. 21) at any time. To exercise any of these rights, write to privacy@anfas.pro — we respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

Data controller

The data controller is ФОП Кравченко Євген Євгенович, tax ID 3475305692, Товариська вулиця, 60, Запоріжжя, Запорізька область, Україна, 69000. Email: privacy@anfas.pro.