Privacy policy

What we collect

• The portrait photo you upload is sent to Google's AI image service only after your explicit consent to create the document photo. Small encrypted previews of the source and the result are retained for no more than 7 days, then deleted automatically; only the owner's password-protected dashboard can access them. If you decline, generation does not start.
• The second photo variant is produced by a second AI model — GPT-Image-2.5 from OpenAI; the request reaches it through a compatible gateway, router.cheap. Your portrait is sent there on the same terms as to Google: only after your explicit consent and only to create the document photo. We do not separately confirm the terms of this route — we have no public information about how the gateway handles the image.
• The preview does not require a payment card. Payment details are requested only after you have seen the result and ordered the digital HD set for €5.99; the invoice is in euros, and if your card is in another currency, your bank converts the amount at its own rate.
• The result taken to checkout is encrypted and retained for up to 24 hours if unpaid, or up to 30 days after successful payment for download and support.
• The link to a finished result — so you can come back to the photo, pay another way or share it — keeps the finished photo (never the source selfie) encrypted for up to 24 hours. Anyone who has the link can open it; you can delete it earlier on the result page.
• Plata by mono processes card data. Anfas.Pro does not receive or store the full card number or CVV; we retain the order number, amount, status and technical payment identifiers.
• Basic analytics (page visits, country, browser and site actions) is collected by Plausible only with your analytics consent, in aggregate and without cookies; it is not linked to your photo or email.
• Advertising measurement uses Yandex Metrica only with your marketing consent. Cookies, pseudonymous browser identifiers (ClientID) and ad-click identifiers (yclid) link page visits, site actions and confirmed payments to advertising; payments include the actual amount and currency. We retain advertising attribution for up to 21 days. Webvisor and session recording are disabled; photos, email addresses, card data and access keys are not sent to analytics. We do not sell data. Your cookie choices are stored for up to 180 days; you can withdraw your consent using the footer settings.
• Error reports are captured by Sentry without your photo, email, or payment data — only stack traces and request metadata.

Legal basis (GDPR)

Where portrait processing falls within GDPR Article 9, generation starts only after your explicit consent in the checkbox shown before the Generate button. The source and the result are sent to Google AI; small encrypted previews are retained for no more than 7 days for the password-protected owner dashboard and then deleted automatically. The same consent covers sending the portrait to the second processor — GPT-Image-2.5 from OpenAI, reached through the router.cheap gateway — which produces the second photo variant. Without consent no request goes to either model and no image is generated. You can withdraw before a future generation by leaving the checkbox unticked; send data-rights requests to privacy@anfas.pro.

What we do not do

• We do not sell, rent or share your photo with anyone other than the sub-processors listed below.
• Small encrypted previews are retained only after explicit generation consent and are automatically deleted within 7 days.
• We do not use your photo to train any model — Google's AI image service on a paid tier with abuse-review opt-out is configured to not train on your input.
• We make no such promise for the second route: we found no public documentation from the router.cheap gateway on how long images are kept or whether they are used for training, so we do not separately confirm its terms. We ourselves do not use your portrait to train models on either route.
• We do not send marketing emails unless you opt in explicitly.

Sub-processors

The following companies process your data on our behalf as GDPR data processors. Each has its own privacy policy, except the gateway noted separately below:

• Google LLC / Google Ireland Ltd (AI image service, United States) — runs the AI model that generates your document photo from the portrait you upload. Cross-border transfer is governed by EU Standard Contractual Clauses.
• OpenAI (GPT-Image-2.5 image model, United States) — produces the second variant of your document photo from the same portrait.
• router.cheap (compatible gateway to the image model; its legal entity and country are unknown to us) — the request for the second variant passes through it, so there is an intermediary in the chain. We found no public documentation of its terms — retention periods, use of images — and we do not separately confirm them.
• Vercel Inc. (United States) — application hosting and serverless functions.
• Neon Inc. (United States) — storage for metrics, order data, encrypted short-lived previews and the encrypted selected result for the periods stated above.
• Universal Bank / Plata by mono (Ukraine) — acquiring and secure card-data processing.
• Plausible Analytics (Germany / EU) — cookieless aggregate analytics only with analytics consent.
• Yandex Metrica — advertising measurement using cookies and pseudonymous identifiers only with marketing consent.
• Sentry (United States) — server-side error reporting.

International data transfer

Your portrait photo is transmitted to Google's AI image service in the United States to generate the document photo. The transfer is covered by EU Standard Contractual Clauses (SCCs), and Google's processing is governed by the configured paid API project's terms. The second variant is produced by GPT-Image-2.5 from OpenAI, so the portrait is transmitted to the United States for that too, through the router.cheap gateway. For that route we cannot point to separately verified contractual terms and we do not confirm them on the intermediary's behalf; the consent you give before generation covers this transfer as well. For checkout, only the selected result is separately encrypted and retained for up to 24 hours if unpaid or up to 30 days after successful payment.

Your rights

Under GDPR you can request a copy of any personal data we hold about you (Art. 15), correction (Art. 16), deletion (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and you may withdraw consent or object to processing (Art. 21) at any time. To exercise any of these rights, write to privacy@anfas.pro — we respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

Data controller

The data controller is the operator of Anfas.Pro; full seller identification is published in the Terms of Service. Email: privacy@anfas.pro.