Last updated · April 17, 2026
Privacy policy
This policy explains what personal data we process, why, for how long, and what rights you have.
1. Data controller
The controller of your personal data is fotododowodu.pl, registered in Wroclaw, Poland (NIP: 854-209-84-07). Data-protection contact: kontakt@docphotoai.com.
2. What data we process
We process: (a) the photo you upload, including your facial image, biometric data within the meaning of Art. 9 GDPR; (b) facial analysis output (eye position, proportions) needed to produce a compliant photo; (c) the order identifier and payment status; (d) IP address and device type (technical logs); (e) optionally, your email address if you provide it for payment receipts.
3. Legal basis and purpose
(a) Performance of the service contract. Art. 6(1)(b) GDPR (photo generation). (b) Processing of biometric data (facial image). Art. 9(2)(a) GDPR (your explicit consent, expressed by uploading the photo). (c) Legal obligations (accounting, VAT). Art. 6(1)(c) GDPR. (d) Claims defence, if applicable. Art. 6(1)(f) GDPR (legitimate interest).
4. Retention
Photos (original and processed) and facial analysis results are automatically deleted from our servers 24 hours after generation. Transactional data (order ID, date, amount) is retained for 5 years, per Polish tax law. Technical logs. 30 days.
5. Recipients (processors)
Your data may be shared with the following processors, bound by data processing agreements: (a) FAL.AI, Inc. (USA). AI model provider for background removal and enhancement. Non-EEA transfer under Standard Contractual Clauses (SCCs). (b) Stripe Payments Europe Ltd. (Ireland), payment processing (BLIK, Przelewy24, cards). (c) Hosting provider, servers located in the EU.
6. International transfers
Photo processing by FAL.AI occurs on US servers. Transfers are based on Standard Contractual Clauses approved by the European Commission. Data is deleted after processing completes (usually within minutes).
7. Your rights
You have the right to: (a) access your data; (b) rectification; (c) erasure ("right to be forgotten"); (d) restriction of processing; (e) data portability; (f) objection to processing; (g) withdrawal of consent at any time (without affecting the lawfulness of prior processing); (h) complaint to the President of the Personal Data Protection Office (uodo.gov.pl).
8. Cookies
We use essential cookies (session, language preference, consent state) and, with your consent, analytics cookies. Details in the cookie banner available on the homepage.
9. Automated processing
The service involves automated processing of your image (cropping, background removal, compliance assessment). This processing is necessary to perform the contract and produces no legal effects beyond delivery of the ordered file. You may request human review, contact kontakt@docphotoai.com.
10. Policy changes
This policy may be updated. Material changes will be announced on the homepage. The current version is always available at docphotoai.com/polityka-prywatnosci.