Privacy Policy

Last updated: [DATE]

This policy explains how Your Company Ltd. ("we", "us"), operator of BoothShark, handles your personal data. Controller: Your Company Ltd., [ADDRESS], support@boothshark.com.

What we process and why

• Your photo. We process the photo you upload to create your passport or visa photo: we detect your face, remove the background, crop and check it. Background removal is done by Photoroom SAS (France), which receives the area of your photo around your head for this purpose only, as our processor. Legal basis: performance of a contract (Art. 6(1)(b) GDPR). Your photo shows your face; we do not use it to identify you, and we don't create or keep biometric templates.
• Payment data. Payments are handled by Stripe. We never see your full card details. Stripe processes your name, email and payment details as an independent controller; see Stripe's privacy policy.
• Technical data. Our server logs IP addresses and request details to keep the service secure and prevent abuse (legitimate interest, Art. 6(1)(f) GDPR). Logs are kept for up to [30] days.

How long we keep your photo

Photos you don't purchase are deleted automatically within 24 hours. Purchased photos are deleted 7 days after purchase so you can download them again.

Cookies

We don't use cookies, analytics or advertising trackers.

Who we share data with

Our hosting provider ([HOSTING PROVIDER, LOCATION]), Photoroom (background removal) and Stripe (payments). We don't sell your data or use your photo for training or any other purpose.

Your rights

You can request access, correction, deletion, restriction or portability of your data, and object to processing, by emailing support@boothshark.com. You may also complain to your data protection authority.