Privacy Policy

IDPicly, a service operated by NiviAI Ops LLC ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service"). Please read this Privacy Policy carefully. By using the Service, you consent to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide when using our Service, including:

• Photographs: Images you upload for passport photo processing
• Payment Information: When you make a purchase, our payment processor (Stripe) collects payment card details. We do not store complete credit card numbers on our servers.
• Contact Information: If you contact us for support, we may collect your email address and any information you provide in your communications

1.2 Information Collected Automatically

When you access our Service, we may automatically collect certain information, including:

• Device Information: Browser type, operating system, device type
• Usage Data: Pages visited, time spent on pages, click patterns
• IP Address: Your Internet Protocol address for security and fraud prevention
• Cookies and Similar Technologies: Small data files stored on your device (see Section 6)

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To process your photos, complete transactions, and deliver the Service you requested
• Communication: To respond to your inquiries, provide customer support, and send Service-related notices
• Improvement: To analyze usage patterns and improve our Service, features, and user experience
• Security: To detect, prevent, and address fraud, unauthorized access, and other illegal activities
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

3. Photo Processing and Storage

4. Biometric Information Notice

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:

4.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our Service, including:

• Payment Processing: Stripe processes payments on our behalf and is subject to their own privacy policy
• Cloud Hosting: Our servers are hosted on secure cloud infrastructure
• Analytics: We may use analytics services to understand Service usage (data is anonymized)

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), including to:

• Comply with a legal obligation
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of users of the Service or the public

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Service of any change in ownership or uses of your personal information.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmission
• Encrypted storage for sensitive data
• Regular security assessments and updates
• Access controls limiting employee access to personal data
• Secure cloud infrastructure with industry-standard protections

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with a small amount of data that are sent to your browser from a website and stored on your device.

Types of cookies we use:

• Essential Cookies: Required for the Service to function properly
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how visitors use our Service

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

8. Do Not Track Signals

Some browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activity tracked. Our Service does not currently respond to DNT signals. However, you can control cookies through your browser settings and opt out of analytics tracking as described in Section 7 above.

9. Automated Processing

Our Service uses automated processing to analyze and format your photographs. This includes:

• Automated face detection to ensure proper positioning
• Automated background removal and replacement
• Automated sizing and cropping to meet specifications
• Automated compliance checking against published requirements

These automated processes do not make decisions that have legal or similarly significant effects on you. The output is a formatted photograph that you choose whether to use. We do not use automated decision-making for profiling or other purposes.

10. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate or incomplete information
• Deletion: Request that we delete your personal information (subject to certain exceptions)
• Portability: Request a copy of your data in a machine-readable format
• Opt-Out: Opt out of certain data processing activities, including marketing communications

To exercise any of these rights, please contact us at support@idpicly.com. We will respond to your request within thirty (30) days.

11. Children's Privacy

Our Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children under 13 without verification of parental consent, we will take steps to remove that information from our servers.

For users between 13 and 18, we recommend that a parent or guardian supervise the use of our Service and the uploading of any photographs.

12. International Data Transfers

Our Service is operated in the United States. If you are located outside the United States and choose to provide information to us, please note that we transfer the information, including personal information, to the United States and process it there.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

13. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Right to Opt-Out: You have the right to opt-out of the sale of your personal information. Note: We do not sell personal information.

14. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your personal data based on your consent, contractual necessity, or our legitimate interests
• Data Protection Rights: You have the right to access, rectify, erase, restrict processing, object to processing, and data portability
• Withdraw Consent: You may withdraw your consent at any time where we rely on consent to process your personal data
• Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority

15. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected:

• Photos: Never stored — processed in memory only and immediately discarded after processing
• Transaction Records: Retained for 7 years for accounting and legal purposes
• Support Communications: Retained for 2 years after resolution
• Analytics Data: Anonymized and aggregated data may be retained indefinitely

16. Third-Party Links

Our Service may contain links to third-party websites or services that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

17. Limitation of Liability

While we implement reasonable security measures, no data transmission or storage system can be guaranteed 100% secure. In the event of a data breach:

• We will notify affected users as required by applicable law
• We will take reasonable steps to mitigate any harm
• Our liability is limited as set forth in our Terms of Service

TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING FROM ANY DATA BREACH OR UNAUTHORIZED ACCESS TO YOUR INFORMATION.

18. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. Your continued use of the Service after we post any modifications to the Privacy Policy will constitute your acknowledgment of the modifications and your consent to abide by the modified Privacy Policy.

19. Contact Us

If you have any questions about this Privacy Policy, your personal information, or wish to exercise your privacy rights, please contact us: