🛡️ Global Privacy & Data Protection Standard

Privacy Policy

Last Updated & Effective Date: March 2026 • Strict Global Compliance with GDPR, CCPA/CPRA, and International Biometric Privacy Standards

Core Privacy Commitment: dopic.app operates under a strict "Privacy-by-Design" architecture. Core image processing is executed directly inside your local browser memory. For advanced cloud AI routines, we employ strictly ephemeral, stateless computation. We guarantee: no biometric templates are ever recorded, zero photos are retained on our servers, and your images are never used to train artificial intelligence models.

1. Architectural Tiers & Data Flow Principles

dopic.app processes your imagery through a distinct multi-tier routing architecture engineered to minimize data transmission:

Tier 1 — Client-Side Local Processing (Default): Standard utilities—including image cropping, dimensions resizing, file format conversions (PNG/JPG/WEBP), watermark placement, QR code generation, and long-image stitching—operate 100% locally within your device's browser memory (via HTML5 Canvas, WebAssembly, and Web Workers). Your images never leave your computer or smartphone.
Tier 2 & Tier 3 — Stateless Ephemeral AI Inference: For advanced portrait background removal, AI cutout (BiRefNet/MODNet), and photo restoration (GFPGAN/Gemini), image data is transmitted via secure TLS 1.3 encrypted channels to stateless processing workers. Once the target mask or enhanced photo is synthesized and delivered to your client session, the temporary memory buffer is destroyed immediately.
Strict No-Training Warranty: We explicitly warrant that user photos, face images, and uploaded assets are never harvested, pooled, or utilized to train, retrain, or fine-tune machine learning or AI models.

2. Biometric Data & Facial Geometry Protections (GDPR Art. 9 & BIPA)

To uphold the highest global standards (including European Union GDPR Article 9 and the Illinois Biometric Information Privacy Act):

We do not collect, extract, capture, store, or sell biometric identifiers or biometric information (such as facial geometry scans, retinal scans, or fingerprint records);
Passport head-ratio alignment guides (e.g., ICAO 50%-69% oval frames) operate purely as geometric visual reference overlays and do not compute or record facial identity points;
No facial recognition algorithms or user-profiling systems are deployed across our services.

3. Technical Identifiers & Minimal Local Storage

We do not require user account registration for standard utilities. We collect only minimal technical parameters essential to service operation:

Country & Language Preference: To display relevant consular document guidelines (e.g., US Passport, Schengen Visa, Vietnam 4x6cm) and localized UI text, our edge gateway reads your browser's language headers and coarse regional IP location.
Local Storage: Minimal preference tokens (e.g., selected country code, preferred UI language, Pro license keys, and cookie consent state) are retained within your device's browser localStorage for your convenience.

4. Authorized Sub-Processors & Third-Party Service Providers

We partner exclusively with reputable international service providers who adhere to strict data security frameworks:

Cloudflare, Inc. (United States / Global): Global Content Delivery Network (CDN), edge routing, and DDoS mitigation infrastructure;
Paddle.com Market Ltd. (United Kingdom / Global): Our authorized Merchant of Record (MoR) managing encrypted checkout, localized currencies, billing processing, and statutory sales tax/VAT compliance;
Google AdSense (United States / Global): Serves non-sensitive sponsored display advertisements to sustain free access to high-resolution 300 DPI exports. Advertisers have zero technical access to your uploaded images or facial portraits.

5. User Rights Under GDPR, CCPA/CPRA, and Global Privacy Frameworks

Regardless of your geographic location, you retain comprehensive rights regarding your digital interaction with dopic.app:

Right to Erasure & Session Discard: You may discard any uploaded photo at any time simply by resetting the tool or closing the browser tab;
Right to Clear Preferences: You may purge all local storage configurations and cached tokens through your browser settings;
Right to Non-Discrimination: We never deny services or charge discriminatory rates to users who exercise statutory privacy protections;
Zero Data Sale: We maintain a strict policy: we do not sell, rent, or trade personal data to third-party data brokers or marketing lists.

6. Protection of Minors

We do not knowingly collect personal information from children under the age of 16. If a minor utilizes our utilities to prepare identity photos for student cards or examination permits, we mandate that such processing occur under the supervision and consent of a parent or legal guardian.

7. Security Safeguards, Updates & Compliance Contact

All network traffic across dopic.app is strictly protected by modern HTTPS / TLS 1.3 end-to-end encryption. We review and update this Privacy Policy periodically to maintain alignment with international regulatory updates. Any revisions will be published here with a renewed effective date. If you have any inquiries regarding data protection, please contact our privacy compliance team via our official support channels.