Privacy Policy
How PhotoForPass collects, uses, stores and protects your personal information and photos, and your privacy rights under US state laws, CCPA/CPRA, GDPR and UK GDPR.
Effective date: November 8, 2026
This Privacy Policy explains how HELPERG LLC (“PhotoForPass”, “we”, “us” or “our”) collects, uses, shares and protects personal information when you use photoforpass.com and related services (the “Service”). The Service turns a photo into a passport, visa or ID photo sized for the document you select, and also creates keepsake portraits and cards from your photos.
We wrote this policy in plain English. If anything is unclear, email us at contact@photoforpass.com.
Summary
- Your photos are used only to make what you ordered. We never sell your photos, never use them to train AI models, and never use them to identify you.
- Before you pay, your photo stays on your device. The free photo check runs in your browser.
- After you pay, your photo is processed by automated tools, including third-party AI image models, to edit it or create your portraits.
- Photos are deleted automatically after 90 days, and you can delete them sooner from “My photos”.
- Payments are handled by Stripe. We never see or store your full card number.
- Analytics and marketing tags stay off until you say yes. We honor Global Privacy Control signals.
- You have rights to access, correct, delete and port your data, and to opt out of certain uses. See Your privacy rights.
Contents
- Who we are
- Information we collect
- How we use your information
- How your photos are processed
- Legal bases for processing (EEA, UK and Switzerland)
- How we share information
- Subprocessors
- Cookies, analytics and similar technologies
- Data retention
- Security
- International data transfers
- Your privacy rights
- California privacy notice (CCPA/CPRA)
- Other US state privacy rights
- Children’s privacy
- Automated processing
- Languages
- Changes to this policy
- Contact us
Who we are
The Service is operated by HELPERG LLC, a Wyoming limited liability company, 30 N Gould St, Ste N, Sheridan, WY 82801, USA.
For the purposes of the EU General Data Protection Regulation (“GDPR”), the UK GDPR and similar laws, HELPERG LLC is the controller of the personal information described in this policy.
We are an independent private company. We are not affiliated with, endorsed by, or acting on behalf of any government agency, including the U.S. Department of State or any passport, visa or immigration authority.
Information we collect
We collect only what we need to run the Service.
Information you give us
| What | Examples | When |
|---|---|---|
| Photos | The photo you upload or take in your browser. This can include photos of your child, your family, a partner, a loved one who has passed away, or a pet, depending on what you order | When you place an order. Before payment, the photo stays in your browser |
| Order choices | The document or product you choose (for example, US passport, Photo with Santa), the template or style, and the greeting text on a card | When you use the Service |
| Contact details | Email address | At checkout, or when you sign in |
| Account details (optional) | Email address, and if you use Google sign-in, your name and profile picture from your Google account | When you create an account |
| Support messages | What you write to us, and any attachments you choose to send (for example, a rejection letter) | When you contact us or request a refund |
Information created when you use the Service
| What | Examples |
|---|---|
| Edited and generated images | Your finished document photo, print sheets, keepsake portraits and cards |
| Check results | Automated results such as “face too dark” or “head not centered” |
| Order records | Order number, product, price, discount used, date, payment status, number of checks and regenerations used, refund status, your country |
| Consent records | That you agreed to the Terms and to photo processing, when, and which version |
| Payment information from Stripe | Payment confirmation, card brand, last four digits, card country, and fraud-risk signals. We never receive your full card number or security code |
Information collected automatically
| What | Examples | Notes |
|---|---|---|
| Device and log data | IP address, browser type, operating system, pages requested, date and time, errors | Processed by Cloudflare, our hosting provider, for delivery, security, rate limiting and bot protection |
| Approximate location | Country or region derived from your IP address | Used to show the right documents and notices, prevent fraud, and in our internal order notifications. We do not collect precise GPS location |
| Bot protection signals | Browser and device signals collected by Cloudflare Turnstile | Used to tell people from automated abuse |
| Marketing attribution | The campaign tags in the link that brought you to us (such as source, medium and campaign name), the referring website, the first page you landed on, and whether the link contained an ad click identifier (we keep only a yes or no flag, not the identifier itself) | Stored in your browser (pfp_attr) and attached to your sign-up or order so we know which channels work |
| Anonymous page counters | Page views and button clicks, page path, language, referring site name, campaign tags, and a random tab ID that is deleted when you close the tab | Our own first-party statistics. They do not include your IP address or any persistent identifier |
| Analytics data (only with your consent) | Pages viewed, clicks, scrolls, time on page, device type, a pseudonymous analytics ID | Google Analytics 4 and Microsoft Clarity. See Cookies, analytics and similar technologies |
| Session replay data (only with your consent) | Mouse movements, clicks, scrolls and page layout, recorded by Microsoft Clarity | Text you type into forms is masked. The photo capture and preview areas are masked, so your photos are not captured in recordings |
Information from third parties
- Google, if you choose Google sign-in: your name, email address and profile picture URL, through Google Firebase Authentication. We do not use your Google profile picture to make photos.
- Stripe: payment status and the limited payment details listed above.
How we use your information
We use personal information to:
- Provide the Service: check your photo, edit it (background, lighting and framing), size it to the document specification, create keepsake portraits and cards from it, deliver your files, and let you re-check or regenerate within your order limits.
- Process payments, discounts and refunds, and prevent payment fraud.
- Send transactional emails: receipts, download links, sign-in links, and replies to support requests. We do not currently send marketing emails. If we start, we will ask for your consent where the law requires it, and every marketing email will include an unsubscribe link.
- Manage your account, if you create one, including showing your photos in “My photos”.
- Provide customer support and handle refund requests.
- Keep the Service secure: block bots and abuse, enforce usage limits, and detect fraud and attempts to create fraudulent documents or misuse someone’s image.
- Run our business: our owner receives private notifications about new orders, sign-ups and refunds, with your email address partly masked, your country, and the marketing source. These notifications never include photos.
- Understand and improve the Service using our anonymous page counters and, with your consent, analytics. This means improving pages and flows. It does not mean training AI models on your photos.
- Comply with the law: keep tax and accounting records, respond to valid legal requests, report apparent child sexual abuse material to the National Center for Missing and Exploited Children as US law requires, and enforce our Terms of Service.
How your photos are processed
Some laws treat face photos, or information derived from them, as biometric information or sensitive personal information. This includes the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act (CUBI), Washington biometric privacy law, Colorado law, the California Consumer Privacy Act as amended by the CPRA (CCPA), and the GDPR in some situations. Here is exactly what happens.
Before you pay
- Our free photo check runs in your browser. It looks at things like lighting, focus, background and head position. Your photo is not uploaded to us at this stage.
After you pay
- Your photo is uploaded over an encrypted connection and stored in Cloudflare R2 object storage in the United States.
- Our automated tools detect where the face is in the image (its position, size and tilt) so it can be centered, sized and cropped to the document’s rules.
- Your photo is sent, with fixed instructions we write, to a third-party AI model through an AI gateway (OpenRouter, which routes the request to Google Gemini models). Depending on what you ordered, the model edits the background, lighting and framing of a document photo, or creates new keepsake images, such as Christmas portraits or a photo with Santa, that show the people in your photo.
- Automated checks may also use an AI model to review the result, including comparing the finished image with your original photo to confirm that the person’s appearance was not changed and that the result meets the specification.
- We ask the AI gateway to use only providers that do not collect or store request data for their own purposes (OpenRouter’s “data collection: deny” setting).
What we do not do
- We do not create face templates, faceprints or face geometry scans to recognize or identify anyone.
- We do not compare your face against any database or against photos of other people. The only comparison is between your original photo and the image made from it, within your own order.
- We do not use your photos to train or improve AI models, and our AI providers process them under terms that do not allow training on them.
- We do not sell, lease, trade or otherwise profit from your photos or any information derived from them, other than by charging you for the order you placed.
Before you upload a photo, we ask for your consent to this processing. Our Biometric Data Notice explains our retention schedule and destruction policy in more detail. In short, uploaded photos and generated files are permanently deleted 90 days after they are stored, or sooner if you delete them.
Legal bases for processing (EEA, UK and Switzerland)
The Service is designed for customers in the United States. If you use it from the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases:
| Purpose | Legal basis |
|---|---|
| Checking, editing and generating images from your photos, and delivering them | Contract (Art. 6(1)(b) GDPR): needed to provide what you ordered. We also ask for your explicit consent before you upload a photo, as an extra safeguard |
| Processing payments, discounts and refunds | Contract |
| Transactional emails and account management | Contract |
| Customer support | Contract and legitimate interests in helping you |
| Fraud prevention, bot protection and security, including Stripe fraud signals and Cloudflare Turnstile | Legitimate interests in protecting our users, our business and the integrity of identity documents |
| Internal order notifications, marketing attribution and anonymous page counters | Legitimate interests in running and understanding our business |
| Analytics and marketing measurement (Google Analytics 4 with Google signals, Microsoft Clarity) | Consent (Art. 6(1)(a) GDPR and ePrivacy rules). You can withdraw consent at any time |
| Cookieless pings sent by Google tags when you have not consented | Legitimate interests in aggregated measurement. You can block them by turning on Global Privacy Control or using a tracker blocker |
| Tax, accounting and legal compliance | Legal obligation (Art. 6(1)(c) GDPR) |
| Enforcing our terms and defending legal claims | Legitimate interests |
Under the GDPR, an ordinary photograph is only “biometric data” when it is processed through specific technical means that allow unique identification of a person. We do not process your photo to identify anyone. Even so, we treat photos with the same care as special category data and ask for your explicit consent before processing.
Where we rely on legitimate interests, you have the right to object. Where we rely on consent, you can withdraw it at any time without affecting processing that happened before you withdrew it. If you withdraw consent to photo processing before we finish your order, we cannot complete the order, and you can ask for a refund under our Refund Policy.
How we share information
We share personal information only as described here:
- Service providers and processors that help us run the Service, under terms that limit their use of your data to providing services to us. See Subprocessors.
- Stripe, for payments. For some features, such as Stripe Link, Stripe acts as an independent controller under its own privacy policy.
- Analytics providers (Google and Microsoft), only for analytics and marketing measurement, and only with your consent, except for the limited cookieless pings described in Cookies, analytics and similar technologies.
- Legal and safety reasons: when we believe in good faith that disclosure is required by law, subpoena or court order, or is needed to protect the rights, property or safety of our users, the public or us, including to investigate suspected document fraud or to report apparent child sexual abuse material.
- Business transfers: if we are involved in a merger, acquisition, financing or sale of assets, personal information may be transferred as part of that deal. We will require the recipient to honor this policy, and photos will remain subject to the 90-day deletion schedule.
- With your direction: when you ask us to share something.
We never sell your photos or share them for advertising.
Subprocessors
These companies process personal information on our behalf. We will update this list before adding a new subprocessor that handles photos.
| Subprocessor | Purpose | Data involved | Location |
|---|---|---|---|
| Cloudflare, Inc. | Website hosting and processing (Workers, Workflows), photo storage (R2), database (D1), image resizing (Images), bot protection (Turnstile), rate limiting, server logs | Photos and generated files, account and order records, IP address, device and log data, bot protection signals | Stored data in the United States. Requests pass through Cloudflare’s global network and may be handled in the data center closest to you |
| Google LLC (Firebase Authentication) | Sign-in with email link or Google account | Email address, name and profile picture (Google sign-in only), account ID, IP address and device data used for sign-in security | United States and other countries where Google operates |
| Stripe, Inc. | Payment processing, Apple Pay, Google Pay, Link, fraud prevention | Email, payment details, device and fraud signals | United States and other countries where Stripe operates |
| OpenRouter, Inc. | AI gateway that routes image requests to AI models | Photos and fixed processing instructions, in transit for processing | United States |
| Google LLC (Gemini models) | AI image editing, portrait creation and automated quality review | Photos, in transit for processing | United States and other countries where Google operates |
| Google LLC (Google Analytics 4) | Website analytics and marketing measurement, with consent | Analytics data, online identifiers, approximate location | United States and other countries where Google operates |
| Microsoft Corporation (Microsoft Clarity) | Heatmaps and session replay, with consent | Analytics and session replay data, online identifiers | United States and other countries where Microsoft operates |
| Resend | Sending transactional emails | Email address, email content (receipts, download links) | United States |
| Telegram | Private, owner-only operational notifications about orders, sign-ups and refunds | Partly masked email address, country, marketing source and campaign, order details. No photos | Telegram’s servers in multiple countries |
AI processing providers may keep request data for a short period for abuse monitoring or legal compliance where their terms allow, but they may not use your photos to train their models.
Cookies, analytics and similar technologies
We use cookies and similar technologies (such as local storage and session storage) to make the Service work and, with your permission, to understand how people use it.
- Strictly necessary items (your consent choice, your sign-in session, Firebase sign-in data, Stripe fraud prevention and Cloudflare bot protection) are always on, because the Service cannot work safely without them.
- Functional and first-party items (welcome offer timer, marketing attribution, and the random tab ID for our anonymous page counters) stay in your browser or are sent only to us. We do not share them with advertising companies.
- Analytics (Google Analytics 4 and Microsoft Clarity) is off until you accept it.
- Marketing is off until you accept it. If you accept both analytics and marketing, Google Analytics may use Google signals, which lets Google associate your visit with your Google account, if you are signed in to Google and have allowed ad personalization in your Google settings, for cross-device reports and advertising measurement.
- Google Consent Mode. Google’s tag loads on every page with all analytics and advertising storage set to “denied” until you choose. While consent is denied, the tag does not set or read analytics cookies, but it may send Google cookieless pings (for example, the page, time, browser type and your consent status, plus the IP address that every internet request carries), which Google uses for aggregated modeling. While consent is denied, ad click identifiers may also be passed between our pages in the page address instead of in cookies.
- Global Privacy Control (GPC): if your browser sends a GPC signal, analytics and marketing stay off and cannot be turned on from our cookie settings while GPC is on. We treat GPC as a request to opt out of any sale or sharing of your personal information.
The full list of cookies and storage items, with their providers, purposes and durations, is in our Cookie Policy. You can change your choices at any time with “Cookie settings” in the site footer.
Data retention
We keep personal information only as long as we need it for the purposes in this policy.
| Data | How long we keep it |
|---|---|
| Photos during the free check before payment | Not sent to us. They stay in your browser |
| Uploaded photos (Cloudflare R2) | Automatically and permanently deleted 90 days after upload, or sooner if you delete them in “My photos” or ask us to |
| Generated files (document photos, print sheets, portraits, cards) | Automatically and permanently deleted 90 days after they are created, or sooner if you delete them |
| Face position data and check results for a photo | Used during processing and deleted with the photo, at the latest |
| Account details (Firebase Authentication and our database) | Until you delete your account or ask us to delete it |
| Order and payment records (no photos) | As required for accounting and tax purposes, up to 7 years after the order |
| Consent records (no photos) | As long as the related order or account record |
| Marketing attribution attached to an order or account | With the order or account record it is attached to |
| Support messages and refund requests | Up to 3 years after the conversation ends, unless we need them longer for a legal claim. Attachments that show a face are deleted within 90 days |
| Server logs (Cloudflare) | Up to 30 days |
| Email delivery logs (Resend) | According to Resend’s log retention, up to 30 days |
| Owner notifications (Telegram) | Deleted within 12 months |
| Anonymous page counters (first-party, no IP address or persistent identifiers) | 13 months |
| Google Analytics 4 data (only with consent) | 14 months |
| Microsoft Clarity data (only with consent) | Up to 13 months, under Microsoft’s standard retention |
Consent choice cookie (pfp_consent) |
180 days, then we ask again |
| Stripe records | Kept by Stripe under its own retention schedule to meet financial regulations |
Deleted database records can remain in encrypted point-in-time backups for up to 30 days before they are overwritten. Photos are not kept in those backups. When a retention period ends, we delete the data or irreversibly de-identify it.
Security
We use technical and organizational measures designed to protect your information, including:
- Encryption in transit (HTTPS/TLS) for all traffic.
- Encryption at rest for stored photos and databases.
- Private storage, with downloads available only to your account or through a private order link.
- Bot protection and rate limits to block automated abuse.
- Fixed processing instructions on our servers, so no one can send their own instructions to the AI model through our Service.
- Access controls that limit which people and systems can reach personal data.
- Payment handling by Stripe, a PCI DSS Level 1 certified provider, so card numbers never touch our servers.
No system is perfectly secure. If we learn of a breach that affects your personal information, we will notify you and the authorities as required by law.
International data transfers
We are based in the United States, and our providers store and process data mainly in the United States. If you use the Service from outside the US, your information will be transferred to, stored in, and processed in the US and possibly other countries where our providers operate, such as countries where Cloudflare’s network handles your connection or where Telegram stores messages. These countries may have data protection laws that differ from those in your country.
When we transfer personal information from the EEA, the UK or Switzerland, we use one of these safeguards:
- Transfers to recipients certified under the EU-U.S. Data Privacy Framework, the UK Extension to it, or the Swiss-U.S. Data Privacy Framework, where the recipient is certified.
- The European Commission’s Standard Contractual Clauses (SCCs), together with the UK International Data Transfer Addendum and Swiss amendments where relevant.
- Other lawful transfer mechanisms where applicable.
You can ask for a copy of the relevant safeguards by contacting us. We may redact commercial terms.
Your privacy rights
Depending on where you live, you may have the right to:
- Access: get a copy of the personal information we hold about you.
- Correct: fix inaccurate information.
- Delete: ask us to delete your information.
- Portability: receive your information in a portable format.
- Restrict or object: limit or object to certain processing, including processing based on legitimate interests.
- Withdraw consent: at any time, for processing based on consent, such as analytics, marketing or photo processing.
- Opt out of sale, sharing and targeted advertising: see our Do Not Sell or Share page.
- Appeal: if we decline your request, you can appeal (see below).
- Complain: to your state Attorney General, or, in the EEA or UK, to your local data protection authority (in the UK, the Information Commissioner’s Office at ico.org.uk).
We will not discriminate against you for exercising any of these rights.
How to exercise your rights
- Delete photos yourself: sign in and go to “My photos”, then choose Delete. If you ordered without an account, use the private link in your order email or contact us.
- Delete your account: in account settings, or by emailing us.
- Change analytics and marketing choices: click “Cookie settings” in the site footer.
- Everything else: email contact@photoforpass.com with the subject “Privacy request”. Tell us what you want and the email address you used with the Service.
Verification. To protect your data, we verify requests by confirming control of the email address linked to your account or order. We may ask for more information if needed, but we will never ask you to upload an ID document or a new face photo to verify a request.
Authorized agents. You can use an authorized agent to submit a request. We may require written, signed permission from you and may ask you to confirm your identity directly with us, unless the agent holds a valid power of attorney.
Response time. We respond within 45 days for US state law requests, and within one month for GDPR and UK GDPR requests. We may extend these periods where the law allows, and we will tell you if we do.
Appeals. If we decline your request, reply to our decision email with the subject “Appeal” within 60 days. We will respond within the time the law requires (usually 45 or 60 days). If you are not satisfied, you may contact your state Attorney General.
California privacy notice (CCPA/CPRA)
This section applies to California residents and supplements the rest of this policy. It describes our practices over the past 12 months and serves as our notice at collection.
Categories of personal information
| CCPA category | What we collect | Source | Business purpose | Disclosed for a business purpose to | Sold or shared? | Retention |
|---|---|---|---|---|---|---|
| Identifiers | Email address, name (Google sign-in only), account ID, IP address, online identifiers, analytics IDs (with consent) | You, your device, Google | Providing the Service, account management, support, security, analytics | Cloudflare, Google (Firebase), Stripe, Resend, Telegram (partly masked email), Google (GA4), Microsoft (Clarity) | Online identifiers only, through Google Analytics with Google signals and Microsoft Clarity, only if you accept analytics or marketing. This may be considered “sharing”. You can opt out at any time | See Data retention |
| Customer records (Cal. Civ. Code 1798.80(e)) | Name, email, limited payment details (card brand, last four digits) | You, Stripe | Payments, refunds, receipts | Stripe, Cloudflare, Resend | No | Up to 7 years for order records |
| Commercial information | Orders, products, prices, discounts, refunds, checks and regenerations used | You, created by the Service | Providing the Service, accounting, refunds | Cloudflare, Stripe, Telegram | No | Up to 7 years |
| Biometric information (potentially) | Photos and generated images, which may contain facial imagery covered by law. We do not create face templates or faceprints | You | Providing the Service only | Cloudflare, OpenRouter, Google (Gemini) | No | 90 days |
| Audio, electronic, visual or similar information | Photos and generated images | You | Providing the Service only | Cloudflare, OpenRouter, Google (Gemini) | No | 90 days |
| Internet or other electronic network activity | Pages viewed, clicks, referring site, campaign tags, anonymous page counters, and with consent, analytics and session replays (text inputs and photo areas masked) | Your device | Security, measurement, improving the Service | Cloudflare, Telegram (marketing source only), Google (GA4), Microsoft (Clarity) | Through Google Analytics and Microsoft Clarity only if you accept analytics or marketing. This may be considered “sharing”. You can opt out | Up to 14 months for analytics, 13 months for page counters |
| Geolocation data (approximate) | Country or region from IP address. No precise geolocation | Your device | Showing relevant documents and notices, fraud prevention, internal notifications | Cloudflare, Stripe, Telegram, Google (GA4), Microsoft (Clarity) | Approximate location through analytics, only if you accept analytics or marketing. You can opt out | Up to 14 months for analytics |
| Sensitive personal information | Photos, which may qualify as biometric information | You | Providing the Service only (see below) | Cloudflare, OpenRouter, Google (Gemini) | No | 90 days |
| Inferences | None. We do not build profiles about you | Not applicable | Not applicable | Not applicable | No | Not applicable |
We do not collect Social Security numbers, driver’s license or passport numbers, precise geolocation, account passwords, financial account credentials, or professional or education information. Please do not include these in support messages.
Sensitive personal information
We use and disclose sensitive personal information only for purposes permitted under Cal. Code Regs. tit. 11, section 7027(m), such as performing the services you request, ensuring security and integrity, and short-term transient use. We do not use it to infer characteristics about you. Because of this, we do not offer a “Limit the Use of My Sensitive Personal Information” link. If that changes, we will update this policy and add that option.
Sale and sharing
We do not sell personal information for money. However, California law defines “sale” and “sharing” broadly. If you accept analytics or marketing cookies, our use of Google Analytics (including Google signals) and Microsoft Clarity may be considered a “sale” or “sharing” of identifiers, internet activity and approximate location. You can opt out on our Do Not Sell or Share My Personal Information page, through “Cookie settings”, or by turning on Global Privacy Control in your browser.
We do not knowingly sell or share the personal information of consumers under 16.
Your California rights
You have the right to know, access, delete and correct personal information; to opt out of sale and sharing; and not to receive discriminatory treatment for exercising your rights. See How to exercise your rights.
Shine the Light
We do not share personal information with third parties for their own direct marketing purposes.
Other US state privacy rights
Residents of states with comprehensive privacy laws, including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, may have rights similar to those described above, such as the right to access, correct, delete and port personal information, to opt out of targeted advertising, sale and certain profiling, and to appeal our decisions. We honor these rights for all US users, regardless of state, and process sensitive data, including photos, only with your consent.
Nevada residents: we do not sell covered information as defined under Nevada law.
Washington residents: photos may be considered “consumer health data” under the Washington My Health My Data Act in some circumstances. We collect and use them only with your consent and only to provide the Service. Our Biometric Data Notice includes additional information.
Children’s privacy
The Service is not directed to children under 13, and children under 13 may not create accounts or use the Service themselves. Users under 18 may use the Service only with the involvement and permission of a parent or legal guardian.
Parents and legal guardians may upload photos of their children, including babies, to create passport or ID photos, Photo with Santa images, family portraits or cards. When you upload a photo that shows a child, you confirm that you are the child’s parent or legal guardian, or have their permission, and you consent to our processing of the child’s photo as described in this policy. We do not collect information directly from children, and a child’s photo is handled exactly like any other photo: used only to create what you ordered, never used for training, and deleted within 90 days. Couple portraits are for adults only.
If you believe a child under 13 has given us personal information without parental consent, contact us and we will delete it. This approach is consistent with the U.S. Children’s Online Privacy Protection Act (COPPA).
Automated processing
Our checks, edits and portrait creation are automated and use third-party AI models. They decide things like whether a photo is bright enough or centered correctly. These automated steps do not produce legal effects about you or similarly significantly affect you, and they never decide whether a government accepts your photo. If you disagree with a check result, you can contact us and a person will review it.
Languages
The Service is available in English, Spanish, Chinese, Tagalog, Vietnamese and Arabic. Our legal documents are provided in English. If we provide a translation, it is for convenience only, and the English version controls if there is any conflict, unless local law requires otherwise.
Changes to this policy
We may update this policy from time to time. We will post the new version on this page and change the “Effective date” above. If we make material changes, for example to how we use photos, we will notify you by email or by a notice on the Service before the change takes effect, and we will ask for your consent where the law requires it.
Contact us
HELPERG LLC 30 N Gould St, Ste N Sheridan, WY 82801 USA
Email: contact@photoforpass.com
For privacy requests, use the subject line “Privacy request”.