The short version
Unpaid photos are deleted after 1 hour. Paid photos are kept for 30 days so you can download them again, then deleted.
How long we keep things
- Unpaid photos: deleted after 1 hour. The original photo you uploaded is also deleted after 1 hour.
- Paid final photos: kept for 30 days, then deleted.
- Order, payment and delivery records: kept for 18 months after purchase, even after your photo is deleted. We use them for disputes, refunds and legal claims, and some are kept to meet tax and accounting law.
- Consent records: kept for the same 18 months, to show what you agreed to.
- Refund claim evidence: screenshots or pasted rejection messages are deleted 30 days after the claim is closed.
- On your own device: your email and photo-flow data can stay in your browser. You can clear it in your browser settings.
Here is the retention timeline:
<svg viewBox="0 0 720 150" role="img" aria-label="Retention timeline: unpaid photo deleted after 1 hour, paid photo deleted after 30 days, claim evidence deleted 30 days after the claim closes, order and consent records kept 18 months">
<style>.l{font:12px sans-serif;fill:#33415E}.t{font:11px sans-serif;fill:#52677E}</style>
<rect x="15" y="15" width="160" height="58" rx="8" fill="#E8F0FE" stroke="#B9D0EE"/>
<text x="95" y="40" text-anchor="middle" class="l">Unpaid photo</text><text x="95" y="56" text-anchor="middle" class="t">deleted after 1 hour</text>
<rect x="190" y="15" width="160" height="58" rx="8" fill="#E8F0FE" stroke="#B9D0EE"/>
<text x="270" y="40" text-anchor="middle" class="l">Paid photo</text><text x="270" y="56" text-anchor="middle" class="t">kept 30 days, then deleted</text>
<rect x="365" y="15" width="160" height="58" rx="8" fill="#E8F0FE" stroke="#B9D0EE"/>
<text x="445" y="40" text-anchor="middle" class="l">Claim evidence</text><text x="445" y="56" text-anchor="middle" class="t">deleted 30 days after close</text>
<rect x="540" y="15" width="165" height="58" rx="8" fill="#E8F0FE" stroke="#B9D0EE"/>
<text x="622" y="40" text-anchor="middle" class="l">Order and consent records</text><text x="622" y="56" text-anchor="middle" class="t">kept 18 months</text>
</svg>
Who processes your photo
These are the services that handle your photo and your order. None of them receives your payment card details beyond the payment processor.
| Service | What it does | Where it is | What it receives |
|---|---|---|---|
| Cloudflare | Network delivery and bot protection | Global edge | Your request traffic |
| Hetzner | Hosts our application servers, including backups | Germany | Your photo and order data |
| Google Gemini | Runs the automated compliance check on the processed image | May process outside the US | The processed image for the check |
| Stripe | Processes payments | Payment provider | Your payment details |
| Resend | Sends download emails | Email provider | Your email address |
| Sentry | Error monitoring | Error tracking | Error reports, without photos or payment details |
Google acts as a processor for the compliance-check step, and under its paid-service terms does not use your images or results for training. Google may keep prompts and responses for up to 55 days, and processing may take place outside the US.
We do not sell your photo or your data.
How to ask us to delete your photo
- Email privacy@norshadynamics.com.
- Ask for your photo to be deleted, and include your order reference if you have it.
- We delete the photo and confirm.
You can also withdraw your consent at any time. This does not affect processing that has already happened, and you can complain to your data protection authority.
Why we ask for your consent
Your photo shows your face, which can count as biometric data in some places. Before we process it, we ask for your consent, and we explain how it is used in our Biometric notice and Privacy Policy.
The consent flow, in plain language
- When you upload or take a photo, you tick a box confirming you are the person in the photo (or their parent or guardian) and that you consent to us processing it, including the automated facial analysis.
- At checkout, you tick two more boxes: one asking us to start supplying your digital photo immediately after payment, and one confirming you understand you lose the right to cancel once supply begins.
Together these record what you agreed to, and when.
Frequently asked questions
Can I download my photo again later?
Yes, for 30 days after purchase, using the link in your delivery email or the order page.
Do you keep a copy forever?
No. Photos are deleted after 1 hour if unpaid and 30 days if paid. Order and consent records are kept for 18 months.
Does Google keep my photo?
Google may keep the prompts and responses of the check for up to 55 days. See the Privacy Policy for the details.
Do you sell my photo?
No. We do not sell your photo or your data.
What is biometric data?
Your face in a photo can count as biometric data in some places. That is why we ask for your consent before processing it.
How do I withdraw my consent?
Email privacy@norshadynamics.com. Withdrawal does not affect processing that has already happened.
Are the records kept even after my photo is deleted?
Yes. Order, payment, delivery and consent records are kept for 18 months after purchase to handle disputes, refunds and legal claims.
Where can I read the full policy?
On the Privacy Policy and Biometric notice pages.
See the Privacy Policy, Biometric notice and Terms for the full terms.
About GetMyVisaPhoto
Written and fact-checked by the GetMyVisaPhoto Content Team. We research each destination's official photo requirements and publish plain-language guides so you can prepare a compliant visa photo from your own phone. Any figure we cite comes from the official portal listed per section.