Privacy Policy
Version: 2026-10-14.1
Service operator and contact
VisaPhoto is operated by Space Laika LLC, a company based in Wyoming, United States.
Postal address: 30 N Gould St, STE R, Sheridan, WY 82801, USA
Space Laika LLC is the controller of the personal data described in this policy.
For support, privacy requests or questions about these terms, contact: support@visaphoto.io
spacelaika.comScope and your choices
This policy describes photo processing on VisaPhoto. Before uploading, you must review this policy, accept the Terms of Service and give your explicit consent to third-party AI processing (one box on the consent screen covers both). You can decline and leave without uploading. A new policy version requires a new acceptance.
Information we process
We process your account identifier, e-mail address, verification status, credit balance, payment references, policy acceptance version, language and time, and account activity. When you choose to upload, we process the photo and facial landmarks needed to frame and check it. These checks do not establish a verified identity.
Third-party processing
Your photo, processing instructions and generated results are transmitted to third-party AI and image-analysis services to produce and check your output. Infrastructure, authentication, e-mail, payment and analytics services also process the information needed to provide their functions. Payment card details are handled by the payment service, not saved by VisaPhoto. Processing may take place outside your country.
Provider retention
Our application does not keep intermediate processing previews; they are handled during the request and released when processing ends. The photo you upload and the generated photo are kept only as described under “Photos from your photo requests”. Temporary copies can remain in your browser until you close or clear it. This is not a promise that every third party immediately deletes every copy. Providers may retain prompts and outputs for security, abuse monitoring or legal obligations; the current AI service policy allows up to 55 days for abuse monitoring. Legal obligations may require longer retention. Provider-controlled records cannot be erased through the photo-delete button.
Failed photos and error review
If processing fails, the photos you submitted (your uploaded photo and the rejected generated candidates) may be kept for up to 6 months (180 days). Purpose: to analyse why photo requests fail and to improve photo quality. Some causes only show up as a pattern across many requests collected over several months, which a shorter period does not allow. They are stored in private cloud storage in the United States, only authorized VisaPhoto personnel can access them (including through internal error-notification e-mails), they are never published or used for any other purpose, and they are deleted earlier together with your account if you delete it. The stored photos are deleted automatically after 6 months. Internal error reports prepared for error analysis and to improve the service (including e-mails to authorized VisaPhoto personnel) may contain images of the photos that failed. These reports and the images in them may remain in VisaPhoto’s own mailbox, only authorized personnel can see them, and the 6-month automatic deletion does not cover them. You can ask us to delete them at any time (see Your rights). Photos submitted under the earlier 30-day limit (before policy version 2026-10-02.2) keep that limit. The error record, which contains no photo, keeps for at most 6 months one-way codes of the network address the request came from and of the uploaded file (never the address or the file itself), only to recognise repeated or abusive submissions.
Photos from your photo requests
For every photo request, the photo you upload and the generated photo are kept privately for up to 6 months (180 days). Purpose: error analysis and quality improvement, by comparing what was uploaded with what was produced. They are stored in private cloud storage in the United States, only authorized VisaPhoto personnel can see them, they are never published or used for any other purpose, and they are not part of My photos. They are deleted automatically after 6 months, or earlier together with your account if you delete it. They are kept only for requests made after you accepted this policy version. If processing fails, the generated photos are the rejected candidates, kept as described under “Failed photos and error review”.
Photo request measurements
For every photo request, successful or not, we keep a measurement record that contains no photo: for each processing step the check results, short automatically generated notes describing the image, numeric measurements such as face-detection confidence and head and eye position, durations, the outcome and whether the photo was later bought. It is stored under a one-way code derived from your account ID, never with your e-mail address or name, and only authorized VisaPhoto personnel can see it. Purpose: to analyse errors and improve the product and photo quality. It is kept for at most 6 months and deleted earlier together with your account.
Previews you did not buy
If you create a watermarked preview and do not buy it within about 15 minutes of your last preview, the photo you uploaded (as a small copy without metadata) is kept so that it can be shown next to that preview in an internal e-mail to authorized VisaPhoto personnel. Purpose: to understand why previews are not bought and to improve the service. It is stored in private cloud storage in the United States, is never published or used for any other purpose, and is deleted once that e-mail is sent, at the latest after 7 days, or earlier together with your account. The internal e-mail itself, with the photo shown as an image, stays in VisaPhoto’s own mailbox, which only authorized VisaPhoto personnel can open; the 7-day deletion does not cover it. You can ask us to delete it at any time (see Your rights). Previews you buy are not included.
Previews without an account
Where the preview offer is shown, you can create a photo without an account. We then create an anonymous account identifier for your browser; your consent record, the watermarked preview and its checked files are stored privately under it. If you create an account or sign in, the preview moves into that account. Otherwise the anonymous account and its photos are deleted automatically after 7 days. The photos of your photo requests and of failed requests are kept as described under “Photos from your photo requests” and “Failed photos and error review”, also for previews without an account; the automatic 7-day deletion does not shorten their 6-month limit. To limit misuse of free previews, we keep a one-way, daily-changing code derived from your network address for 2 days. To limit repeated tries of the same photo, for every free preview (with or without an account) we keep a one-way code derived from the uploaded photo, which cannot be turned back into the photo, and the number of tries for 2 days. If you buy the preview without an account, the payment service collects your e-mail address on the payment page; we use it only to e-mail you the files of the photo you bought. The address is removed from this delivery record once the e-mail is sent, at the latest after 7 days; payment records are kept as described under “Deletion and other records”. If you mistype the address, the files go to that address, so please check it on the payment page. Without an account the bought photo is removed from the download area after 7 days; the copies kept for error review stay for at most 6 months as described above. If you use “E-mail it to me” under the preview, we send the preview and a buy link valid for 7 days to the address you type. The address is used once for this e-mail and not stored. The preview is kept for download until the link expires (at most 14 days after the preview).
Using VisaPhoto in ChatGPT
If you use VisaPhoto through the VisaPhoto app in ChatGPT, ChatGPT sends us the photo you attach and the format you choose. ChatGPT also sends an anonymous user code that does not show who you are; we keep it only as a one-way digest that cannot be turned back, for up to 6 days, to apply the free preview limits. Your photo is processed and kept the same way as a photo uploaded on the website. Your ChatGPT conversation and the file you upload there are governed by ChatGPT’s own privacy policy; we do not receive your chat history. Payment and download happen on visaphoto.io.
Using VisaPhoto in Grok and other AI assistants
If you use VisaPhoto through the VisaPhoto plugin in Grok or another AI assistant, the assistant shows you our consent sentence and, once you agree, tells us that you agreed; it then sends us the photo you choose and the format you pick. For each request we create a random session code and keep it only as a one-way digest that cannot be turned back, for up to 6 days, to connect the photo to its preview. Your photo is processed and kept the same way as a photo uploaded on the website. Your conversation with the assistant and the files you share there are governed by that assistant’s own privacy policy; we do not receive your chat history. Payment and download happen on visaphoto.io.
Your saved photos
Successful application and high-resolution outputs are saved privately to your account so you can download them later. You may delete them from My photos. After six calendar months without account activity, saved photos expire and are removed by the daily cleanup process. Activity means an authenticated visit or use of the photo service. Download anything you want to keep. We do not save past photos that were created before this feature was available.
Deletion and other records
Deleting a photo removes access and its stored image files. You can delete your whole account at any time from your account page after signing in again. Account deletion immediately cancels any active membership so it does not renew, ends unused credits without a refund, and permanently deletes your profile, saved photos, photos kept from your photo requests and from failed requests, photo consent history, processing records and sign-in account. Payment receipts needed for accounting, tax, refunds and disputes are kept with your name and e-mail address removed; the payment service keeps its own invoices under its legal obligations. We also keep a deletion record (date, whether you or an administrator requested it, and a one-way digest of the e-mail address) and, to prevent repeated welcome credits, a separate one-way digest of the verified e-mail address. These records contain no photo or plain-text e-mail address. Short-lived abuse-prevention counters expire automatically.
Security, analytics and browser storage
Saved photos are accessible only through authenticated account access. We do not publish a public photo gallery or sell uploaded photos. Service providers have their own data-use obligations. Browser storage remembers your session and language preference. Site analytics (PostHog, USA) is cookieless: it stores no cookie or identifier in your browser, and it is turned off when your browser sends Do Not Track or Global Privacy Control. It records page visits and product steps (for example sign-up, photo created, checkout started), the browser, operating system and device type from your user agent, your browser language and time zone, and the referring website. PostHog uses your IP address and user agent only to form a visitor code that changes daily; the IP address is removed before these events are stored, so no IP-based location is recorded. Purchase and subscription events are recorded from our server under a one-way code of your account ID. Analytics never receives your photo, e-mail address, name or the codes in e-mail links. To understand how people use the service and to help with problems, we also record the steps within a visit (pages opened, the format chosen, the upload or sign-in window opened or closed, and the product steps above). They are linked by a random visit code that exists only in the page’s memory: it is not written to your browser, and reloading the page starts a new one. When you are signed in or previewing as a guest, these events also carry a one-way code derived from your account ID, so the steps of one person can be followed over time; the code cannot be turned back into your account ID, e-mail address or name. These events are kept in PostHog for at most 2 years. Once your account is deleted, the code can no longer be connected to you.
Advertising measurement
We advertise on an online advertising platform (named, with what it receives, in the KVKK notice). To see which ads bring customers, the website asks whether its advertising cookies may be used. Nothing from the platform is loaded and no advertising cookie is set unless you choose Accept; Decline, Do Not Track and Global Privacy Control keep it off, and the iOS and Android apps do not use it. If you accept, the platform receives through its tag the ad-click code from the link you arrived with, your IP address and browser information, and the page address without any personal values (photo identifiers and e-mail link codes are removed); for a purchase it also receives the price, currency and a one-way code of the order. It stores this in its own cookies (for example _gcl_au, up to 90 days) under its own policies. It is used only to measure ads, not for personalised advertising or remarketing. We never send your photo, e-mail address or name to the advertising platform. Your choice is stored in your browser for 12 months; you can change it at any time with “Cookie settings” at the bottom of the page, which also removes the advertising cookies set on this site.
Your rights
Depending on applicable law, you may have rights to access, correct or delete personal data, object to certain processing, withdraw consent and complain to a supervisory authority. You can delete saved photos, delete your account from your account page and stop future photo processing at any time, or contact us to exercise your rights. Withdrawing consent or deleting your account does not undo completed processing or records we must keep by law.