Privacy Notice
The current site accepts no photo uploads, accounts, or payment data.
This notice explains current website data and the planned retention limit for future-service photos and photo-derived measurements.
Current website
This website does not accept uploads or create accounts, and it has no checkout, contact form, analytics, or advertising. Verid Photo does not intentionally place analytics or advertising cookies or use browser storage, and it does not receive photos, names, email addresses, or payment data through this website. A site-delivery or security provider may use strictly necessary technical mechanisms under its own terms.
Operator and Privacy Officer
Verid Photo is operated by Norvane Systems Ltd.
In this Notice, “Verid Photo,” “we,” “us,” and “our” mean Norvane Systems Ltd. when it operates the Verid Photo website and service. Verid Photo is a brand and service name, not a separate legal entity.
Privacy questions and requests: [email protected], for the attention of Privacy Officer.
General support: [email protected].
How this website is delivered
Cloudflare delivers and protects this website and receives ordinary technical request data, such as an IP address, request time, requested page, browser information, and security signals. Verid Photo does not use analytics or advertising trackers on this website. Cloudflare processes this technical data to provide delivery and security services and may also have separate legal obligations.
Email you choose to send
If you use a support or privacy email link, your email provider and ours will process the address, message, headers, and attachments you choose to send. Do not send a full identity document, complete submission package, or unrelated sensitive material. If evidence is needed for support or a photo-rejection refund, we will ask for the minimum information reasonably necessary.
Data used by a future paid service
If photo uploads and checkout become available, we will publish an updated notice before collecting customer data. The paid service would process:
- the source photo, embedded source-file metadata, preview, delivered image, and temporary processing files;
- facial landmarks, head position, crop, background, lighting, and other photo-quality measurements;
- the selected document type, validation results, warnings, processing-consent and Privacy Notice versions, and any later checkout policy versions and acceptance timestamps;
- eligibility and location confirmations, such as country, province or territory, billing country, network, and security signals;
- upload, session, recovery, download, delivery, security, and anti-abuse events, including ordinary technical logs such as IP address, browser information, timestamps, and request or error details;
- the checkout email, order reference, price, currency, payment, refund, fraud, chargeback, and reconciliation status received from the approved payment provider (Paddle, if approved and used) or generated by Verid Photo; and
- support, privacy, security, and refund communications, including limited rejection evidence a customer chooses to provide.
Before a photo is uploaded for processing, one unchecked checkbox would record consent to automated photo processing and acknowledgement of this Privacy Notice. Checkout acceptance of the Terms and Refund and Support Policy is a separate decision recorded when the customer pays.
This information would be used to confirm eligibility, provide and secure the service, prevent abuse, create and deliver the paid result, recover a purchase, provide support and refunds, reconcile transactions, keep required transaction and consent records, meet legal obligations, and improve reliability using de-identified or aggregate operational information where appropriate.
Photo analysis and face-preservation safeguards
The paid service would analyze facial landmarks, head position, and photo-quality signals only to format and check the selected photo. It would not use that analysis to identify a person, compare them with an identity database, infer unrelated personal characteristics, or train a face-generation or recognition model.
Facial retouching means intentionally changing facial texture, marks, features, expression, or geometry for cosmetic or identity-altering purposes. Verid Photo would use reasonable efforts to preserve those details and would not intentionally perform facial retouching or change facial structure. The service would be designed not to smooth skin, remove scars, birthmarks, facial marks, or blemishes, reshape features, change eyes or expression, synthesize face detail, or turn a side-facing face forward.
The automated recipe may crop, resize, correct orientation, replace the background, make measured lighting, colour, white-balance, contrast or tonal-shadow adjustments, convert or compress files, change metadata, and perform other non-cosmetic technical image or file processing described by the recorded processing-consent version. Automated processing can have unintended effects, so Verid Photo does not guarantee that every facial or hair detail will remain unchanged. The customer must inspect the preview and delivered result before use.
Service providers and processing outside Canada
Cloudflare currently delivers and protects this website. The paid service would use private AWS infrastructure in the United States for photo processing and storage, Paddle as the proposed Merchant of Record for checkout and payment if approved and selected, and an email provider for transactional recovery messages. If Paddle is used, Verid Photo would not receive full payment-card details from it. Verid Photo would select and contractually limit providers to assigned service roles and would remain responsible for its own privacy obligations. Providers may also have separate legal obligations. AWS, Paddle, and the email provider do not receive paid-service data from this website today.
Information processed outside Canada may be accessible to courts, law enforcement, or other authorities under the laws of that location. We will identify the final providers and material processing locations before uploads begin.
Retention and deletion
For the future paid service, the product target is to delete source photos, previews, delivered images, and photo-derived measurements no later than 30 days after upload or job creation, whether or not the customer pays. Failed uploads and temporary processing files should be deleted sooner. The final schedule, including backup handling, will be published before uploads become available.
Photo-free records may be kept longer where reasonably necessary for transaction history, tax and accounting, consent and policy-version evidence, contract delivery, refunds, support, security, disputes, privacy requests, deletion evidence, and legal obligations. These records may include an email address, order reference, amounts, timestamps, status, and communications, but should not include a customer photo unless retaining it is necessary and lawful. A legal requirement may override a requested deletion or the ordinary schedule; we will explain an applicable exception when possible. Payment, tax, security, and communications providers may separately retain records they control for their legal, financial, fraud-prevention, and security obligations.
No sale, advertising, or model training
Verid Photo would not sell customer photos or personal information, use them for third-party advertising, or train facial recognition, face-generation, or general-purpose AI models on them. We will update this notice and obtain any consent required by law before materially changing these purposes.
Your privacy choices and requests
To ask about access, correction, withdrawal of consent, deletion, or a privacy complaint, email [email protected]. Because the service would have no customer accounts, we may ask for the checkout email, order reference, or another limited detail needed to find the record and verify authority. We will not ask for a full identity document by default.
We aim to respond within 30 days, or sooner where applicable law requires. Where the law permits an extension, fee, refusal, or withholding of limited information, we will explain the reason and available complaint route. A person may also complain to the federal, provincial, or territorial privacy regulator with jurisdiction over the concern.
Withdrawing consent or requesting deletion may prevent us from continuing a service, recovering an order, or investigating a refund. Mandatory rights and lawful complaints are not limited by this notice.
Children and other people's photos
The current site accepts no photos. When uploads open, the uploader must be an adult and must have every right, permission, consent, and lawful authority needed to upload and use the photo, including permission from the depicted person or lawful guardian or representative where applicable. The uploader must provide the depicted person with this Notice where required.
Security and incidents
The future service would use access controls, private storage, authenticated delivery, encryption in transit, and operational monitoring appropriate to the information handled. No system is risk-free. We would investigate suspected incidents and notify affected people and regulators where required by law.
Changes
Material changes will receive a new version and effective date. We will publish a new privacy notice before photo uploads or checkout become available.