Privacy & use
Updated November 11, 2026
Operator
This website is operated by Tapilot LLC, United States. Contact [email protected] for website or privacy questions.
Free studio
Free cropping and export happen in this browser’s memory. Photos are not sent to the server or saved in browser databases or local storage. Clearing, refreshing or closing the page means selecting the file again. You manage downloaded files on your device.
Photo Plus server processing
Unlike the free studio, after your explicit consent Photo Plus sends your photo through the web service in the Philippines to the processing server in Beijing, China, for automatic framing and background processing permitted for the intended use. The web service does not write the original into its order database. It uses the original in request memory and releases the application reference after processing. This does not promise erasure of operating-system memory or downloaded copies.
Processed results and retention
Photo Plus results are kept in the web service’s private database, without public image URLs. Unpaid results become inaccessible after 24 hours; paid results become inaccessible 24 hours after successful payment. A scheduled maintenance process removes expired image data. Email recovery does not restore or extend expired photos. Maintenance checks expired data every 10 minutes.
Orders, payment and recovery
Stripe handles checkout; the website does not receive full card details. The private ledger records order references, amounts, payment status and payment identifiers. Email recovery matches a cryptographic digest of the checkout email. Codes last 10 minutes, allow at most five incorrect attempts and become unusable on success; plaintext codes are not stored. Resend receives the email address, message content and delivery data needed for sending, without photos or card data.
Verification and order records
Verification request records are periodically removed after approximately 24 hours plus one maintenance interval. Download grants expire with the photo. Basic local order records are retained for approximately 12 months (366 days) for support, refunds and reconciliation, then removed by maintenance. Stripe and Resend may retain their own service records under their policies. Code release rollback does not roll back financial data.
Website visits and preferences
The website uses Cloudflare for connectivity and HTTPS and is hosted in the Philippines. Connection services may process IP addresses, request paths and necessary access logs. Language switching sets a one-year preference cookie. Photo Plus uses HttpOnly cookies for preview, order and download authorization; progress storage contains a random task reference, without the photo. No advertising or third-party analytics SDK is used.
Data requests
Contact support for website data requests. We need to verify control of the relevant order email. Do not email original identity documents. Delete downloaded files on your own device. Payment-provider records follow its own rules; we will explain any records we still need to retain.