SGfoto

Privacy Policy

This policy explains how sgfoto.app (the “Service”) handles your personal data. The Service is operated by Mirror Lake Pte. Ltd. (trading as Mirror Lake Studio; “we”, “us”), Singapore, and follows the Singapore Personal Data Protection Act 2012 (PDPA).

1. What we collect

• The photo you upload. Used only to produce the photo you asked for.
• The document you chose and the attire option (e.g. Singapore Passport, female attire), so we can format the result correctly.
• A sign-in identifier. When you sign in with Google or Apple, they give us an opaque account identifier. We store only that identifier — not your name, and not your email address. Your email, if your provider shares it, stays in your own browser so we can show you which account you are signed in as.
• Your generation history — a list of which documents you generated, when, and whether you paid. It contains no personal details beyond the identifier above.
• Basic technical data — IP address and standard request logs, used for security, abuse prevention and daily free-preview limits.

We also keep anonymous daily totals of processing outcomes and timing ranges to improve service reliability. These statistics do not contain photos, generation instructions, IP addresses, accounts or job identifiers.

2. How your photo is processed

Producing a compliant photo takes two steps, and your photo leaves Singapore during the first one:

• Step 1 — background and attire. Your photo is sent to a third-party AI image service, OpenAI (United States), through our own relay server in Hong Kong. This step produces a clean white background and formal attire. If the primary image service fails, we may send the photo and generation instructions to OpenAI through OpenRouter as a backup route.
• Step 2 — your real face. On our own server in Singapore, your real face from the original photo is aligned onto that result and cropped to the document’s published size. The face in the photo you download is your own, unaltered.

You are told about this and must agree before your first generation. If you would rather your photo did not leave Singapore, please do not use the Service.

3. How long we keep things

• Your uploaded photo and the generated results: 24 hours, then deleted automatically. This window exists so you can come back and download or re-size a photo you paid for.
• Your generation history: 24 hours, then deleted automatically.
• Minimal payment and job records may be retained for accounting, refunds, fraud prevention, customer support and service analysis. These records do not contain your uploaded or generated photos. Stripe also keeps payment records under its own retention rules.

We do not keep a permanent copy of your face, and we never use your photo to train any AI model.

4. Payments

Payments are processed by Stripe. Your card details are entered on Stripe’s own page and are never seen by us or stored on our servers. Stripe processes your payment data as an independent controller under Stripe’s Privacy Policy.

5. Who else is involved

• Cloudflare — hosting, content delivery and short-term storage of your job data.
• OpenAI — the AI image step described above (United States).
• OpenRouter — routes the photo and generation instructions to OpenAI when our backup image service is used. OpenRouter Privacy Policy.
• Google / Apple — sign-in only; they tell us that you signed in successfully.
• Stripe — payment processing.
• Sentry — error monitoring (servers in the European Union). When something breaks, we are sent the error type, the file and line it happened in, and which part of the Service it was — never the error message itself, never your photo, your account or the page address you were on. Sentry is configured not to store IP addresses.

We do not sell your data, and we do not share it for advertising or profiling.

6. Your rights

Under the PDPA you may ask what personal data we hold about you, ask us to correct it, or ask us to delete it. Your photos, results and generation history are deleted automatically within 24 hours. If you want them removed sooner, or want to ask about other records, email us and we will respond normally within 2 business days.

You can also sign out at any time from the account button at the top of the page, which removes your session and your email from your browser.

7. Children

The Service is not directed at children under 13, and we do not knowingly collect their data. A parent or guardian may of course use the Service to prepare a photo of their child.

8. Changes

If we change this policy we will update the effective date above. Significant changes will be announced on this page.