Core Security Principles
1. In-Browser Image Processing
When you upload a portrait, initial analysis, previewing, and downscaling happen client-side using standard HTML5 Canvas APIs before network transfer.
High-resolution source files are pre-compressed locally, ensuring your uncompressed camera roll files never touch remote storage unnecessarily.
2. Encrypted Transmission (HTTPS)
All communication between your device and our systems utilizes modern TLS encryption. HTTP Strict Transport Security (HSTS) is strictly enforced to protect against interception and downgrade vectors.
3. File Retention & Deletion
Your photo is processed via secure APIs to remove backgrounds and calibrate dimensions. Paid download links remain active for 72 hours. You can request immediate deletion of your photos and order metadata at any time by contacting support@usvisaphotoai.pro.
4. Server-Side Security Isolation
All processing interactions occur behind protected Next.js server-side route proxies. Secrets and internal service endpoints are strictly isolated from client-facing runtime code.
5. Payment Processing Security
Payment details are handled exclusively through Razorpay, a certified PCI-DSS Level 1 provider. USVisaPhotoAI never handles, stores, or sees raw payment card numbers or banking credentials.
6. Client Storage Control & Privacy Rights
Session previews are saved in your local browser storage for convenience and can be cleared instantly via your browser privacy settings. You may request copies or total deletion of any transaction records by emailing support.
Security Inquiries
If you have questions about our data safeguard practices or wish to report a security observation, please contact our team directly: