隐私政策
说明 Passlens 如何处理本地处理、移动应用、可选上传式处理、支持消息和运营分析。
概述
Passlens is a public website, browser-based photo tool, and iOS/Android app for preparing document photos. This privacy policy explains what we process, what stays on your device, when upload-based processing may be used, and how support and operational data are handled. The short version is: Passlens is local by default for the normal consumer workflow, and upload-based processing is only involved when a user explicitly chooses a server-backed operation such as Auto Comply or background removal.
This page is written to describe the public Passlens website and app workflow. If separate developer APIs or staged environments exist internally, those are not the primary scope of this public consumer policy. This policy is focused on what a normal visitor, reader, and app user encounters on passlens.com and in the Passlens iOS and Android apps.
Mobile app privacy
In the Passlens iOS and Android apps, camera access and photo library or gallery access are only used when you choose to take or import a photo. You can revoke those permissions in the operating-system settings. The current mobile apps process imported photos on the device by default and do not currently include mobile analytics, ads, tracking, accounts, or in-app purchases.
Server processing in the mobile apps is optional and action-specific. If you choose Server for Auto Comply or background removal, Passlens uploads the photo only to process that selected action. Device processing is recommended first, and the Server path is mainly for slower devices or cases where local processing is not working well.
When you export images or PDFs from the mobile apps, Passlens creates temporary export files so the operating system can present the standard share or document flow. You choose the destination, such as Files, Photos, Messages, Mail, AirDrop, or another installed app. Passlens does not silently save exports to Photos or send them somewhere else without that share action.
Photos and temporary files in the mobile apps remain under the control of the device and the app session unless you explicitly choose Server processing for one action. You can remove imported photos from the app flow, reset the workflow, delete the app from the device, or contact Passlens if a support conversation contains personally identifying details you want reviewed or deleted.
默认本地处理
For the normal consumer web, iOS, and Android flows, Passlens is designed so that many operations happen in the browser or on the user’s device. That includes common editing steps like crop adjustments, composition, layout work, and a range of on-device processing paths. The goal is straightforward: users should be able to prepare a compliant photo without being forced into a remote upload pipeline for every task.
当用户完全通过本地/浏览器处理进行工作时，照片数据保留在浏览器会话和用户设备上。它不会仅仅因为打开站点或选择预设而默默上传。这种本地优先的行为是有意为之的，是产品设计的一部分，而不仅仅是副作用。
可选的基于上传的处理
Some heavier photo operations may offer an upload-based path. Where that option exists, it is presented as an explicit choice for that operation. In the mobile apps, this appears as the Server option after you start Auto Comply or background removal. In those cases, the image is processed to complete that requested task, and Passlens does not treat it as a general-purpose photo library, account gallery, or social-media style image store.
That distinction matters. A user choosing an upload-based auto-fit or background-removal action is asking Passlens to process that specific job remotely. That is different from a site that uploads every image by default and leaves users to discover the storage behaviour later. When upload-based processing is used, the image is handled only for the requested operation and is not saved as a user photo or kept for later editing.
Temporary operational storage may still be involved while a request is being processed. For example, an input may be uploaded long enough to complete the requested operation and return the output. That is part of the request lifecycle, not a permanent gallery, account archive, or training dataset. Where the public site or mobile app exposes upload-based choices, the UI and public documentation should make that distinction clear.
支持、联系和反馈提交
如果您通过 Passlens 联系或支持表单发送消息，我们会处理您在该表单中提供的信息。这可以包括您的电子邮件地址、您的消息、您选择在文本中提供的可选屏幕截图或解释性详细信息，以及响应所需的支持上下文。我们使用这些信息来回复消息、诊断问题和改进网站。
如果您在使用应用程序后提交反馈，我们还可能会处理您的评分、反馈文本以及您在需要回复时添加的任何可选电子邮件地址。我们使用这些信息来改进产品、解决问题并根据您的要求进行回复。我们不会用它来围绕您的照片内容建立广告资料。
分析和操作日志
与大多数公共网络产品一样，Passlens 使用分析和操作日志记录来了解网站使用情况、监控可靠性和调试问题。这可能包括页面视图、路由上下文、设备或浏览器类别、交互事件和操作错误。目的是保持产品稳定、识别故障并了解正在使用哪些公共指南和流程。
操作日志可以包括请求元数据，例如时间戳、状态代码和服务级别诊断信息。当照片处理操作失败时，日志可能会记录操作失败、涉及哪条路线以及失败的技术原因。这种遥测有助于区分设备或浏览器问题与服务容量或配置问题。
Passlens 并不将自己定位为围绕个人照片档案构建的消费者广告定位产品。该网站可能包括分析和网站运营数据，但设计目标仍然是尽可能将实际照片准备保留在本地，并避免强迫用户进行不必要的基于帐户的跟踪。
保留和删除
保留取决于所涉及数据的类型。完全保留在浏览器本地的照片由用户的设备和会话控制。支持消息和反馈提交可以保留足够长的时间来回答用户并维护操作记录。当使用此类路线时，基于临时上传的照片处理工件应仅保留完成该作业并执行相关操作清理规则所需的时间。
如果您希望我们查看或删除包含个人身份详细信息的支持对话，请使用联系方式并解释您想要删除的内容。如果请求涉及第三方分析或支付平台，我们可能需要根据 Passlens 实际可用的数据以及该提供商控制的数据进行响应。
更新及联系方式
本隐私政策可能会随着产品的变更而更新。如果公共站点添加或删除了重要的处理路径，则应更新此页面以清楚地反映该行为。页面顶部的“更新”日期是当前版本的公共标记。
对于有关本政策的隐私问题、支持请求或更正请求，请使用网站上的公共联系方式，并提供足够的上下文以便识别请求。如果您的问题确实是关于文件要求而不是隐私，那么方法指南或相关国家/地区指南通常是更好的起点。