Privacy Policy
IDWell DPF Privacy Policy
Last Updated: April 10th, 2023
This Privacy Policy explains how IDWell(“We”), the owner of the NexFoto brand, collects and processes in connection to the personal data of users who register and use our products, services, apps, and website that link to this policy(we refer to these collectively as our “Services”). And we take our user’s privacy seriously and are committed to protecting their personal information in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
This policy uses the term “personal data” to refer to information that is related to an identified or identifiable natural person.
a. What Information Do We Collect About You?
This section describes the various types of information we collect from and about you. The information we may collect may differ depending on which products or services you use.
1.1 Information you provide to us
We and our service providers need to collect certain information about you to provide our services, respond to your requests, and manage your account with us. Where service components go beyond the base service, we provide you with clear choices to decide if you want these additional functions.
- Account Information. Some services require or allow you to create an account before you can access them. As part of registering for an account, we may collect information such as your email address, password and certain other information from you。
- Identity verification information. Some services require you to verify your identity as part of creating an account. We may collect information such as email addresses for this purpose.
- Communications and submissions. You may choose to provide us with information you volunteer when you communicate with us (e.g. via email, or chat for support or to inquire about our services), including when you fill out an online form, respond to surveys, provide feedback, post comments, participate in promotions, websites and related information services to share your experiences or discuss technical issues ,or submit information through our services.
- Camera, Photos. You may choose to provide us with images and other information from your device’s camera and photos to further enable us to provide the services.
1.2 Information collected automatically when you use our services
In order to continuously improve the levels of service we provide, we automatically collect information about your use of our services to monitor for problems and look for opportunities to make improvements.
- Usage information. We collect information about how you interact with our services, such as how often you use our services, how much bandwidth you use, and when and for how long you use our services.
- Device information. We collect information from and about the device you use to access our services, including about the browsers, apps. For example, we may collect device identifiers, browser types, device types and settings, operating system versions, mobile, wireless, and application version numbers.
- Diagnostic information. We may collect information about the nature of the requests that you make to our servers (such as what is being requested, information about the device and app used to make the request, timestamps, and referring URLs).
- Location information. Unless otherwise expressly stated, we do not collect your location information based on your device’s GPS or other device sensor data. However, we may collect your approximate location by calculating an imprecise latitude and longitude based on your IP address to provide you with better service (e.g. show the related timezone automatically).
IDWell uses your information for the purposes described below. We employs internal risk management functions to ensure we continue to only use your information for the purposes we disclose to you and are taking appropriate steps to protect that data from exposure.
- To provide, maintain, troubleshoot, and support our services. We use your personal data for this purpose on the basis that it is required to fulfill our contractual obligations to you. Examples: using information about how much bandwidth you use; using threat and device information to determine whether certain items pose a potential security threat; and using usage information to troubleshoot a problem you report with our services and to ensure the proper functioning of our services.
- For measurement, research and analytics, including to develop new services. We have a legitimate interest in using your information for measurement, research and analytics, including to plan for and develop new services. For example, we may analyze certain usage information to understand how users interact with our services and make improvements; we may use customer feedback to understand what new services users may want.
- To prevent harm or liability. We may use information for security purposes (such as to investigate and monitor security issues) to prevent abuse. We may do this to comply with our legal obligations, to protect an individual’s vital interests. For example, we may use account, usage, and device information to determine if an entity is engaging in abusive or unauthorized activity in connection with our services.
- For legal compliance. We may also share your personal data if required by law, regulation, or court order, or if necessary to protect our rights, property, or safety, or the rights, property, or safety of our users or others.
In some situations, we may share your information with third parties who may collect, store, use, process and transfer the data for IDWell. IDWell employs oversight processes and controls to the secure sharing of data with only trusted parties.
- In accordance with your instructions or consent. For example, some services may allow you to register an account using a third-party account (such as a Google or Facebook account). If you choose to do so, we will share information with the third-party account provider.
- For collaborating with others. Some services may provide ways for different users to interact or collaborate with each other. Your information will be shared in connection with those activities if you choose to engage in them.
- Third-party service providers. We may disclose the information we collect to service providers to help us provide some aspects of our services, we work with trusted third parties and partners. In cases where we may share your personal data, we enter into appropriate confidentiality and data processing agreements with these third parties, review their security practices, and limit information sharing to the scope of what they are helping us with. Examples of activities that third parties help us with include:
◦ providing analytics about our services to help us understand how the services are being used
◦ providing sales and customer support
◦ maintaining the infrastructure required to provide our services
◦ Delivering our marketing and advertising content
And We may use the following types of third-party services:
- Cloud Storage: We use cloud storage providers to store the photos and vidoe you upload, such as AWS S3.
- Analytics: We use analytics providers to help us analyze how you use the App and to improve its performance, such as google analytics
- Marketing: We may use marketing providers to help us deliver personalized advertisements to you based on your interests and browsing history.
- Customer Support: We may use customer support providers to help us respond to your inquiries and provide customer support, such as Livechat.
Securing personal data is an important aspect of protecting privacy. We employs a range of administrative, organizational, technical, and physical safeguards designed to protect your data against unauthorized access, loss, or modification. We endeavor to use reasonably available state-of-the-art network and information security standards, protocols and technologies, including encryption, intrusion detection and data loss prevention, and we monitor our systems to ensure that they comply with our security policies.
We implement physical, technical and organizational safeguards to protect your personal data in our custody, both at rest and in transit, and should these measures fail to prevent a data breach, we will promptly take the necessary remedial measures, and we will provide notices as required by applicable law.
If you have any questions about the security of your personal data or the security of our products, or wish to report a potential security issue, please contact service@nexfoto.com. When reporting a potential security issue, please describe the matter in as much detail as possible and include any information that might be helpful.
e. Data Retention
We retain your personal data for as long as necessary to provide the services you have requested and to comply with legal obligations. We may also retain your personal data for a reasonable period of time after you have deleted your account, to resolve disputes, enforce our agreements, and for other legitimate business purposes.
f. Your Rights With Your Personal Data
Under the GDPR and CCPA, Your rights with respect to your personal data may include the following:
- Right of Access: You have the right to request access to the personal data we hold about you and to receive a copy of that information.
- Right of Rectification: You have the right to request that we correct any inaccuracies in the personal data we hold about you.
- Right of Erasure: You have the right to request that we delete the personal data we hold about you.
- Right to Object: You have the right to object to the processing of your personal data for certain purposes, such as direct marketing.
- Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain circumstances.
- Right to Data Portability: You have the right to receive the personal data we hold about you in a structured, commonly used, and machine-readable format, and to transmit that information to another data controller.
To exercise any of these rights, please contact us at service@nexfoto.com. We will respond to your request within the time period required by applicable law.
g. Age Restrictions
Protecting the privacy of young children is especially important. Our Service is not directed to children under the age of 16, and we do not knowingly collect personal information from children under the age of 16. If you are under 16 years of age, then please do not use or access the Service at any time or in any manner. If we learn that personally identifiable information has been collected on the Service from persons under 16 years of age and without verifiable parental consent, then we will take the appropriate steps to delete this information. If you are a parent or guardian and discover that your child under 16 years of age has obtained an account on the Service, then you may alert us at service@nexfoto.com and request that we delete that child’s personally identifiable information from our systems.
h. Privacy Policy Updates
We may revise this policy from time to time. Review it occasionally so that you keep up-to- date on our most current practices. We will put the ‘Last Updated’ date at the top of each policy. If you disagree with such an update to this policy, you may cancel your services account. If you do not cancel your account before the date the update becomes effective, your continued use of our services will be subject to the updated Privacy Policy.
i. Contact Us
If you have any questions, comments, or concerns about this privacy policy or
our practices regarding your personal data, please contact us at