Privacy

Last updated: July 23, 2026

The desktop app

The EFT Capture desktop application processes fingerprint images and applicant information entirely on your computer. It does not transmit fingerprints, images, or applicant data to us or anyone else. The app contacts the internet only to check for updates and, if you enable it, to connect to the online intake service.

The online intake service (eftcapture.com)

When a fingerprinting company uses our intake service, we store:

• Company account data: company name, email address, and a hashed password (Argon2). We never store plaintext passwords.
• Customer submissions: the applicant's name and optional contact email in plaintext (so the company's dashboard can list orders), and the remainder of the form — date of birth, SSN, address, physical descriptors — only as end-to-end encrypted ciphertext. The encryption happens in the applicant's browser using the company's public key. We do not possess the keys to decrypt this data, under any circumstances.

What we don't do

• We do not sell, share, or analyze customer data — we could not read the sensitive fields even if we wanted to.
• We do not use tracking or advertising cookies on this site.
• We do not store fingerprint images on our servers, ever. Fingerprints exist only in the desktop app on the company's computer.

Data retention and deletion

Companies control their orders and can delete any order from their dashboard at any time; deletion is immediate and permanent. We recommend companies delete orders once the appointment is complete. To delete a company account entirely, email info@eftcapture.com from the account's registered address.

Hosting

The intake service is hosted on Railway (railway.com) in the United States. All traffic is encrypted in transit with TLS, and sensitive fields are additionally end-to-end encrypted as described above.

Applicants: your rights

If you submitted your information through a company's intake form and want it removed, contact the fingerprinting company you submitted it to — they hold the only key that can access your submission, and they can delete it permanently from their dashboard.