Five customers' photos, sized right, in one go.

Batch mode takes 5 photos or signatures at a time for one exam and sizes each to the pixels and KB in that exam's notice. The files come back named NAME_examcode_photo.jpg instead of IMG_2041.jpg, so the right photo goes on the right form.

Every resized file is measured again against the rule before it goes in the ZIP. For a file a customer brings in ready-made, the upload checker does the same check. The rules cover 53 exams, and each size links to the official notice it was copied from (how we check).

Customers hand you their photo, signature and often a marksheet or an Aadhaar card. Every copy that sits on someone else's server is one more place it can leak from, and one more place you cannot delete it from.

Our tool does the work inside the browser tab. The photo goes from your disk into the browser and comes back to your disk as a ZIP; nothing is sent to CorrectForm or to anyone else. You can see this yourself: open DevTools, go to the Network tab and run a batch. No file goes out.

So there are fewer copies of your customers' data to look after, and when a customer asks where their photo went, you have a simple answer.

India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025 set out how personal data in digital form must be handled. The Rules were notified on 13 November 2025, and most duties for businesses start 18 months later, in May 2027. That gives cafés time to set up good habits. Here is what the main points mean at a café counter.

1. You are the "Data Fiduciary". The Act uses this word for whoever decides why and how personal data is processed (section 2(i)). When you scan a customer's documents to fill their form, you decide that, so for that data the café is the fiduciary and the customer is the "Data Principal". Paper scanned into a PC counts too (section 3).
2. Ask, and say what it is for. Consent has to be free, specific, informed and clear (section 6), with a notice that lists the data and the purpose in plain language (section 5, Rule 3). At the counter: tell the customer what you will keep and for which form.
3. Keep it only as long as it is needed. Once consent is withdrawn or the purpose is no longer served, the data has to be erased, unless a law requires you to keep it (section 8(7)). The Rules also set minimum periods for keeping some logs (Rule 8), so check them before you fix your own schedule.
4. Delete or correct it when asked. Customers can ask for their data to be corrected or erased (section 12) and must have a way to raise a complaint (section 13). The Rules ask you to publish how to make a request and to answer within 90 days at most (Rule 14).
5. Keep it safe. The Act asks for "reasonable security safeguards" (section 8(5)). Rule 6 lists examples: masking or encryption, control over who can use the computer, logs, and backups. For a café that can be as simple as a password on each PC, customer folders off the desktop and Aadhaar numbers masked.

This is a plain-language summary to help cafés understand the law. It is not legal advice; the Act and the Rules are the authority, and for your own setup you should ask a lawyer. Sources: The Digital Personal Data Protection Act, 2023 (No. 22 of 2023) and Digital Personal Data Protection Rules, 2025 (G.S.R. 846(E), 13 November 2025), both from Ministry of Electronics and Information Technology (MeitY), read on 24 October 2026.

Nothing, because we never get it. The free tool has no account and no upload. The paid plans will keep customer folders in your browser, or in your café's own Google Drive with the Sync plan, never on our servers.