Legal
Privacy Policy
This policy explains what personal data RevivaPix handles, why, who we share it with, and what rights you have. The short version: your photos stay on your device.
Last updated: 24 October 2026
1. Who we are
The controller of your personal data is {{LEGAL ENTITY}}, {{LEGAL FORM}}, registered office {{REGISTERED OFFICE}} (Company number {{COMPANY NUMBER}}). You can reach us at support@revivapix.com. This policy applies to our website and the RevivaPix app (together, the “Service”).
2. Information we collect
Information you provide
- Account data: your name, email address and a password. The password is stored only as a salted hash.
- Restoration records: each time you restore a photo we store the photo's size in pixels, the repair settings you chose, a status (started, completed or credit returned) and the date. We do not store the photo or the restored file.
- Billing data: handled by Stripe. We receive your purchase status, the amount and a payment reference. We do not receive your full card number.
- Messages: what you send us through the contact form or by email, including your name and email address.
Information collected automatically
- Technical data: IP address, browser type and request details, used for security, rate limiting and fixing errors.
- Cookies and browser storage: one sign-in cookie and a theme setting, described in our Cookie Policy.
What stays in your browser
The photo you open is read from your device, restored in your browser and returned to you as a download. It is not sent to our servers. Because we never receive your photos, any people shown in them are not identified or profiled by us. We do not use face recognition.
3. How we use your information and our legal bases
Swipe sideways to see all columns.
| Purpose | Data | Legal basis (UK GDPR and EU GDPR) |
|---|---|---|
| Create and run your account, apply your plan and credits | Account details, plan, restoration records | Performance of a contract |
| Process payments and prevent fraud | Purchase status, limited payment details from Stripe | Contract, legal obligation, legitimate interests |
| Keep the service secure and working | Session data, IP address, request logs, rate-limit counters | Legitimate interests |
| Answer support, billing and privacy requests | Contact form messages and email | Contract, legitimate interests |
| Meet tax, accounting and other legal duties | Billing and tax records | Legal obligation |
| Establish, exercise or defend legal claims | Relevant records | Legitimate interests |
Where we rely on legitimate interests, we balance them against your rights and interests. We do not send marketing emails. We do not make decisions about you based solely on automated processing.
4. No AI training
We never use your content to train AI models. We do not receive your photos at all, and RevivaPix does not use a third-party AI service to restore them.
5. How we share your information
We do not sell your personal data and we do not share it for cross-context advertising. We share it only with:
- Service providers (sub-processors) listed in section 7, which process data on our behalf.
- Authorities and advisers, where required by law or valid legal process, or to protect the rights, safety and property of our users, the public or us.
- A successor, if we are involved in a merger, acquisition or sale of assets. We will tell you if your data becomes subject to a different privacy policy.
- Anyone else, with your consent or at your direction.
6. Data retention
| Data | How long we keep it |
|---|---|
| Account details (name, email, hashed password) | While your account is open. Deleted when you delete your account. |
| Plan, credits and purchase records | Plan data is deleted with your account. Purchase records are kept, without your account link, for the period required by accounting and tax law. |
| Restoration records (pixel size, settings, status, date) | Deleted after 90 days, or when you delete your account. |
| Sign-in sessions | 30 days, or until you log out. Expired sessions are purged daily. |
| Contact form messages | Deleted after 12 months. |
| Rate-limit counters | Deleted within 24 hours. |
| Request logs | Kept for a short period by Cloudflare to run and secure the service. |
| Your photos and restored files | Never stored by us. They exist only in your browser while you use the page. |
7. Sub-processors and international transfers
We may process and store data in countries other than your own, including the United States. Where we transfer personal data out of the UK, EEA or Switzerland, we rely on safeguards such as the UK and EU Standard Contractual Clauses or the EU-US Data Privacy Framework where the provider participates. These providers process data on our behalf:
Swipe sideways to see all columns.
| Provider | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Cloudflare, Inc. | Hosting, content delivery and the account database (D1). Cloudflare never receives your photos, because restoration runs in your browser | United States / global network | Standard Contractual Clauses |
| Stripe, Inc. | Payment processing | United States / EU | Standard Contractual Clauses |
8. Your rights and choices
Depending on where you live (for example under the UK GDPR, EU GDPR, CCPA/CPRA or similar laws), you may have the right to:
- Access the personal data we hold about you and get a copy.
- Correct inaccurate or incomplete data.
- Delete your data. You can delete your account and its data yourself from the Account page.
- Export your data in a portable format.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
- Not be discriminated against for using these rights.
- Complain to a data protection authority. In the UK this is the Information Commissioner's Office (ico.org.uk). In the EU, contact the authority in your country.
To use a right, email support@revivapix.com from your account address. We may ask you to verify your identity, and we aim to respond within one month. You may use an authorised agent where your local law allows.
9. United States privacy notes
We do not sell or share personal information as defined by California and other US state privacy laws, and we do not use it for targeted advertising. We collect only the categories described in section 2. Residents of California, Colorado, Connecticut, Virginia, Utah and other states with privacy laws may request access, correction and deletion, and appeal a refusal, by emailing support@revivapix.com.
10. Security
We use technical and organisational measures to protect personal data. No system is completely secure, so we cannot guarantee absolute security. Our Security page describes our practices and how to report a vulnerability. If a breach affects your data, we will notify you and the relevant authorities where the law requires.
11. Children
The Service is not directed at anyone under 18 and we do not knowingly collect personal data from children. Accounts are for adults. If you think a child has given us data, email support@revivapix.com and we will delete it. You may open family photos that show children, because they stay on your device, but you are responsible for how you use and share the results.
12. Third-party links
Our site links to Stripe checkout and may link to our social media profiles. Their privacy practices are their own and this policy does not cover them.
13. Changes to this policy
We may update this policy from time to time. We will post the new version here and change the “Last updated” date. For material changes we will notify account holders by email or in the product before they take effect.
14. Contact and complaints
{{LEGAL ENTITY}}, {{REGISTERED OFFICE}}. Email: support@revivapix.com. If you are not satisfied with our response, you can contact your local data protection authority.
{{LEGAL ENTITY}}, {{LEGAL FORM}} · Company number: {{COMPANY NUMBER}} · Registered office: {{REGISTERED OFFICE}}. RevivaPix is a product of {{LEGAL ENTITY}}.
Questions? Contact {{LEGAL ENTITY}} at support@revivapix.com or via our contact page.