Security

What stays on your device

Your photo is opened and restored in your browser and is never uploaded to our servers. The restored file is created on your device and downloaded from there. We never receive the photo, the restored result or a preview of either.

What we store

• Account data: your name, email, a hashed password, your plan and credits.
• Restoration records: the pixel size of each photo, the settings you chose, a status and the date. These are deleted after 90 days.
• Contact messages: what you send through the contact form, deleted after 12 months.

Infrastructure

RevivaPix runs on Cloudflare: a Worker serves the site and the API, and a D1 database holds account and plan data. We do not run our own servers.

Encryption

• In transit: the whole site and API are served over HTTPS (TLS) through Cloudflare, and plain HTTP requests are redirected to HTTPS.
• At rest: account data lives in a Cloudflare D1 database, which Cloudflare encrypts at rest.

Accounts and sessions

• Passwords are never stored in plain text. They are hashed with PBKDF2-SHA256 (100,000 iterations) and a unique random salt.
• Sign-in sessions use a random token. Only a hash of the token is stored, and the browser cookie is HttpOnly and Secure so page scripts cannot read it. Sessions last 30 days.
• Sign-in, sign-up and contact requests are rate limited to slow down guessing and abuse.
• Requests that change data are accepted only from this site's own origin.
• Credits are spent on our servers, in a single atomic database step, so they cannot be spent twice.

Payments

Payments are handled by Stripe, which is certified PCI DSS Level 1. We never see or store your full card number. After you pay, we check the payment with Stripe before unlocking your plan, and each payment can unlock a plan only once.

Retention and deletion

• Restoration records are deleted automatically after 90 days.
• You can delete your whole account and its data from the Account page at any time.
• Billing records are kept, without your account link, as required by accounting and tax law.

Incident response

If we find a security incident that affects personal data, we will contain it, investigate it, tell the people and authorities affected where the law requires, and fix the cause.

Sub-processors

These providers process data on our behalf.

Your responsibilities

• Use a strong, unique password and keep it private.
• Keep your own copies of your original scans and the files you download. We do not keep them.
• Tell us straight away if you think your account has been compromised.

Reporting a vulnerability

If you believe you have found a security issue, email support@revivapix.com with a clear description and the steps to reproduce it. Please:

• give us a reasonable time to investigate and fix it before you disclose it publicly;
• avoid accessing, changing or deleting data that is not yours, and avoid actions that degrade the service;
• not use social engineering, physical attacks or denial-of-service testing.

We will acknowledge your report and keep you updated.

Certifications

We do not currently hold or claim any security certification such as SOC 2 or ISO 27001. Stripe is certified PCI DSS Level 1 for payment handling.

Related policies

See our Privacy Policy for how personal data is handled and our Cookie Policy for browser storage. RevivaPix is a product of {{LEGAL ENTITY}}.