Privacy Policy | oldphotosai — Photo Restoration

Introduction

Welcome to our Privacy Policy. This document explains how we collect, use, and protect your personal information when you use our services.

Information We Collect

We may collect the following types of information:

Personal Information: Name, email address, and contact details you provide when registering or contacting us.
Google account information: if you sign in with Google, your name, email address and profile picture URL.
Launch waitlist and support: If you ask to hear about paid plans, we store your email and selected plan to send that update. If you use the contact form, we store your name, email, and message so we can respond.
Usage Data: Information about how you interact with our website, including pages visited and time spent.
Device Information: Details about the device you use to access our services, such as IP address, browser type, and operating system.

If you choose to sign in with Google, we receive basic profile information from your Google Account: your name, email address and profile picture URL. We use this information only to create and authenticate your account and to display your name in the interface. We store it with your account record. We never receive your Google password. We do not request or access any other Google service, such as Gmail, Drive, Contacts or Calendar, and we do not use Google user data for advertising or to determine creditworthiness.

We do not sell Google user data or share it with advertisers or data brokers. Our hosting provider, Railway, processes account records to host this service; our email provider, Resend, receives your email address when sending account verification or password reset messages. These service providers process the data needed to deliver those account features. Human access is limited to your explicit request, necessary security or abuse investigations, or applicable law. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke access in your Google Account’s third-party connections settings. Revoking Google access does not automatically delete your account here. To delete the stored account record and photo history, open My account → Settings → Security → Delete account, or contact us for assistance. If Google is your only sign-in method, set up another supported method before disconnecting it if you wish to keep using your account.

How We Use Your Information

We use your information for the following purposes:

To provide and maintain our services
To notify you about changes to our services
To provide customer support
To gather analysis or valuable information to improve our services
To monitor the usage of our services
To detect, prevent, and address technical issues

Photos and Processing History

Choosing a photo creates a preview on your device. An upload copy is compressed in your browser before it is sent for processing; your original file stays unchanged. We send that copy to our server and our photo-processing provider (currently APIMART, as described in Third-Party Services) only when you start processing and agree to the consent notice.

We retain encrypted processing results, their creation and expiry times, and the processing type in your private account history for 7 days. We do not retain the original upload in history. Only your authenticated, verified account can retrieve the stored result. Download it to your device before it expires if you want to keep it.

Open My account → Photo history, then choose Delete → Confirm deletion to remove a result early. Deleting removes the result from the live database and prevents further downloads. At 7 days, the result becomes inaccessible automatically. Expired rows are removed by cleanup on service startup and every 15 minutes while the service is running; if the service is unavailable, cleanup resumes when it returns. Infrastructure backups, if enabled, follow the hosting provider’s separate retention schedule and are not available through photo history.

Deleting a result from our history does not delete copies you already downloaded or copies held by the AI processing provider. That provider’s own data and retention policies apply. Contact us before submitting sensitive images if you need help understanding those policies.

Data Security

We implement appropriate security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction.

Third-Party Services

We use the following services for the features described below. Each receives the data needed for its role; payment records held by PayPal are governed by its own privacy statement.

Google — sign-in: When you sign in with Google, we receive your name, email address and profile picture URL, as described in the Google Sign-In section.
Resend — email delivery: Receives your email address and the content of the message when we send verification, password reset or account notices.
Railway — hosting: Hosts this service, including account records and encrypted processing results, and keeps infrastructure backups on its own retention schedule if enabled.
Our photo-processing provider (currently APIMART) — photo processing: When you start processing and agree to the consent notice, APIMART receives the compressed upload copy and processing instructions to produce the result. APIMART PTE. LTD. operates this service. Its handling and retention of inputs and outputs are subject to its own Privacy Policy; that policy does not state a fixed retention period for photos or outputs. Our encrypted result history is kept for 7 days and does not include the original upload. This is separate from any copies held by the processing provider, whose retention we do not control. Deleting our history does not delete copies you downloaded or copies held by APIMART.
Our payment processor (currently PayPal) — payment processing: When you choose a paid plan, PayPal receives your name, email address, order amount and order information to process payments, subscriptions and refunds. Payment-method details are submitted directly to PayPal; we do not receive full card numbers. Paying does not send your photos to PayPal. PayPal handles and retains payment records under its own Privacy Statement and applicable law, separately from our 7-day photo history. We retain order and payment status to manage credits, billing and refunds; those records do not expire with photo history.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will also update this policy when our photo-processing provider changes.

Contact Us

If you have any questions about this Privacy Policy, please contact us.