Privacy Policy
Last updated:
1. The short version
- We do not store your uploaded photos after colorization.
- We use Google OAuth for sign-in. We receive your name and email.
- We log anonymous usage events to improve the service.
- We do not sell your data.
- RevivaPhoto is operated by Ken Wu, the owner of the RevivaPhoto service (revivaphoto.com). Contact us at [email protected].
2. Photos you upload
When you upload a photo for colorization, the image is sent to our AI model, processed into 3 colorized candidates, and the original upload is discarded from memory once the response is returned. We do not persist uploaded images to long-term storage. The colorized result is returned to your browser as a data URL and is not stored on our servers unless you explicitly download it.
3. Account data
If you choose to sign in with Google, we receive your name, email address, and profile picture from Google. We store an anonymous session identifier in an HTTP-only cookie on your browser and a matching record in our database (D1) for up to 7 days. We do not receive your Google password. The legal basis for this processing is performance of a contract (keeping you signed in) and our legitimate interest in securing the service.
4. Email subscribers
If you subscribe to our launch notification list, we store your email address so we can email you when paid plans launch, based on your consent (which you can withdraw anytime via the same contact). We retain your email only until you unsubscribe or request deletion, and delete it promptly thereafter. You can request removal at any time by contacting [email protected].
5. Cookies
We use a single essential cookie named sid to keep you signed in. This cookie is HTTP-only, Secure, and SameSite=Lax. It expires after 7 days. See the Cookies page for details.
6. Service providers
We rely on Cloudflare for hosting and edge functions, and Google for sign-in. These providers process data on our behalf under their own privacy policies. Cloudflare and Google are established outside the EU/UK; where we transfer personal data internationally we rely on Standard Contractual Clauses and their certified adequacy mechanisms.
7. Your rights
Depending on your jurisdiction (e.g. GDPR, CCPA), you may have the right to access, correct, or delete your personal data, to withdraw consent, and to lodge a complaint with a supervisory authority in your jurisdiction. To exercise these rights, email [email protected].
8. Contact
Questions about this policy? Contact us at [email protected].