Privacy Policy

Last updated: 8 June 2026

1. Introduction

Welcome to Restory. We respect your privacy and are committed to protecting your personal data globally. This Privacy Policy explains how we collect, use, and safeguard your information when you use our AI photo restoration and colorization service. We are committed to complying with strict international data protection laws, including the General Data Protection Regulation (GDPR) in Europe, the California Consumer Privacy Act (CCPA) in the United States, and the Act on the Protection of Personal Information (APPI) in Japan.

Data Controller

For the purposes of the GDPR and other applicable data protection laws, the Data Controller is Bohdan Labunets. You can reach us at support@restory.online.

2. Data We Collect

We collect and process the following types of data:

  • Account Data: Your email address, display name, and authentication details when you create an account via Firebase Auth.
  • Uploaded Content: The photographs you upload for restoration or colorization.
  • Processed Content: The resulting restored and colorized photographs generated by our service.
  • Usage Data: Anonymized interaction metrics (such as clicks and page views) to help us improve the service.

3. Third-Party Data Sharing

To provide our services, we utilize secure, GDPR-compliant third-party processors. By using our service, you acknowledge that your data is shared with:

  • Google (Google LLC): Your uploaded photos are securely transmitted to Google's Gemini API to perform the AI restoration and colorization. Google processes these images exclusively to return the restored result to our servers. Under Google's API terms for paid services, your content is not used to train Google's models, and images are retained only transiently for processing and abuse-prevention purposes before being deleted.
  • Replicate (Replicate, Inc.): When you choose to upscale a restored photo to a higher resolution (e.g. 2K or 4K) for printing, that image is securely transmitted to Replicate to run the AI super-resolution model and return the higher-resolution result to our servers. The image is sent only for this on-demand processing and is not used to train models.
  • Google Cloud & Firebase: We use Firebase for authentication, database hosting (Firestore), and secure file storage (Firebase Storage).
  • Creem (Merchant of Record): Payments are processed by Creem, our Merchant of Record, which handles billing, taxes, and card data on our behalf. Completing a purchase shares your billing details with Creem. We never see or store your raw card data. Creem is identified on the checkout page and on your payment receipt.
  • Sentry (Functional Software, Inc.): We use Sentry for error tracking and performance monitoring to ensure the stability of our service. Sentry may collect technical data such as IP addresses, device information, and stack traces when errors occur.
  • Microsoft (Clarity): If you consent to analytics cookies via the cookie banner, we load Microsoft Clarity, which processes behavioral data — heatmaps and anonymized session recordings (clicks, scrolls, and mouse movement; text you type is automatically masked). This data is used solely to understand and improve the site experience and is never used for advertising. Clarity data may be transferred to and stored in the United States by Microsoft Corporation. You can decline or withdraw consent at any time by clicking "Reject" in the banner or clearing your cookies.

4. Your Global Privacy Rights (GDPR, CCPA, APPI)

Depending on your location, you are granted specific rights regarding your personal data:

  • Europe (GDPR): You have the right to access, rectify, and erase your personal data (the "Right to be Forgotten"), as well as the right to restrict or object to processing.
  • United States (CCPA/CPRA): California residents have the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal data. Note: Restory does not and will never sell your personal data.
  • Japan (APPI): You have the right to request disclosure, correction, addition, deletion, or suspension of use of your retained personal data.

How to exercise your rights:
You can request the permanent deletion of your data at any time. We have built a self-service tool directly into your account dashboard. Simply navigate to Settings → Delete Account.

When you delete your account:

  • Your user profile and email are permanently removed from Firebase Authentication.
  • Your task history is wiped from our Firestore database.
  • All uploaded and restored photos are permanently erased from our Firebase Storage buckets. They cannot be recovered.

5. Data Security

We implement robust technical and organizational measures to ensure a level of security appropriate to the risk. Your photos are stored securely in Google Cloud data centers, protected by stringent access controls and encryption at rest and in transit.

6. Contact Us

If you have any questions about this Privacy Policy, please contact our Data Protection Officer at support@restory.online.