Privacy Policy

Last updated: 4 June 2026

1. Introduction

Welcome to Restory. We respect your privacy and are committed to protecting your personal data globally. This Privacy Policy explains how we collect, use, and safeguard your information when you use our AI photo restoration and colorization service. We are committed to complying with strict international data protection laws, including the General Data Protection Regulation (GDPR) in Europe, the California Consumer Privacy Act (CCPA) in the United States, and the Act on the Protection of Personal Information (APPI) in Japan.

Data Controller

For the purposes of the GDPR and other applicable data protection laws, the Data Controller is Bohdan Labunets, Private Entrepreneur (FOP), located at 15 Mykoly Kybalchycha St., Apt. 71, Kyiv, 02218, Ukraine. You can reach us at support@restory.online or +48 507 284 944.

2. Data We Collect

We collect and process the following types of data:

  • Account Data: Your email address, display name, and authentication details when you create an account via Firebase Auth.
  • Uploaded Content: The photographs you upload for restoration or colorization.
  • Processed Content: The resulting restored and colorized photographs generated by our service.
  • Usage Data: Anonymized interaction metrics (such as clicks and page views) to help us improve the service.

3. Third-Party Data Sharing

To provide our services, we utilize secure, GDPR-compliant third-party processors. By using our service, you acknowledge that your data is shared with:

  • OpenAI (OpenAI OpCo, LLC): Your uploaded photos are securely transmitted to OpenAI via their API to perform the AI restoration and colorization. OpenAI processes these images exclusively to return the restored result to our servers. According to OpenAI's API data usage policies, they do not use images sent via the API to train their models, and the images are retained on their servers only briefly (up to 30 days) for trust and safety purposes before being permanently deleted.
  • Google Cloud & Firebase: We use Firebase for authentication, database hosting (Firestore), and secure file storage (Firebase Storage).
  • Paddle (Paddle.com Market Ltd): Paddle is our Merchant of Record and securely processes all credit purchases. We never see or store your raw card data.
  • Sentry (Functional Software, Inc.): We use Sentry for error tracking and performance monitoring to ensure the stability of our service. Sentry may collect technical data such as IP addresses, device information, and stack traces when errors occur.

4. Your Global Privacy Rights (GDPR, CCPA, APPI)

Depending on your location, you are granted specific rights regarding your personal data:

  • Europe (GDPR): You have the right to access, rectify, and erase your personal data (the "Right to be Forgotten"), as well as the right to restrict or object to processing.
  • United States (CCPA/CPRA): California residents have the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal data. Note: Restory does not and will never sell your personal data.
  • Japan (APPI): You have the right to request disclosure, correction, addition, deletion, or suspension of use of your retained personal data.

How to exercise your rights:
You can request the permanent deletion of your data at any time. We have built a self-service tool directly into your account dashboard. Simply navigate to Settings → Delete Account.

When you delete your account:

  • Your user profile and email are permanently removed from Firebase Authentication.
  • Your task history is wiped from our Firestore database.
  • All uploaded and restored photos are permanently erased from our Firebase Storage buckets. They cannot be recovered.

5. Data Security

We implement robust technical and organizational measures to ensure a level of security appropriate to the risk. Your photos are stored securely in Google Cloud data centers, protected by stringent access controls and encryption at rest and in transit.

6. Contact Us

If you have any questions about this Privacy Policy, please contact our Data Protection Officer at support@restory.online.