Privacy policy

Photos Repair determines the purposes of the processing described here. For privacy questions or rights requests, contact support@photos.repair.

Account: email address, account identifier and authentication information, to sign in and manage your gallery. Photos: files uploaded for processing, results, chosen settings, status and operation dates, to provide the requested restoration. These uses are necessary to perform the contract. If you choose Google sign-in, Supabase also receives the profile information Google shares, including your name and profile picture depending on the permissions granted.

Purchases: Stripe customer, payment and subscription references, amounts, statuses and credit balance, to bill and fulfill purchases (contract) and retain legally required records (legal obligations). Full card numbers and security codes are handled by Stripe; Photos Repair does not store them.

Support and security: email address, message content, technical logs, IP address and browser information, to reply, diagnose incidents and prevent abuse (legitimate interest in operating and securing the service; contract for purchase-related requests). Data needed for accounts, payments or processing is required for those functions.

Audience measurement, only with your consent: pages visited, uploads, processing starts and results, downloads and purchase steps. Events may contain a browser identifier, transaction reference and purchase amount. We do not send photos, filenames, email addresses or URL query parameters to Analytics. These statistics are not described as anonymous.

For automatic top-ups, we store the selected pack, authorization date and version, enabled status, payment statuses and Stripe payment-method reference to execute your instruction and resolve billing issues (contract). Card details remain with Stripe.

Vercel hosts the website and server functions. Supabase provides authentication, the database and gallery storage. Google Gemini processes images for generation. Stripe handles payments and subscriptions. Resend delivers contact form messages to support. Google Analytics measures audience after consent. Google reCAPTCHA protects contact form submission and loads only when you submit it.

These services may process data outside your country, including in the United States. Their data protection documents describe recipients, locations and the contractual transfer mechanisms they offer. You can ask us for details of the safeguards applicable to your data. We do not promise processing exclusively within the European Union.

Normalized originals and generated images are kept in your Supabase gallery. EXIF metadata is stripped before images are sent to Gemini. Photos Repair does not publish your images in a public gallery.

Google applies its own security and retention rules to the Gemini API. Its documentation specifies 55-day retention of inputs and outputs for abuse detection, with possible review by authorized personnel. Deleting images from your gallery therefore does not instantly erase every copy held by providers. Google’s terms also distinguish paid and unpaid usage for improvement of its models.

Account and gallery: for as long as you keep your account and images. Photos are not automatically erased immediately after processing. You can delete a photo, clear your gallery or request account deletion through account settings.

Payments and claims: records needed for accounting, disputes or legal obligations may remain after account closure for the period required by the obligation or necessary to resolve the dispute. Support requests and technical logs are retained according to their usefulness for handling requests, security and applicable obligations. Provider backups and security copies follow their own deletion cycles.

Cookie choices: 180 days. Analytics cookies set by our configuration: at most 180 days, without automatic extension on each visit. Data already sent to Google Analytics has separate retention governed by the Analytics property settings; you can request access or erasure through support. Withdrawing consent stops future collection without undoing earlier lawful processing.

The former free preview is disabled. Its photos-preview cookie expired after 30 days. Protected hashes of browser identifiers and IP addresses limited trials, separately from Analytics. Any earlier records are not deleted merely by clearing the cookie.

Depending on applicable law, you can request access, correction, erasure, restriction or portability of your data and object to processing based on legitimate interests. Withdraw Analytics consent at any time through cookie settings. Photos Repair does not use profiling to make decisions that produce legal effects concerning you.

Email support@photos.repair from your account address and describe your request. We may check your identity proportionately. Under the GDPR, we normally respond within one month; a reasoned extension of two months is possible for complex requests. You can complain to the data protection authority in your country, including the CNIL in France.

Gallery access requires authentication and server operations verify the user. No system can guarantee zero risk. Keep a copy of your originals and avoid sending identity documents, medical images or other sensitive content. If you upload someone else’s photo, make sure you have the right to process it and inform them where required.