Privacy
Privacy Policy
This policy explains, in plain language, what personal information Restore Old Photos collects, how we use and protect it, how long we keep it, and the rights you have under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
Effective date: June 13, 2026
Who we are
Restore Old Photos is operated by Sava Stosic, a sole proprietor based in Canada (the “Service,” “we,” or “us”). We are responsible for the personal information under our control. If you have a privacy question or request, contact us through our contact page.
What we collect
We collect only what we need to run the Service: your account details (such as your email address), the photos you upload and the restored results we generate, payment activity, and basic technical information such as browser or device data and log records used to keep the Service secure.
How we use it
We use your information to let you sign in, restore and colorize your photos, manage credits and payments, deliver your results, prevent fraud and abuse, and keep the Service running safely and reliably. We do not sell your photos or personal information.
How long we keep your photos
Your uploaded photos and finished results are stored only so you can download them. They are automatically and permanently deleted 7 days after upload, along with the related job record. Please download anything you want to keep before then. Account and payment records may be retained longer where required for tax, accounting, or legal obligations.
Service providers who process your data
We rely on a small number of trusted providers to operate the Service. They process personal information on our behalf, under their own security and privacy commitments:
- Google (Firebase & Google Cloud) — account authentication, database, and secure storage of your photos and results.
- Google Vertex AI (Gemini) — the AI models that restore and colorize your photos. Your photos are sent to Google’s AI service to produce your results.
- Stripe — payment processing. We do not store full card numbers; Stripe handles card details under its own policies.
Some of these providers may store or process data on servers located outside Canada, including in the United States. Where that happens, the information may be subject to the laws of those jurisdictions.
Your rights
Under PIPEDA you have the right to access the personal information we hold about you, ask us to correct it, withdraw your consent, and request deletion of your account and data. To exercise any of these rights, reach us through our contact page. You also have the right to complain to the Office of the Privacy Commissioner of Canada if you are not satisfied with how we handle your information.
Security
We use industry-standard measures — including encrypted connections and access-controlled storage — to protect your information. No method of transmission or storage is perfectly secure, but we work to safeguard your data and limit how long we keep it.
Updates
We may update this policy as the Service evolves. When we do, we will revise the effective date above. Continued use of the Service after an update means you accept the current version.