Privacy · 2026

What we keep, what we don't.

Your photographs are family — we treat them that way. The honest version of what happens after upload.

Effective June 11, 2026

  • What we collect

    Your email address and name (to create an account). The photographs you upload (to restore them). What you bought and when (for billing and to track your credit balance). How you use the service (page views, actions taken) — captured through Microsoft Clarity to help us understand what works and what's broken.

  • How we use it

    To restore the photograph you asked us to, send the sign-in code you requested, take payment, answer your support email, and improve the service over time. Nothing else.

  • Your photographs, specifically

    We do not use uploaded photographs to train AI models — ever. We do not share them with third parties beyond the AI provider that performs the restoration and the damage assessment (OpenAI, currently). Everything you upload and everything we restore is private to your account — there is no public gallery, and we never feature your photographs without your explicit written permission. Photographs you upload but never restore are automatically deleted from our storage within seven days. Once restored, your original is kept privately alongside the restoration — powering the before-and-after view in your account — and both remain until you delete them or close your account.

  • Third parties involved

    Stripe processes your payments — we never see or store your card details. OpenAI performs the restoration and the automated damage assessment on your source photograph. DigitalOcean Spaces stores your photographs and restorations, encrypted. Cloudflare routes email to [email protected]. Microsoft Clarity records anonymized session analytics. Each of these companies has its own privacy policy — we share only what's needed for them to do their part.

  • Cookies and analytics

    We use cookies to keep you signed in, remember your preferences, note how you first found us (for example, which post or partner sent you — nothing more), and run Microsoft Clarity. Clarity records anonymized session replays so we can see where the interface is confusing or broken. It does not capture passwords, payment fields, or content you mark as sensitive. You can disable analytics in your browser settings; the service still works.

  • Your rights

    You can ask for a copy of the data we hold on you. You can ask us to delete it. You can ask us to correct anything that's wrong. We honor these requests within 30 days. If you're in the EU, UK, or California, you have additional rights under GDPR and CCPA — write to [email protected] and we'll walk through the specifics.

  • How long we keep things

    Uploads never restored: 7 days. Restored photographs and their originals: until you delete them or close your account. Account information: until you close your account. Payment records: 7 years (for tax purposes). Analytics: up to 12 months.

  • Security

    Photographs are stored in private, access-controlled storage; clean restorations are served through signed URLs that expire within minutes. Watermarked preview copies are stored at unguessable addresses for fast delivery. Sign-in uses one-time email codes — no passwords to steal. We work hard at this, but no system is perfectly secure. If you spot something concerning, write to [email protected] and we'll take it seriously.

  • Age

    Remorva is for adults. You must be at least 18 years old to create an account. If you're a parent or guardian and you've discovered a child has used the service, write to us and we'll close the account and delete the data.

  • Photographs of others

    When you upload a photograph of someone who isn't you, you confirm that you have their consent — or, in the case of a minor, the consent of their parent or guardian. We don't use facial recognition or attempt to identify the people in your photographs.

  • International transfers

    Remorva operates internationally. Your photographs and account data may be processed in jurisdictions outside your home country, including the United States. We use providers that maintain reasonable safeguards consistent with the data protection laws of the EU and UK.

  • Changes to this policy

    We may update this policy as the service evolves. When we make material changes, we'll notify you by email before they take effect. The effective date at the top reflects the most recent revision.

  • Reach out

    Questions, requests, or concerns about your privacy — write to [email protected]. We read every message.

A request, a concern, a question about your data? Write to us.