Privacy Policy

PhotoRevive takes your privacy seriously. This policy explains how we collect, use, and protect your information when you use PhotoRevive. By using our service, you agree to this policy.

1. Information We Collect

• Account information:Username, email address, and a scrypt-hashed password, collected when you register.
• Uploaded photos:Image files you upload for restoration. Used solely to complete the restoration and never made public.
• Payment records:Order numbers, credit pack, payment amount, and payment status (no sensitive payment data such as card numbers — those are handled by third-party payment platforms).
• Server logs:IP address, request time, and HTTP status codes for troubleshooting and security auditing. Retained for up to 30 days.

2. How We Use Your Information

• To provide photo restoration, including sending images to an OpenAI-compatible image processing API.
• To send email verification codes for account registration.
• To process credit purchases and update your credit balance.
• To diagnose technical issues and prevent fraud or abuse.

3. Photo Processing & Deletion

Your uploaded photos are used only for the current restoration and are automatically deleted from our servers within 24 hours. They are never used for model training, shared with third parties, or displayed publicly.

Restoration is performed via an OpenAI-compatible Image API. Please refer to the upstream provider's privacy policy for its data practices. We request that the upstream service not use this data for training through our API agreement.

4. Data Sharing & Third Parties

We do not sell your personal information. We share data with third parties only as necessary:

• OpenAI:Image data required to perform photo restoration.
• ZPay (z-pay.cn):To process credit pack payments.
• SMTP email provider:To send verification codes (only your email address and code are transmitted).
• Legal requirements:When required by law or government authority.

5. Data Security

• All data is transmitted over HTTPS.
• Passwords are stored as salted scrypt hashes — we cannot access your original password.
• Login sessions use HMAC-SHA256 signed tokens with expiration limits.
• Database files are accessed only locally on the server with no externally open ports.

6. Your Rights

You may at any time:

• View and update your username, email, and password on the "My Account" page.
• Email us to request deletion of your account and all associated data. We will process this within 15 business days.
• Request a copy of the personal data stored in your account.

7. Children's Privacy

This service is not intended for children under 14. Users under 18 should use it under parental supervision. If we learn that a minor has registered without parental consent, we will promptly delete the relevant information.

8. Cookies & Local Storage

We use HttpOnly, SameSite=Lax session cookies to maintain your login state. We do not use any third-party tracking cookies or cross-site behavioral analytics.

9. Policy Updates

We may update this policy from time to time. Updates will be posted on this page with a revised "Last updated" date. For significant changes, we will notify you by email or in-app notice in advance.

10. Contact Us

If you have any questions about this privacy policy or wish to exercise your rights, please email us at:shijuebaba@gmail.com