Legal
Privacy Policy
Last updated: September 1, 2025
This Privacy Policy describes how Gonzalo Gutierrez Moreno ( RePhoto) collects, uses, and protects personal data when you use our website and services. We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR).
1. Information we collect
- Account information: name, email address, and authentication metadata when you sign in via Google or another identity provider.
- Usage data: logs about the photos you upload, the presets you run, credit balances, and actions taken on the platform.
- Billing data: Paddle, our payment processor, collects payment card details and billing addresses on our behalf. We receive limited transaction metadata (Pack purchased, amount, currency) to apply credits.
- Support communications: messages sent to our support email or forms.
- Cookies and analytics: we use first-party cookies and Google Analytics to measure feature adoption and improve the product.
2. How we use data
- Provide, operate, and improve the RePhoto restoration service.
- Process transactions, manage credit balances, and fulfill your orders.
- Respond to support requests and customer feedback.
- Monitor abuse, enforce our Terms, and protect the platform.
- Comply with legal obligations and Paddle’s payment requirements.
3. Legal bases
We process personal data based on one or more of the following legal grounds: consent (e.g., analytics cookies), performance of a contract (providing the Service), compliance with legal obligations, and legitimate interests (improving the Service and preventing abuse).
4. Data retention
Uploaded images are stored securely and automatically purged after a short retention window unless you explicitly save them. Transaction records and billing metadata are retained for up to seven years to comply with tax and accounting rules. Support correspondence is retained as long as necessary to resolve your issue and document our communication history.
5. Sharing data
- Paddle: Merchant of record that handles payments and tax remittance. Paddle processes payment instruments and shares success/failure metadata with us.
- Infrastructure providers: Google Cloud Platform stores encrypted uploads and model outputs; Postmark (or similar) providers send transactional emails when enabled.
- Analytics and error tracking: Google Analytics and privacy-focused logging capture aggregate usage metrics.
- Legal and compliance: We may disclose information if required by law, regulation, or legal process.
6. International transfers
Your data may be processed in the European Union and the United States. When we transfer data outside the EU, we rely on appropriate safeguards such as Standard Contractual Clauses and data processing agreements with our processors.
7. Your rights
Depending on your location, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data. You can also request a copy of your data or withdraw consent for analytics cookies. Contact us at support@rephoto.app to exercise your rights. You may also lodge a complaint with your local data protection authority.
8. Children
The Service is not directed to children under the age of 13, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us so we can delete it.
9. Changes
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through the Service and update the “Last updated” date at the top of this page.
10. Contact
Questions about this policy? Email us at support@rephoto.app or write to Av. Corrientes 345, C1043 Buenos Aires, Argentina. We aim to respond within two business days.
If you reside in the EU or UK, you may also contact the Spanish Data Protection Agency (Agencia Española de Protección de Datos).
For additional policies, visit our Terms of Service and Refund Policy.