Privacy Policy

This Privacy Policy describes how Gonzalo Gutierrez Moreno ( RePhoto) collects, uses, and protects personal data when you use our website and services. We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR).

1. Information we collect

• Account information: name, email address, and authentication metadata when you sign in via Google or another identity provider.
• Usage data: logs about the photos you upload, the restoration types you run (e.g., Virtual Staging, Day-to-Dusk), credit balances, and actions taken on the platform.
• Billing data: Paddle, our payment processor, collects payment card details and billing addresses on our behalf. We receive limited transaction metadata (Pack purchased, amount, currency) to apply credits.
• Support communications: messages sent to our support email or forms.
• Cookies and analytics: we use first-party cookies and Google Analytics to measure feature adoption and improve the product.

2. How we use data

• Provide, operate, and improve the RePhoto restoration service.
• Process transactions, manage credit balances, and fulfill your orders.
• Manage promotional credits responsibly. The one-time 3-credit welcome bonus is reserved for email addresses that belong to our trusted consumer domain list; accounts using other domains start with a zero balance until they add paid credits. This abuse protection limits fraudulent sign-ups while preserving value for legitimate customers.
• Respond to support requests and customer feedback.
• Monitor abuse, enforce our Terms, and protect the platform.
• Comply with legal obligations and Paddle’s payment requirements.

3. Legal bases

We process personal data based on one or more of the following legal grounds: consent (e.g., analytics cookies), performance of a contract (providing the Service), compliance with legal obligations, and legitimate interests (improving the Service and preventing abuse).

4. Data retention

Uploaded images are stored securely and automatically purged after a short retention window unless you explicitly save them. Transaction records and billing metadata are retained for up to seven years to comply with tax and accounting rules. Support correspondence is retained as long as necessary to resolve your issue and document our communication history.

5. Sharing data

• Paddle: Merchant of record that handles payments and tax remittance. Paddle processes payment instruments and shares success/failure metadata with us.
• Infrastructure providers: Google Cloud Platform stores encrypted uploads and model outputs; Postmark (or similar) providers send transactional emails when enabled.
• Analytics and error tracking: Google Analytics and privacy-focused logging capture aggregate usage metrics.
• Legal and compliance: We may disclose information if required by law, regulation, or legal process.

6. International transfers

Your data may be processed in the European Union and the United States. When we transfer data outside the EU, we rely on appropriate safeguards such as Standard Contractual Clauses and data processing agreements with our processors.

7. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data. You can also request a copy of your data or withdraw consent for analytics cookies. Contact us at support@rephoto.app to exercise your rights. You may also lodge a complaint with your local data protection authority.

8. Children

The Service is not directed to children under the age of 13, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us so we can delete it.

9. Changes

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through the Service and update the “Last updated” date at the top of this page.

10. Contact

Questions about this policy? Email us at support@rephoto.app or write to Av. Corrientes 345, C1043 Buenos Aires, Argentina. We aim to respond within two business days.

If you reside in the EU or UK, you may also contact the Spanish Data Protection Agency (Agencia Española de Protección de Datos).