Privacy Policy

FotoViva AI ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our AI-powered photo restoration service. We are fully compliant with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws.

We collect minimal data necessary to provide our service:

• Account information: email address, password hash, and authentication tokens.
• Photos you upload: images you submit for restoration, colorization, or repair.
• Usage data: number of photos processed, processing tool used, and timestamps.
• Technical data: browser type, IP address (anonymized), and device information for security and analytics.

Your uploaded photos are used solely to provide the service you explicitly request:

• Images are processed by our AI restoration engine to generate the restored output.
• Photos are stored temporarily in your private workspace so you can download the result.
• Images are never used to train AI models — not ours, not any third party's.
• Images are never sold, shared, or licensed to any third party.
• Images are never used for advertising or marketing without your explicit consent.

We implement industry-leading security measures:

• Encryption in transit: All data is protected with TLS 1.3.
• Encryption at rest: Photos and personal data are encrypted using AES-256.
• Isolated storage: Each user's photos are stored in a separate, access-controlled workspace protected by Row-Level Security (RLS).
• No unauthorized access: Even our engineering team cannot view your photos without your permission.

Depending on your jurisdiction, you have the following rights:

• Right to access: Request a copy of all data we hold about you.
• Right to rectification: Correct inaccurate or incomplete personal data.
• Right to erasure ("Right to be Forgotten"): Request deletion of your personal data and photos.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to restrict processing: Limit how we use your data.
• Right to object: Object to processing based on legitimate interests.
• Right to non-discrimination (CCPA): We will never discriminate against you for exercising your privacy rights.

To exercise any of these rights, email us at support@fotoviva.ai. We will respond within 30 days.

We use a minimal set of cookies:

• Essential cookies: Required for authentication and session management.
• Analytics cookies: We use privacy-focused analytics to understand feature usage. You can opt out at any time.

We do not use third-party advertising cookies or trackers.

We use the following sub-processors, all of which are GDPR-compliant:

• Cloud infrastructure: for secure storage and compute (SOC 2-aligned).
• AI model provider: for image processing — photos are sent via encrypted channels and are not retained by the provider.
• Payment processor: for handling subscription payments (PCI-DSS compliant).

FotoViva AI is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe we have inadvertently collected such data, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify users of material changes via email or a prominent notice on our website. The "Last updated" date at the top of this page reflects the most recent revision.

If you have any questions about this Privacy Policy or your data rights, please contact us at:
Email: support@fotoviva.ai