Privacy policy

Last updated 5 October 2026

Heirloom Restore ("we") provides a web service for restoring old photographs. This policy explains what we collect, why, and your rights under the GDPR.

What we collect

• Account data: your email address and sign-in details (or basic Google profile if you use Google sign-in).
• Photographs: images you upload and any damage you mark, sent only to produce your restoration.
• Billing data: plan, credit balance and payment references. Card details are handled by Stripe; we never see or store them.
• Technical data: basic logs needed to keep the service secure and working.

How we use your photographs

Photos are processed by our AI image provider solely to generate your restoration. We do not sell your photos or use them to train models. Restoration history is kept in your browser tab and disappears when you close it, unless you download it.

Legal basis

We process data to perform our contract with you (providing restorations and billing), to meet legal obligations (tax records), and for our legitimate interest in keeping the service secure.

Processors

We use trusted providers for hosting and authentication, AI image processing, and Stripe for payments. Each processes data only on our instructions.

Retention

Account and billing records are kept while your account is active and as required by law. Uploaded images are not stored after processing beyond short-lived technical caches.

Your rights

You can request access, correction, deletion, restriction or export of your data, and object to processing. You may also complain to the Portuguese data protection authority (Comissão Nacional de Proteção de Dados) or to the authority of the country where you live.

Contact

For privacy requests, contact us at heirloomrestore@sapo.pt.