RetroRevive Back to home
DPDP Act 2023 Compliant

Privacy Policy

Your memories are personal. This page explains exactly what we collect, how our AI processes your photos, and the rights you have under Indian law. Last updated: May 2026.

Overview

RetroRevive ("we", "us", "our") is an AI photo restoration service operated from India. We help families bring damaged, faded, or black-and-white photographs back to life. We take privacy seriously because the photos you trust us with are irreplaceable.

This policy explains what data we collect, how it is processed, how long it stays on our servers, and how you can ask us to delete it. By using RetroRevive you agree to the practices described below.

Data We Collect

To deliver a restoration we collect only what is strictly necessary:

  • Your name — so we can address you correctly in WhatsApp and email updates.
  • WhatsApp number — used to deliver your restored photo and to respond to support queries. We do not send marketing broadcasts.
  • Email address — used as a backup delivery channel and for order receipts.
  • Uploaded photographs — collected for the sole purpose of restoring the image you submit. We do not browse, share, or repurpose them.

We do not collect Aadhaar, PAN, location, contacts, or any other identifier beyond what is listed above.

AI Processing

Restorations are produced using the Google Gemini API. Your uploaded photo is transmitted over an encrypted connection to Google's infrastructure, processed in memory, and the restored output is returned to our servers for delivery to you.

We do not use your personal photos to train our AI models. We do not contribute your images to any third-party training dataset, and we do not allow Google or any other vendor to retain your images beyond the immediate processing window required to generate the result.

If a restoration ever needs manual quality control, only authorised members of our small India-based team can view the file, and only for the duration of that review.

Photo Retention

Restored and original photos are stored on our servers for 30 days from the date of delivery. This window exists so you have enough time to download your file, request a re-do, or recover a photo you may have misplaced.

After 30 days, both the original upload and the restored output are permanently deleted from our active storage and from our automated backups within an additional 7 days. Deletion is irreversible — please make sure you have downloaded your file before this window closes.

You may also ask us to delete your photos sooner. See Your Rights below.

Payments & Billing

Payments are processed by Razorpay, a PCI-DSS certified payment gateway licensed by the Reserve Bank of India. When you pay, your card number, CVV, UPI ID, net-banking credentials, and wallet details are entered directly on Razorpay's secure interface.

RetroRevive never sees or stores your full card or UPI details. We only receive a payment confirmation, an order ID, and the last four digits of the payment instrument for invoicing purposes.

Refunds, where applicable, are processed back to the original payment method through Razorpay.

Your Rights (DPDP Act)

Under the Digital Personal Data Protection Act, 2023, you have the right to:

  • Access the personal data we hold about you.
  • Correct or update any inaccurate information.
  • Request deletion of your photos and personal data at any time — even within the 30-day retention window.
  • Withdraw consent for further processing, which will result in the deletion of your data.
  • Grievance redressal — raise a complaint with our team and, if unresolved, escalate to the Data Protection Board of India.

To exercise any of these rights, message us on WhatsApp or email the address in the Contact section. We respond within 72 hours and complete deletion requests within 7 working days.

Security

Uploads and downloads are protected by TLS encryption. Files are stored in access-controlled cloud storage with row-level security policies that prevent cross-customer access. Administrative access is restricted to a small team and logged.

No system is perfectly secure. If you discover a vulnerability, please report it responsibly to us so we can fix it before disclosure.

Contact Us

For privacy questions, deletion requests, or to exercise any DPDP right, reach out to our team:

Please mention "Privacy Request" in the subject so we can route your message to the right person.