Privacy Policy
Last updated: September 20, 2026
1. Data Controller
The data controller for this Service is:
- Company: Colorize AI
- Contact email: privacy@colorize.ai
- Data Protection Officer: Not applicable
2. Information We Collect
Account Information: When you register, we collect your email address and display name. If you sign up via Google OAuth, we collect your public profile information.
Uploaded Photos: We process photos you upload for colorization. These photos are processed in real-time and automatically deleted immediately after processing. We do not store, retain, or use your photos for any purpose other than providing the colorization service.
Payment Information: Payment processing is handled by Waffo Pancake, our payment service provider and Merchant of Record. We do not store your credit card information.
Usage Data: We collect non-personal analytics data including pages visited, features used, and general usage statistics to improve our service.
3. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Provide and maintain Service | Contract performance |
| Billing and payment processing | Contract performance |
| Customer support | Contract performance / Legitimate interest |
| Service notifications (billing, security, policy updates) | Legitimate interest |
| Security and fraud prevention | Legitimate interest |
| Product improvement and analytics | Legitimate interest |
| Legal compliance | Legal obligation |
| Marketing (optional) | User consent |
We may aggregate or de-identify data for statistical analysis. Such data cannot identify specific individuals.
4. Photo Privacy - Critical
Important: Your Photos Are Never Stored
Uploaded photos are processed in memory and permanently deleted immediately after colorization. We do not use your photos for AI training, do not share them with third parties, and do not retain copies.
5. Cookies and Tracking
| Type | Purpose | Can be disabled |
|---|---|---|
| Strictly necessary | Maintain login, core functionality | No |
| Functional | Language preferences, personalization | Yes |
| Analytics | Anonymous usage statistics, product optimization | Yes |
| Marketing (optional) | Targeted advertising and performance measurement | Yes |
You can adjust cookie preferences through your browser settings or our Cookie Management Center.
6. Data Sharing and Disclosure
We do not sell your personal information, including as defined under applicable laws such as CCPA. We only share information in the following circumstances:
- Service providers: Cloud computing, payment processing, customer support, and analytics vendors bound by confidentiality agreements. Payment card data is processed exclusively by our PCI-DSS compliant payment processor (Waffo Pancake) and is not stored on our servers.
- Business partners: If applicable, describe types of partnerships and data scope.
- Legal and regulatory requirements: As required by law, court order, or legitimate government request.
- Business transfers: In the event of a merger or acquisition, with advance notice and continued protection obligations.
- With your consent: For any other purposes not listed above, only with your explicit prior consent.
7. Data Security
- Transmission encryption: TLS/HTTPS
- Storage security: Passwords and sensitive data are encrypted or hashed
- Access control: Principle of least privilege; employees sign confidentiality agreements
- Regular security audits and vulnerability scanning
In the event of a security incident affecting your rights, we will notify you within 72 hours of discovery as required by applicable law. Please keep your account credentials secure and do not share them with others.
8. Data Retention
| Data Type | Retention Period | Disposal |
|---|---|---|
| Account information | During active period; 90 days after cancellation | Delete or anonymize |
| Transaction records | As required by law (typically 7 years) | Delete or archive |
| Customer support records | 3 years | Secure deletion |
| Security audit logs | 12 months | Secure deletion |
9. Your Data Rights
To exercise the following rights, contact us. We will process requests within 30 calendar days.
| Right | Description |
|---|---|
| Right to be informed | Know what data we collect and how we use it |
| Right of access | Obtain a copy of your personal data |
| Right to rectification | Correct inaccurate or incomplete data |
| Right to erasure | Request deletion of data under certain conditions |
| Right to restrict processing | Pause data processing under certain conditions |
| Right to data portability | Receive data in machine-readable format |
| Right to object | Object to processing based on legitimate interest or marketing |
| Right to withdraw consent | Withdraw consent for processing based on consent |
If you believe we have not properly handled your data, you have the right to lodge a complaint with your local data protection authority.
10. Marketing Communications
With your consent, we may send marketing information via email, SMS, or in-app notifications. You can unsubscribe at any time by clicking the "unsubscribe" link in emails, disabling marketing notifications in your account settings, or contacting us. Unsubscribing does not affect service-related notifications such as billing and security alerts.
11. International Data Transfers
Our servers and partners may be located in various regions including the United States and Singapore. For international transfers, we ensure data security through:
- Data processing agreements incorporating EU Standard Contractual Clauses (SCC)
- Transfers only to recipients providing equivalent protection
- Other safeguards such as adequacy decisions or Binding Corporate Rules
12. Children's Privacy
This Service is intended for users who are at least 18 years of age. We do not knowingly collect information from minors. If you believe your child has provided us with information, please contact us immediately and we will promptly delete such data.
13. Third-Party Links
This Service may contain links to third-party websites or integrate with third-party services. This Policy applies only to information we directly collect. We are not responsible for the data practices of third parties and recommend reviewing their policies before use.
14. Policy Changes
We may update this Policy from time to time. Material changes will be communicated at least 15 days in advance via platform notice or your registered email. The "Last Updated" date at the top of this page will be revised accordingly. Continued use after the effective date constitutes acceptance of the updated Policy.
15. Contact Us
For privacy-related questions or to exercise your rights:
- Privacy contact: privacy@colorize.ai
- Customer support: support@colorize.ai
- Company: Colorize AI
- Service hours: Monday to Friday, 09:00-18:00 UTC+8
Colorize AI · colorize.ai