Privacy Policy

PhotoMemorial and your privacy

This policy explains data handling for the PhotoMemorial website and memorial-photo service. In this policy, “PhotoMemorial,” “we,” and “our” refer to this service. For data and privacy questions, contact support@photomemorial.ai.

Information we process

• Account data: the name, email address, profile image, locale, and authentication records provided through Google sign-in.
• Photos and generation data: the two source photos, generated previews and finished images, composition choice, refinement instructions, task status, and technical error records.
• Anonymous access data: a random visitor identifier stored in a secure HttpOnly cookie. PhotoMemorial AI stores only a hash of that token. A salted hash of the connecting IP address is retained temporarily to prevent free-preview abuse; the raw IP is not used as the anonymous identity.
• Payment data: order number, product, amount, currency, payment status, refund status, and the Stripe customer or transaction identifiers needed to reconcile a purchase. Stripe processes card details; PhotoMemorial AI does not store full card numbers.
• Usage and device data: security logs and, only when configured, analytics events such as upload selection, preview, sign-in, checkout, payment, generation, download, failure, refund, and deletion. Analytics configuration will be disclosed through the production consent and cookie controls required in the applicable region.

How photos are used

When you request generation, PhotoMemorial AI sends the selected photos and the necessary editing instruction to a contracted image-processing provider so that its selected image-editing model can perform the request. That service is a downstream provider in this flow. PhotoMemorial AI does not publish your photos, create a public gallery, or share a permanent public image URL.

We have not independently verified the downstream provider's retention period or a contractual exclusion of model training for this service. We therefore do not promise that photos sent for processing are excluded from training or deleted on the same schedule as our own storage. Our seven-day anonymous retention rule below applies to storage controlled by PhotoMemorial. If this uncertainty is not acceptable to you, do not upload photos.

Why we process information

We process information to provide the requested preview and edits, authenticate and protect accounts, store private history, process payments and refunds, prevent abuse, respond to support requests, comply with legal obligations, and improve reliability. Where consent is required for analytics or non-essential cookies, those features will remain disabled until consent is obtained.

Service providers and transfers

PhotoMemorial AI may disclose the minimum necessary data to:

• a contracted image-processing provider for image editing;
• Cloudflare for application hosting, private R2 object storage, D1 data storage, network security, and delivery;
• Google for OAuth authentication;
• Stripe for checkout, payment reconciliation, fraud prevention, and refunds;
• an analytics or support provider only when it is configured and lawfully enabled.

These providers may process data outside your country or region, where data-protection rules may differ. Contact us before uploading if you need information about processing locations or safeguards; this page does not promise that all processing takes place in your country.

Storage and retention

• Anonymous source photos, watermarked previews, task records, and related assets expire after seven days.
• When you sign in and claim an anonymous result, its assets become part of your private account history and remain until you delete the photo or close the account.
• Deleting a photo removes that task and its derived private image assets. Deleting an account removes the account's memorial-photo assets; deletion is blocked if the system cannot safely complete the asset removal.
• Payment and refund records may be retained separately for tax, accounting, fraud-prevention, and legal obligations even after account deletion.
• Short-lived security and rate-limit records are retained only as necessary to protect the free-preview system.

Security

Photos are stored as private objects and served only after visitor or account ownership is checked. PhotoMemorial AI uses encrypted transport, access controls, file-signature and size checks, metadata removal, restricted download routes, and secret-management controls. No online service can guarantee absolute security.

Your choices and rights

You can view, download, refine, and delete photos from My photos. You can close your account from profile settings. Depending on your location, you may also have rights to access, correct, export, restrict, object to, or erase personal data, and to complain to a supervisory authority.

Children

PhotoMemorial AI is not directed to children. You must be at least 18, or the age of legal majority in your location, to purchase credits or submit photos without a parent or guardian acting lawfully on your behalf.

Changes and contact

Material changes will be reflected by the updated date and, where required, an additional notice. Send privacy questions to support@photomemorial.ai.