Back to home

Privacy Policy

How PhotoMemorial AI handles private photos, AI generation, account data, payments, retention, and deletion requests.

Last updated: 2026-10-28

PhotoMemorial and your privacy

This policy explains data handling for the PhotoMemorial website and memorial-photo service. In this policy, “PhotoMemorial,” “we,” and “our” refer to this service. For data and privacy questions, contact support@photomemorial.ai.

Information we process

  • Account data: name, email, profile image where available, locale, and authentication records from Google sign-in or email registration. Email passwords are stored as password hashes, not plain text.
  • Photos and generation data: source photos, generated previews, finished images and short silent videos, composition or restoration choices, motion presets, refinement instructions, task status, and technical error records.
  • Browser drafts and legacy guest data: selected photos and composition choices may be saved in this browser's IndexedDB so they survive sign-in and checkout. They remain on this device until replaced, cleared after successful generation, or removed by clearing site data. Legacy guest results use a random visitor identifier in an HttpOnly cookie; our database stores only its hash. Short-lived salted IP hashes may be retained for abuse prevention.
  • Payment data: order number, product, amount, currency, payment status, refund status, and the Stripe customer or transaction identifiers needed to reconcile a purchase. Stripe processes card details; PhotoMemorial AI does not store full card numbers.
  • Usage and device data: security logs and, only when configured, analytics events such as upload selection, preview, sign-in, checkout, payment, generation, download, failure, refund, and deletion. Analytics configuration will be disclosed through the production consent and cookie controls required in the applicable region.

How photos are used

When you request generation, PhotoMemorial AI sends the selected photos and the necessary editing instruction to a contracted image-processing provider so that its selected image-editing model can perform the request. That service is a downstream provider in this flow. PhotoMemorial AI does not publish your photos, create a public gallery, or share a permanent public image URL.

We have not independently verified the downstream provider's retention period or a contractual exclusion of model training for this service. We therefore do not promise that photos sent for processing are excluded from training or deleted on the same schedule as our own storage. Our seven-day anonymous retention rule below applies to storage controlled by PhotoMemorial. If this uncertainty is not acceptable to you, do not upload photos.

For restoration, we process one source photo. For animation, SeeAPI processes one photo and a motion instruction using MiniMax H3. A time-limited signed link gives the provider access to the source photo; this is not a public gallery link. Delivered clips are silent and do not provide voice cloning, narration or conversations.

SeeAPI's current policy states that its stored inputs, output files and task information have no scheduled automatic expiry; request logs are retained for 60 days. Expiry of our source link or deletion of our task does not delete a copy already retrieved by a provider. SeeAPI states it does not train models on API inputs or outputs; we have not independently verified every downstream model provider's retention or training rules. Contact support to request assistance with provider deletion. See SeeAPI's data-handling policy.

Why we process information

We process information to provide the requested preview and edits, authenticate and protect accounts, store private history, process payments and refunds, prevent abuse, respond to support requests, comply with legal obligations, and improve reliability. Where consent is required for analytics or non-essential cookies, those features will remain disabled until consent is obtained.

Service providers and transfers

PhotoMemorial AI may disclose the minimum necessary data to:

  • a contracted image-processing provider for image editing;
  • SeeAPI and its downstream video-model service for requested photo animation;
  • Cloudflare for application hosting, private R2 object storage, D1 data storage, network security, and delivery;
  • Google for OAuth authentication and, only with your consent, Google Analytics usage statistics;
  • Stripe for checkout, payment reconciliation, fraud prevention, and refunds;
  • an analytics or support provider only when it is configured and lawfully enabled.

These providers may process data outside your country or region, where data-protection rules may differ. Contact us before uploading if you need information about processing locations or safeguards; this page does not promise that all processing takes place in your country.

Storage and retention

  • Legacy anonymous source photos, watermarked previews, task records, and related assets expire after seven days. New generation requires sign-in. Photo generation, restoration and refinement use 1 credit; a five-second silent animation uses 10 credits.
  • When you sign in and claim an anonymous result, its assets become part of your private account history and remain until you delete the photo or close the account.
  • Deleting a photo or clip removes that task and its derived private image or video assets. Deleting an account removes the account's memorial assets; deletion is blocked if the system cannot safely complete the asset removal.
  • Payment and refund records may be retained separately for tax, accounting, fraud-prevention, and legal obligations even after account deletion.
  • Short-lived security and rate-limit records are retained only as necessary to prevent abuse and protect the service.

Security

Photos are stored as private objects and served only after visitor or account ownership is checked. PhotoMemorial AI uses encrypted transport, access controls, file-signature and size checks, metadata removal, restricted download routes, and secret-management controls. No online service can guarantee absolute security.

Your choices and rights

You can view, download, refine, and delete photos from My photos. You can close your account from profile settings. Depending on your location, you may also have rights to access, correct, export, restrict, object to, or erase personal data, and to complain to a supervisory authority.

Children

PhotoMemorial AI is not directed to children. You must be at least 18, or the age of legal majority in your location, to purchase credits or submit photos without a parent or guardian acting lawfully on your behalf.

Changes and contact

Material changes will be reflected by the updated date and, where required, an additional notice. Send privacy questions to support@photomemorial.ai.

With your optional analytics choice enabled, Google tags and collection may use our domain's Google tag gateway. It enforces that choice using a preference cookie, strips account cookies and authorization headers, and transiently forwards the trusted network address and region to Google without recording them in our own analytics store. Supported DNT/GPC signals stop forwarding.