Last updated: May 1, 2026
We collect: (a) Account information (name, email, password hash); (b) Usage data (features used, recolor counts, session duration); (c) Payment information processed securely through Stripe — we never store card numbers; (d) Uploaded files temporarily during processing.
Your data is used to: provide and improve the Service, process payments, send transactional emails, prevent abuse, and generate anonymized analytics. We do NOT use your uploaded images for AI/ML training, advertising, or any purpose beyond delivering your requested edits.
Uploaded images are processed in isolated, encrypted containers. Original files are stored only for your active session. Temporary processing files are automatically deleted after export. Result files remain accessible in your workspace until you delete them or your account is terminated.
We do not sell, rent, or share your personal data with third parties except: (a) Service providers essential to operation (hosting, payments, email); (b) Legal requirements or law enforcement requests; (c) Business transfers (merger/acquisition with advance notice).
We use essential cookies for authentication and session management. We use minimal analytics (page views, feature usage) to improve the product. We do not use third-party advertising trackers. You can disable non-essential cookies in your browser settings.
We implement industry-standard security: TLS 1.3 encryption in transit, AES-256 encryption at rest, regular penetration testing, SOC 2 compliance (Enterprise tier), and isolated processing environments. We conduct regular security audits.
You have the right to: access your data, request corrections, request deletion, export your data, object to processing, and withdraw consent. To exercise these rights, email privacy@recolorify.com. We respond within 30 days.
Account data is retained for the duration of your account plus 30 days after deletion. Usage analytics are retained in anonymized form for up to 24 months. Uploaded files are retained per your workspace settings and deleted upon account termination.
Data may be processed in the United States and European Union. We use Standard Contractual Clauses (SCCs) for EU-to-US transfers. Enterprise customers may request data residency in specific regions.
The Service is not intended for children under 16. We do not knowingly collect data from minors. If we discover such data, we will delete it promptly.
We may update this policy periodically. Material changes will be communicated via email and in-app notification at least 14 days before taking effect.
For privacy inquiries: privacy@recolorify.com. Data Protection Officer: dpo@recolorify.com. Recolorify Studios, 123 Design Ave, Wilmington, DE 19801, USA.