Privacy policy
Updated · 2026-11-07
Who is responsible
RestoPic is operated by Rui Wang as an individual. This policy covers restopic.app, canyintupian.com and zhaopaitu.com. Contact hello@restopic.app for privacy, account and service requests.
Local editing and cloud AI
Basic edits and browser-local works stay on your device; selecting a photo does not automatically upload the original to our servers. A restricted administrator AI pilot sends prompts and optional reference images to the selected model provider and stores results and call records in the cloud. Upload only material you are authorized to use, without unnecessary personal, sensitive or confidential information.
Account and contact data
Where sign-in is enabled, we verify an email code or a Google or Facebook account identifier and keep an internal account, sign-in methods, sessions and security records. Email sign-in sends your address and code to our email provider. Keyed digests used to match emails and provider identifiers remain linkable personal data, not anonymous data. We do not receive third-party passwords, friend lists or posting permissions. Support requests include your message and reply address.
Purposes and providers
Necessary processing provides the service you request, maintains accounts and prevents abuse; analytics requires your consent, and legal obligations follow applicable law. Sites and Cloudflare host and store data. Enabled email sign-in uses Resend; contact mail is routed by Cloudflare to Gmail. Optional social sign-in involves Google or Meta; optional analytics uses Google Analytics. Cloud AI shares content with the selected provider needed for the task. We do not sell personal data or ourselves train general-purpose models on uploads. Third-party model retention and training terms require provider-specific checks; we do not promise universal zero retention.
Cookies and analytics choices
The site-password cookie lasts up to 8 hours, account sessions up to 24 hours and language preferences up to 1 year. Optional Google Analytics loads only after consent to understand visits, pages and devices. Declining does not affect editing or export. We do not add emails, account IDs, codes, images or creative content to analytics events, and omit URL queries and fragments. Decline or withdraw below at any time. Your choice is remembered for 180 days in this browser on this domain; other domains require a separate choice.
Retention and deletion
You control local works through browser-data clearing or permanent deletion; moving a work to trash does not erase its image. Account records remain while account services are provided. Security, support and cloud-call records remain as needed to resolve issues, prevent abuse or meet legal duties. Code or session expiry does not mean database erasure. Fully automated account and backup deletion is not available; requests are verified and handled manually, with scope, progress and necessary exceptions explained. Backup copies are not represented as instantly erased; we explain the available removal cycle.
Your rights, international processing and updates
Subject to applicable law, you may request access, correction, deletion, export, restriction or objection, withdraw consent, or complain to a competent regulator. Email hello@restopic.app. We use proportionate identity checks and respond within one month, or sooner if law requires; any lawful extension will be explained promptly. Providers may process data outside your region; we arrange processing under the conditions and safeguards required by applicable law. This service is for adults, not children. Material policy changes are posted here, with additional notice or consent where legally required.