Last updated: [DATE]
This policy explains what [LEGAL ENTITY NAME] ("Restyla", "we") collects when you use restyla.io, why we collect it, and what rights you have. We have tried to write it in plain English.
[LEGAL ENTITY NAME], [REGISTERED ADDRESS], is the data controller for the personal data described here. Privacy questions: privacy@restyla.io.
Account data — email address, hashed password, sign-in provider, and the date you created your account.
Images you upload and generate — the source photo, the prompt or preset, the result, and the settings used. We need these to run the generation and to show your history.
Credit and billing data — your credit balance and a transaction log of purchases and deductions. Card details are handled by our payment provider and never reach our servers; we store only a transaction reference.
Technical data — IP address, approximate location derived from it (country level), browser and device type, and pages visited. This is what any web server records, and we use it for security and abuse prevention.
Usage data — how many generations you have made, which presets you use, and error events.
To provide the service: run your generation, store your history, keep your credit balance accurate, and process payments.
To protect the service: enforce the free daily quota, detect abuse such as repeated attempts to bypass limits, and keep the site available.
To comply with the law and enforce our Terms.
We do not train machine learning models on your photos, and we do not use your images for advertising.
Contract — to deliver the generations and credits you asked for. Legitimate interests — security, abuse prevention, and keeping the service working. We balance these against your rights. Consent — where we ask for it, such as optional analytics cookies. You can withdraw consent at any time. Legal obligation — tax, accounting and lawful requests.
Model providers — to generate your image we send the source photo, your prompt and the settings to an inference provider: [Kie.ai] running [Seedream 5.0 Flash and Nano Banana 2.1], and [EvoLink]. These providers process the image to return a result and are contractually restricted from using it for other purposes.
Payment provider — [Waffo] processes your payment and receives the amount, your email and transaction metadata.
Infrastructure — [hosting provider] for servers, [Cloudflare] for CDN and bot protection, and [email provider] for transactional email.
Professional advisers and authorities — where we are legally required to disclose, or to establish or defend a legal claim.
We do not sell your personal data.
Generated and uploaded images: [24 hours for guests who are not signed in, and 30 days for images in a signed-in account's history]. After that they are deleted from our storage.
Account data: for as long as your account exists, then [30] days after deletion, except billing records which we keep for [7] years as tax law requires.
Generation logs and technical logs: [90] days.
Our servers and providers may be located outside your country, including in the United States. Where we transfer data out of the EEA or the UK, we rely on Standard Contractual Clauses or another approved mechanism.
You can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, and receive it in a portable format. If we relied on consent, you can withdraw it at any time.
Write to privacy@restyla.io. We respond within 30 days. You also have the right to complain to your local data protection authority.
You can delete your account and its image history from your account settings.
Restyla is not intended for children under [13 / 16]. We do not knowingly collect their data. If you believe a child has given us personal data, contact privacy@restyla.io and we will delete it.
We use HTTPS everywhere, access controls, encryption at rest for stored images, and short-lived signed URLs for downloads. No system is perfectly secure, but we take incidents seriously and will notify affected users and regulators where the law requires.
We automatically check uploaded images and generated results against our content rules, and automatically count free quota. These checks can block a generation. They do not make decisions that produce legal effects about you, and you can appeal a block by writing to support@restyla.io.
If we make a material change we will email signed-in users or post a notice on the site before it takes effect, and update the date at the top.
[LEGAL ENTITY NAME], [REGISTERED ADDRESS] privacy@restyla.io