Privacy Policy
Summary of Our Data Commitments
ImgHeal is dedicated to the conservation, restoration, and digital preservation of vintage family photographs. We believe your memories are strictly confidential. We do not sell your personal data, we do not use your photographs or Google profile data to train public AI models, and we do not serve advertisements. All user data is processed solely to provide photographic restoration services.
1. Identity of the Application & Data Controller
This Privacy Policy applies to the web application ImgHeal ("ImgHeal", "we", "us", or "our"), operated at:
Primary Application URL: https://imgheal.vercel.app
Service Type: Digital Photographic Restoration, Colorization, and Conservation Platform
Contact Email: raman8ransubhe@gmail.com
For the purposes of applicable data protection regulations (including the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA)), ImgHeal is the data controller responsible for your personal information.
2. Google User Data & OAuth Disclosure
ImgHeal integrates with Google Identity Services (Google OAuth 2.0) to enable safe, passwordless user authentication and account creation. This section explicitly describes our access, handling, storage, and retention of Google User Data in compliance with the Google API Services User Data Policy.
A. Specific Google Scopes Requested and Data Accessed
ImgHeal requests strictly the minimal scopes required to verify your identity. We request only:
- openid / https://www.googleapis.com/auth/userinfo.email: Accesses your verified Google email address. This is used as your unique account identifier, for sending payment confirmation receipts, and to authenticate your access to your restored images.
- https://www.googleapis.com/auth/userinfo.profile: Accesses your full name and public avatar URL. This is used solely to personalize your workspace header and account dashboard.
We do not request access to Google Drive, Google Photos, Gmail, contacts, calendars, or any other sensitive or restricted Google user data scopes.
B. Purpose of Processing Google User Data
Your Google profile data is used exclusively for:
- Authenticating your session and verifying you are the authorized owner of your restoration ledger.
- Linking your purchased folio credits, upload quotas, and restoration history securely to your profile.
- Communicating critical administrative notices regarding transaction receipts, security alerts, or system updates.
C. Google API Services User Data Policy & Limited Use Requirements
ImgHeal's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements:
We never sell, rent, lease, or trade Google user data to data brokers, marketers, or any third party.
We never use or transfer Google user data to serve targeted, behavioral, personalized, or interest-based ads.
Google user data and your uploaded photos are never used to train, retrain, or improve generalized or public AI/ML models.
Our team cannot view your Google data unless you provide explicit consent to investigate an issue, or when required by legal obligation.
3. Categories of Information Collected
We collect information that you directly provide to us, as well as limited technical telemetry generated when you interact with the service:
A. User Account Information
Provided during Google authentication: Your verified email address, full name, profile picture URL, and internal unique user identifier (UUID).
B. Photographs and Digital Scans
The image files (JPEG, PNG, WebP) you upload for restoration, in-painting, defect correction, or colorization, along with the resulting high-density restored digital masters.
C. Commercial & Billing Records
Records of purchased restoration folios, credit deductions, and transaction reference numbers. Note: All payment instrument data (credit card numbers, expiry, CVC, UPI credentials) is processed directly by our PCI-DSS Level 1 certified payment processor (Dodo Payments). ImgHeal never receives, sees, or stores your payment card credentials.
D. Technical Telemetry & Log Data
IP address (anonymized/truncated for operational security), browser type and version, operating system, HTTP referrers, request timestamps, and system performance metrics collected to prevent abuse and maintain server uptime.
4. Ownership and Protection of Uploaded Photographs
You retain 100% full intellectual property ownership and copyright of all original photographs you submit, as well as the restored image masters produced by ImgHeal.
- We process photographs strictly on demand to carry out physical defect repair, tonal rebalancing, and period colorization.
- Photographs are stored in isolated, secure, encrypted cloud buckets accessible only through authenticated session tokens issued to your account.
- We do not publish, license, display, or distribute your family photographs to third parties or marketing galleries without your prior explicit written permission.
- Your photographs are never pooled into public datasets or used to train commercial generative diffusion models.
5. Trusted Technical Service Providers
We engage carefully vetted third-party service providers (subprocessors) solely to support essential technical operations under strict confidentiality and data protection agreements:
OAuth 2.0 authentication verification and cloud infrastructure services.
Encrypted PostgreSQL database and private file vault storage for originals and restored masters.
Edge security, SSL termination, DDoS protection, and computational restoration inference.
PCI-DSS Level 1 compliant payment processing for folio acquisitions.
6. Data Retention, Deletion & User Rights
You have full control over your personal information and stored photographs:
You can delete individual scans or restored files at any time via your Conservation Archive. Once deleted, the corresponding storage objects are permanently erased from our cloud storage buckets.
You have the right to request complete deletion of your account, email records, and all associated images. You can trigger deletion from your Account Preferences or by sending an email with the subject "Account Deletion Request" to raman8ransubhe@gmail.com. All account data is completely purged within 7 business days.
You can disconnect ImgHeal's access to your Google account at any time by visiting your Google Account Permissions Console. Revoking access halts any future token refreshes immediately.
7. Information Security Standards
We implement comprehensive technical and administrative safeguards to protect your personal data from unauthorized access, loss, or alteration:
- End-to-end transport layer encryption (TLS 1.3 / HTTPS) on all web requests and API endpoints.
- AES-256 encryption at rest for all database tables and cloud storage buckets.
- Strict principle-of-least-privilege access controls restricting infrastructure access to authenticated core administrators.
- Continuous security monitoring and automated vulnerability patching across all dependencies.
8. Children's Online Privacy Protection
ImgHeal does not target, market to, or knowingly collect personal information from individuals under the age of 13 (or under 16 where required by regional law). If a parent or guardian becomes aware that their child has provided personal information to ImgHeal without consent, please notify us immediately at raman8ransubhe@gmail.com, and we will promptly purge the data.
9. Contact Us & Inquiries
If you have any questions, feedback, or requests regarding this Privacy Policy, our data practices, or compliance with Google User Data policies, please contact our data protection team:
Email: raman8ransubhe@gmail.com
Postal/Operating Domain: ImgHeal Atelier · https://imgheal.vercel.app
Direct Contact Desk: Consult the Atelier / Submit Inquiry