Your photo.
Your private moment.

01. Who handles your data

RelightSnap is operated by 42n, the team behind RelightSnap. Contact us at contact@domain about this policy or your personal data. This policy covers the RelightSnap website, photo editing and account services.

02. What we collect and why

Account information

Your name, email, password hash, sign-in method and account status. Google sign-in also supplies a Google account identifier and may supply a profile image. We use these to create and secure your account.

Photos and editing details

Your uploaded image, generated result, preview, original filename, preset, dimensions and processing status. These let us perform the edit, show history and provide downloads.

Usage and security records

IP address, guest identifier, timestamps, landing-page URL, credit activity, errors and generation statistics. We use these for guest limits, fraud prevention, troubleshooting and product measurement. A country code may be provided by our network infrastructure.

Payments and support

Polar checkout and order identifiers, amounts, currency, refund totals and purchased credits; messages you send to support. Polar handles card details; we do not store your full card number.

Cookies and browser storage

Sign-in sessions, guest access and editing state; analytics when configured. See our Cookie Policy.

Where GDPR applies, we process account, photo and purchase data to perform our contract with you; security and operational records for legitimate interests in running and protecting RelightSnap; legally required records to meet legal obligations; and optional tracking on consent where required. We do not sell your photos or use them for advertising.

03. Services involved in your edit

OpenAI processes the prepared photo and our preset instruction through its image-editing API. API inputs and outputs are not used for model training by default. Standard abuse-monitoring retention is up to 30 days; legal or safety exceptions can require longer retention, including review of suspected child sexual abuse material. See OpenAI’s API data controls. Deleting a photo from RelightSnap does not immediately delete an independent provider log.

Polar processes checkout, payments and refunds under its privacy policy. Google handles optional sign-in and, when enabled, Tag Manager or analytics. Our hosting stores the application and photos. Authorized administrators can access photos to operate and troubleshoot the service; photos are not published in a public gallery.

Providers may process information outside your country, including in the United States. Where GDPR applies, international transfers require an appropriate legal safeguard, such as an adequacy decision or standard contractual clauses. Contact us for details of the arrangements applicable to your data.

04. Photo retention and deletion

Guest photos are scheduled for deletion after 24 hours; account photos after 30 days from upload. Claiming a guest photo on sign-in uses the account retention period measured from the original upload. Cleanup runs on a schedule or during site visits, so physical removal can follow the expiry time at the next cleanup run.

You can delete an individual photo in your account or delete the account and its photos in Settings. You can also request deletion through support. Account deletion disables access and removes photos, password hashes and the stored avatar URL. It currently retains account identifiers, name, email, Google identifier where present, usage records and payment/credit records for accounting, security and resolving disputes. These records do not have the photo retention deadline; contact us to request further erasure, subject to records we must keep.

We remove embedded EXIF and GPS metadata when preparing uploads. A location visible in the picture or included in its filename is still information you have supplied. We do not use your photos to train models and do not offer face recognition, identity matching or biometric identification.

05. People in photos and your rights

Only upload photos you have the right to process. You are responsible for the privacy and permissions of other people in a photo, including obtaining appropriate parent or guardian permission for children. Do not upload intimate or sensitive images without valid authorization.

Where GDPR applies, you may request access, correction, erasure, restriction, portability or object to processing, and withdraw consent without affecting earlier lawful processing. You may complain to your local data protection authority. Email us with your request; we may need to verify identity. We normally respond to GDPR requests within one month, with extensions only where the law allows.

We update this policy when our practices change and show the revision date above. Material changes affecting your use will be communicated through the service or your account email where appropriate.