Privacy Policy

Last updated: June 29, 2026

We built Retouch.to with privacy in mind from day one. This policy explains plainly what data we collect, why we need it, and how we protect it.

1. Who We Are

Retouch.to is the data controller for your personal data. If you have any questions about this policy or want to exercise your privacy rights, just reach out: [email protected]

2. What We Collect and Why

We only collect what we actually need to run the service.

Your email address
Used for signing in and sending you essential account communications like billing confirmations. Nothing else.

Images you upload
Your photos are processed solely to produce the retouched output you asked for. We never use your images to train AI models, and we never share them with third parties. Images containing faces are treated as ordinary photos for editing — we do not perform any biometric identification or profiling.

Payment data
Card payments are handled entirely by Stripe — we never see or store your card details. We keep basic transaction records (amount, date, subscription status) as required by law.

Anonymous usage statistics
We self-host Plausible Analytics, a privacy-focused tool that counts page views and feature usage without collecting any personal data, without fingerprinting your device, and without setting any cookies. The aggregated stats help us understand what’s working and improve the product.

3. The Services We Use

We work with a small number of trusted providers. They process data only on our instructions, never for their own purposes.

Cloudflare R2 — File storage
Your uploaded images and processed outputs are stored in Cloudflare R2 on European servers. Under normal conditions, this data stays within the EEA.
Privacy policy: cloudflare.com/privacypolicy

RunPod — Image processing
AI retouching runs on RunPod’s Secure Cloud using isolated dedicated servers. Images are processed transiently — RunPod does not retain any image data after processing completes.
Privacy policy: runpod.io/privacy-policy

Brevo — Transactional email
Account and billing emails are sent through Brevo, an EU company headquartered in Paris. They process your email address and basic delivery metadata on our behalf.
Privacy policy: brevo.com/legal/privacypolicy

Stripe — Payment processing
Stripe handles all payment card data under PCI-DSS standards. We only receive non-sensitive transaction metadata from Stripe.
Privacy policy: stripe.com/privacy

4. International Data Transfers

We aim to keep your data in the EEA. Where transfers outside the EEA are unavoidable (for example, via Cloudflare or Stripe’s US parent entities), they are covered by Standard Contractual Clauses approved by the European Commission. You can request details by emailing [email protected].

5. How Long We Keep Your Data

• Email address: Kept while your account is active, deleted within 30 days of account closure.
• Uploaded images and outputs: Kept long enough to deliver the service and allow re-download, then permanently deleted. You can also request immediate deletion at any time.
• Transaction records: Kept for 7 years as required by EU accounting and tax law.

6. Your Rights

You have the right to access, correct, or delete the data we hold about you, to restrict or object to how we process it, and to receive a copy in a portable format. We don’t make any automated decisions about you that have legal or significant effects. Just email [email protected] and we’ll help — we’ll respond within 30 days.

7. Complaints

If you feel we haven’t handled your data properly, you have the right to lodge a complaint with your national data protection authority. A full list of EU supervisory authorities is at: edpb.europa.eu/about-edpb/about-edpb/members_en

8. Cookies

We only use cookies that are strictly necessary for login and session management. We have no advertising cookies, no third-party trackers, and our analytics (Plausible, self-hosted) is completely cookieless.

9. Security

We protect your data using encrypted connections (HTTPS/TLS via Cloudflare) and rely on our infrastructure providers’ encryption at rest. Access to your data is gated behind authenticated sessions and time-limited signed URLs. If we become aware of a breach that poses a high risk to your rights, we will notify you without undue delay.

10. Children

Retouch.to is not intended for anyone under 16. If you believe a minor has created an account, please let us know at [email protected] and we will delete the data immediately.

11. Changes to This Policy

If we make material changes, we’ll let you know by email or via a notice on the site before they take effect. The “last updated” date at the top always reflects the current version.

12. Contact

Questions, requests, or just want to know more? We’re happy to help.
Email: [email protected]