Privacy Policy

Version 1.0 · Last updated: May 28, 2026

Memorai ("we", "us", "our") takes the privacy of your personal data and photographs seriously. This policy explains what we collect, why we collect it, and how you can exercise your rights under the General Data Protection Regulation (GDPR) and applicable local data protection law.

1. Who We Are (Data Controller)

The data controller is Memorai (contact: hello@vremeplov.aitools.rs). You may contact us at any time regarding your personal data.

2. What Data We Collect

Account data: your name, email address, hashed password, and plan type.
Photographs: images you upload to the service, stored on our server.
Consent records: date, time, IP address, and version of policies you accepted.
Usage data: storage used, upload timestamps, and enhancement history.
Technical data: IP address (for security), browser user-agent string.

3. Legal Basis for Processing

Contract performance (Art. 6(1)(b) GDPR): providing the restoration service.
Consent (Art. 6(1)(a) GDPR): you explicitly consented at registration.
Legitimate interest (Art. 6(1)(f) GDPR): security and fraud prevention.
Legal obligation (Art. 6(1)(c) GDPR): where required by law.

4. How We Use Your Data

To provide, operate, and improve the photo restoration service.
To send account-related emails (verification, password reset, billing).
To maintain the security of the platform.
To comply with legal obligations.

5. Your Photographs

Your photos are stored exclusively for the purpose of delivering the service to you. We never sell, share, license, or use your photographs to train AI models without your explicit, separate, and informed consent. Photos are stored encrypted at rest.

6. Data Retention

Photos are retained as long as your account is active.
If you cancel your subscription, photos are retained for 30 days then permanently deleted.
If you delete your account, all data is permanently deleted within 7 days.
Consent logs are retained for 5 years for legal compliance.

7. Your Rights (GDPR)

You have the following rights regarding your personal data:

Right of access (Art. 15): request a copy of your data.
Right of rectification (Art. 16): correct inaccurate data.
Right of erasure (Art. 17): request deletion ("right to be forgotten").
Right to restrict processing (Art. 18).
Right to data portability (Art. 20): receive your data in a machine-readable format.
Right to object (Art. 21).
Right to withdraw consent at any time without affecting prior processing.

To exercise these rights, email hello@vremeplov.aitools.rs or visit your GDPR rights page. We will respond within 30 days.

8. Third Parties & Transfers

We do not sell your data. We may use third-party hosting infrastructure within the EU/EEA. Any transfers outside the EU are governed by Standard Contractual Clauses (SCCs).

9. Cookies

We use only essential session cookies required for login and security. See our Cookie Policy.

10. Security

We use HTTPS, bcrypt password hashing, CSRF protection, and parameterised SQL queries. Despite these measures, no system is 100% secure. Please use a strong, unique password.

11. Children

The service is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has registered, please contact us immediately.

12. Changes to This Policy

We will notify registered users by email of material changes at least 14 days before they take effect. Continued use of the service constitutes acceptance.

13. Contact & Complaints

Contact us: hello@vremeplov.aitools.rs
You also have the right to lodge a complaint with your local data protection authority.