Privacy Policy (GDPR) – Revive by BashBash Labs

Last updated: February 2, 2026

This Privacy Policy explains how Revive by BashBash Labs handles personal data when you visit our website, create an account, or use our services.

1) Who we are

Revive is a product operated by BashBash Labs, trading online as BashBashlabs.com ("we", "us", "our"). BashBash Labs acts as the data controller for personal data processed in connection with Revive under the General Data Protection Regulation (GDPR).

• Product: Revive
• Company: BashBash Labs (BashBashlabs.com)
• Website: https://www.bashbashlabs.com
• Product Website: https://www.revive.photos
• Contact: hello@revive.photos

2) What personal data we collect

a) Data you provide

• Name and email address
• Account information required for login and access
• Messages, feedback, or support requests you submit
• Payment‑related metadata (processed securely by third‑party payment providers)

b) Data we collect automatically

We do not use advertising or tracking cookies. We process limited technical data required to operate and secure the service, including:

• IP address
• Device and browser type
• Timestamps and basic event logs

c) Uploaded content

When you upload photos or related content to Revive ("User Content"), that content may include personal data such as faces or identifiable individuals. Revive does not perform biometric identification or identity verification. You are responsible for ensuring you have the rights and permissions to upload and process this content.

3) How we use personal data

We use personal data to:

• Provide, operate, and maintain Revive
• Authenticate users and manage accounts
• Process photo restoration, enhancement, colorization, and upscaling requests using AI models
• Store User Content in your personal gallery when you choose to save it
• Communicate service updates and respond to inquiries
• Prevent abuse, fraud, and security incidents
• Comply with legal obligations

4) Legal bases (GDPR)

We rely on the following legal bases:

• Contract (Art. 6(1)(b)) to provide the service you request
• Legitimate interests (Art. 6(1)(f)) to secure, improve, and support the service
• Consent (Art. 6(1)(a)) where required
• Legal obligation (Art. 6(1)(c)) where applicable

5) AI processing and limitations

Revive uses machine learning models to restore, enhance, colorize, and upscale photos. AI‑generated results may vary in quality and accuracy and may not always reflect real‑world details. Outputs should be reviewed before use where accuracy is important.

User‑uploaded photos are not used to train or fine‑tune AI models for other users. We may use aggregated or anonymized usage data to improve system performance and reliability.

6) Prohibited sensitive data

Please do not upload special categories of personal data under GDPR or other highly sensitive personal data unless explicitly agreed in writing. This includes biometric data used for identification, health data, or government‑issued identifiers.

7) Service providers

We rely on trusted third‑party providers for infrastructure, storage, analytics, and payment processing. These providers process limited personal data only as necessary to deliver the service and are contractually required to protect it.

We may disclose personal data if required by law or to protect the rights, safety, and integrity of Revive and its users.

A list of subprocessors is available upon request.

8) International transfers

Revive serves users globally. Where personal data is transferred outside the EU or UK, we use appropriate safeguards such as Standard Contractual Clauses and additional protective measures where required.

9) Data retention and deletion

We retain personal data only as long as necessary:

• Account data while your account remains active and for a limited period afterward for security and legal compliance
• User‑uploaded images until you delete them from your account or request deletion
• Support communications typically up to 12 months after last interaction
• System logs for limited periods appropriate for security and troubleshooting

When you delete images or request account deletion, content is removed from active systems. Residual copies may remain in encrypted backups for a limited time before being permanently overwritten.

10) Security

We use appropriate technical and organizational measures to protect personal data, including access controls, encryption in transit, and secure storage practices.

11) Your rights

If you are located in the EEA or UK, you may have the right to access, correct, delete, restrict, or object to processing of your personal data, request data portability, and withdraw consent where applicable.

You may also lodge a complaint with your local data protection authority.

To exercise your rights, contact hello@revive.photos.

12) Children's privacy

Revive is not intended for use by children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided personal data, please contact us and we will delete it.

13) Cookies

Revive uses only essential cookies required for core functionality. We do not use advertising or tracking cookies. If this changes, we will update this policy and request consent where required.

14) Contact

For privacy‑related questions or requests:

Email: hello@revive.photos
Website: https://www.revive.photos