Privacy
Product draft for PolishPhoto. Not legal advice. Have counsel review before you take payments from the public.
What PolishPhoto stores, and how long a photo stays on the server.
Who we are
PolishPhoto is an independent photo cleanup site at polishphoto.com. This policy describes the week 1 product: an upload, a credit wallet, optional Google sign-in, and one-time packs sold through Waffo (Dodo is not live).
Photos
Uploads and results are deleted about 24 hours after the job is created. Deletion runs when a job is created or read, and from a scheduled hook once CRON_SECRET is set. Do not use the site as a photo library. Download the file you want to keep.
Account and cookies
A browser wallet cookie (pp_uid) holds the free credits before you sign in. Google sign-in, when configured, receives the email and subject id Google returns. We do not ask for a password of our own. Demo sign-in is for local testing and is off in production unless explicitly enabled.
Payments
Card details are not taken by this app. Waffo is the merchant of record when a live key is connected. Until then, sandbox checkout only records a test order. We store the order id, the pack you chose, and the credit grant. We do not store a card number.
Analytics
The server keeps a short in-memory log of page views, sign-in, checkout, and generation outcomes. If NEXT_PUBLIC_GA_MEASUREMENT_ID is set later, a GA4 tag can be added. Week 1 does not inject that tag yet; the first-party event names are the source of truth in this build.
Automated edits
AI disclosure: results are automated photo edits, not a human retouch. Do not upload a photo you are not allowed to process.
Contact
Privacy questions: privacy@polishphoto.com. That mailbox is a placeholder until the domain is in use.