Privacy Policy

Effective August 5, 2026

Information we collect

Gray Rabbit uses Supabase Authentication for Google sign-in. We receive your email address, display name, profile image, account identifier, and sign-in session information. We store your credit balance, credit activity, purchases, and operational records for AI photo restoration requests.

AI photo processing

When you restore a photo, your selected image is sent through Gray Rabbit to Replicate for the requested restoration. Gray Rabbit does not persist the uploaded image in its application database. We store file type and size buckets, model details, provider response data, status, timing, and error details for reliability, credit handling, fraud prevention, abuse prevention, and support.

Payments

Creem acts as merchant of record for credit purchases and processes checkout, payment, tax, receipt, refund, and fraud-prevention information. Gray Rabbit does not receive or store your full payment-card number. We may receive purchase identifiers, customer details, product, amount, currency, payment status, and refund or dispute information needed to deliver credits and support your purchase.

Hosting, security, and analytics

Cloudflare provides hosting, security, and standard request logs. Supabase provides authentication and database services. Google provides sign-in. Replicate processes restoration requests. These providers may process data in countries other than your own.

Cookies and storage

We use essential storage and session technologies to keep accounts signed in and secure. We do not currently use advertising cookies or cross-site behavioral tracking. See our Cookie Policy for details.

Retention

We keep account and credit records while your account is active. Operational restoration records are retained only as long as reasonably needed for reliability, support, security, and legal compliance. Payment and transaction records may be retained for tax, accounting, fraud, chargeback, and legal obligations.

Your choices

You may request access, correction, or deletion of your Gray Rabbit account information. Some transaction, security, or legal records may need to be retained. You can also sign out, stop using the service, or manage browser storage through your browser settings.

Children

Gray Rabbit is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Contact

Privacy and account-data requests can be sent to [email protected].