Privacy policy
The short version. Your photos are used for one thing: the restoration or repair you asked for. We never use them to train AI models, never sell them, never show them to anyone else, and delete them 30 days after the run.
This policy covers rubberraccoon.com and every Rubber Raccoon tool, today Unmush and Fidelium. One account works in all of them.
Who is responsible
Soft Echo Pte. Ltd., 68 Circular Road, #02-01, Singapore 049422 (UEN 202439446Z) decides how and why the data described here is used. Our Data Protection Officer answers at hello@rubberraccoon.com: put "Privacy" in the subject line and we reply within 30 days.
If you use the Unmush API inside your own product, you are responsible for your users' photos and we handle them on your behalf, under section 6 of the terms.
What we process, and why
- Your photographs. In Fidelium: the old photo and any reference photos you add. In Unmush: your original and the upscaled file. We detect the faces, rebuild them and check every result against your photo, only to deliver the work you asked for.
- Face regions. Our software finds the faces in your photo and analyses where they are and what they look like, so it can repair them and check the result against your original. This is done for that one photo only. We identify no one, build no face database and never compare your photos with other people's.
- Your account. Email address, credit balance, purchases and a history of credits added and used, so you can sign in, use your credits in every tool and get receipts.
- Run records. Time, tool, engine, per-face result and credits used, to show you your runs and charge correctly. These records hold numbers, not images.
- Technical logs. IP address, browser, the page or file requested and the time of each request, kept for 30 days for security, fault-finding and abuse prevention.
- Messages. What you write to us by email, so we can answer.
- Payments. Payments are handled by Stripe. You enter your card details on Stripe's own payment page; we pass Stripe your email address for the receipt and receive confirmation of the payment (the pack, the amount and Stripe's reference number), never your card details.
Our legal grounds
Singapore's Personal Data Protection Act applies to us. We process your data with your consent, which you give when you create an account and upload a photo, and for the purposes the Act allows without consent, such as keeping the service secure and meeting legal duties. You can withdraw your consent at any time by asking us to delete your photos or close your account; we then stop, apart from what the law obliges us to keep.
If the GDPR or the UK GDPR applies to you, our grounds are:
- Contract (Art. 6(1)(b)): your photos, face regions, account and run records, because we need them to deliver the service you ordered.
- Legitimate interests (Art. 6(1)(f)): technical logs, security and preventing abuse of free credits; and the other people who appear in your photos, where your interest and ours is restoring a personal photograph, limited to that photo and ending when it is deleted.
- Legal obligation (Art. 6(1)(c)): invoices and accounting records.
- Consent (Art. 6(1)(a) and, where it applies, Art. 9(2)(a)): newsletters, only if you ask for them; and the analysis of faces, where the law of your country treats it as biometric data.
Faces and biometric laws
Some laws, for example in Illinois, Texas and Washington, give special protection to "face geometry". Here is the full picture. To repair a face, our software and our AI providers locate it and analyse its shape in that one photo. That analysis is used only to produce and check your result. It is never used to identify or track anyone, never sold or traded, and it is deleted together with the photo and the result: 30 days after the run at the latest, or sooner if you ask.
By ticking the box at sign-up and uploading a photo you agree to this in writing. If your photo shows other people, you confirm that they agree where the law requires it (see section 4 of the terms).
What we never do
- We never use your photos to train AI models.
- We never sell your photos or share them for marketing.
- We never use your photos as examples or demos without your separate, explicit permission.
- We make no decisions about you by automated means that have legal or similarly significant effects.
Service providers
We run the service with the companies below. They receive your data only to do their part, under terms that restrict them to providing that service. Some keep anonymised, aggregated usage statistics, such as the number of images processed, which cannot be linked to you or your photos.
- Hetzner Online GmbH (Germany): our server, located in Singapore. Your photos, results and account are stored there.
- Cloudflare, Inc. (USA): runs the name service of our domain and, where its protection is switched on, delivers the site and filters out attacks; your requests then pass through its network.
- AI computing providers (USA): specialised companies whose machines and AI models carry out the repair. They receive the photo, or the part of it that is being repaired, for that purpose only.
- Resend, Inc. (USA): sends our sign-in links and account notices to your email address.
- Spaceship, Inc. (USA): hosts the mailbox behind hello@rubberraccoon.com.
- Stripe (Stripe Payments Singapore Pte. Ltd. and its group companies): takes payments for credit packs and sends the receipts.
We tell you which AI computing providers handled your photos if you ask us (see "Your rights"). These companies work in Singapore, the European Union and the United States. Singapore law requires that data sent abroad stays protected to a comparable standard; our contracts with them provide for that. For data covered by the GDPR or the UK GDPR, transfers rest on the EU Standard Contractual Clauses and the UK addendum contained in the providers' data processing agreements, or on an adequacy decision.
How long we keep things
- Uploaded photos, reference photos and results: deleted from our server 30 days after the run. Working copies at our AI computing providers are set to be deleted within 30 days as well; a company whose AI model is used may keep data for a limited time to detect misuse, under its own terms. Ask us any time and we delete yours sooner. Download the results you want to keep.
- Reference photos: used only for the restoration they were added to.
- Account, credit history and run records: as long as you have an account. Write to us to close it; we delete it within 30 days.
- Invoices and payment records: five years, as Singapore company law requires.
- Technical logs: 30 days.
- Emails you send us: up to two years after our last exchange.
- Backups: a nightly copy of the account data, kept on the server and on an encrypted computer of ours. Each copy is deleted after 30 days.
Cookies and tracking
We set one cookie, and only when you sign in: rr_session keeps you signed in for 30 days. It is strictly necessary for the service, which is why you see no cookie banner. Cloudflare may add a short-lived security cookie when it has to check that a visitor is not a bot.
No advertising trackers, no analytics, no social media plug-ins. Fonts, images and videos are served from our own site.
Security
All connections are encrypted. You sign in with a one-time link that is valid for 20 minutes, so we store no passwords. Access to the server is limited to us. If a breach ever puts you at risk, we tell you and the responsible authority as the law requires.
Children
Accounts are for adults aged 18 or over. Photos that show children may be uploaded by their parent or guardian. We do not knowingly collect data from children directly.
Your rights
You can ask us to show you the data we hold about you and name the providers that received it, correct it, delete it, restrict its use or hand it to you in a common format, and you can object to its use or withdraw a consent. Write to hello@rubberraccoon.com from your account's email address; we answer within 30 days and charge nothing.
You can also complain to a data protection authority: in Singapore the Personal Data Protection Commission, in the EU or the UK the authority of the country where you live.
Emails from us
We send what the service needs: sign-in links, receipts and important notices about your account or these documents. Newsletters only if you ask for them, and every one has an unsubscribe link.
Changes
If this policy changes, we update this page and its date. We announce important changes to account holders by email before they apply.