// Trust & Security Report
PALETTE FM, UNIPESSOAL LDA
Colorize (palette.fm) — AI photo colorization tool that converts black & white photos to color using neural networks. Single product offering with free tier, subscription ($72/year), and one-time credit options.
Certifications held
1
Maturity
Startup
Trains on your data
Unknown
Trust center
No
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on palette.fm“Privacy policy states verbatim: 'If you are a resident of the European Union (EU) and European Economic Area (EEA), you have certain data protection rights, covered by GDPR' and enumerates rights including 'the right to access, update or to delete the information we have on you', 'the right to have your information rectified', 'the right to object to our processing of your Personal Data', and 'the right to request that we restrict the processing of your personal information'. Self-attested GDPR posture, not a formal certification.”
> Show 7 unconfirmed / not-held certifications
source: palette.fmNo public evidence of SOC 2 Type I certification found on palette.fm domain or official trust documentation
source: palette.fmNo public evidence of SOC 2 Type II certification found on palette.fm domain or official trust documentation
source: palette.fmNo public evidence of ISO 27001 certification found on palette.fm domain or official trust documentation
source: palette.fmNo public evidence of HIPAA compliance or healthcare-focused certification found; product is a consumer photo tool not marketed for healthcare use
source: palette.fmNo public evidence of ISO 27017 certification found on palette.fm domain
source: palette.fmNo public evidence of ISO 27018 certification found on palette.fm domain
source: palette.fmNo public evidence of PCI DSS certification found; payment processing delegated to third parties (Stripe, PayPal, Apple Pay, etc.)
// Privacy & AI training
Trains on customer data
Not stated
Data processing agreement
Not offered
Data region
EU (Portugal-based company); data processing location not explicitly specified
Privacy policy does not explicitly address whether uploaded photos or their metadata are used to train the colorization AI model. Policy states files are 'deleted shortly after' providing results, but does not clarify if data or derivatives are retained for model improvement. No opt-out mechanism for AI training mentioned.
// Security controls
File Deletion Policy
Uploaded images are securely uploaded and deleted shortly after processing and result delivery
palette.fmData Not Used for Marketing
Files are not published, shared, or used for purposes other than service delivery unless explicitly provided as feedback
palette.fmThird-Party Analytics
Uses Google Analytics, Firebase, Cloudflare, and Mixpanel for usage tracking and analytics
palette.fmPayment Processing
Third-party payment processors include PayPal, Stripe, Apple Pay, Google Play, Alipay, and Klarna
palette.fmEncryption in Transit
Privacy policy acknowledges 'no method of transmission over the Internet is 100% secure' but does not detail specific encryption protocols used
palette.fmData Retention
Personal data retained only as long as necessary for stated purposes; usage data kept for shorter periods but may be retained longer for security or functionality improvements, or when legally required
palette.fm// Products & data scope
data: Uploaded photos (temporarily during processing), email, name, phone (optional), payment data, usage metadata
Consumer-facing photo colorization tool. Free tier with 1 credit/month, subscription tiers ($72/year = 480 credits), and one-time credit purchases ($49-$500). Files deleted after processing. No account required for basic use.
// What to watch
- NO_TRUST_CENTER — Vendor has no public trust center or dedicated security/compliance documentation page
- NO_FORMAL_CERTS — No SOC 2, ISO 27001, or other formal certifications mentioned or publicly claimed
- AI_TRAINING_UNCLEAR — Privacy policy does not explicitly address whether customer photos or metadata are used to improve the colorization model; AI training posture is undocumented
- GDPR_POSTURE_ONLY — Only GDPR compliance is evident (mandatory for EU vendors); no additional compliance frameworks (SOC 2, ISO 27001) publicly documented
- ENCRYPTION_DETAILS_MISSING — Privacy policy acknowledges Internet transmission risk but does not specify TLS version, key management, or encryption-at-rest details
- SMALL_STARTUP — Unipessoal LDA (single-member Portuguese company) with minimal formal security governance; product is simple consumer tool without enterprise security features
- DPA_NOT_AVAILABLE — No Data Processing Agreement publicly available; not marketed to enterprise/B2B customers
// At a glance
Pricing model
Freemium subscription + one-time credits; Free tier: 1 monthly credit; Subscription: $72/year (480 credits); One-time: $49-$500 depending on credit quantity
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on PALETTE FM, UNIPESSOAL LDA's own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-06. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
palette.fm