Are Your Photos Safe? Drive-Native Colorization Explained

When you hand a black-and-white photo to a colorization tool, you're really handing over something more valuable than the file itself: a piece of family history, a client's archive, an estate's private records. So the question underneath "will this look good?" is quieter but more important — is photo colorization safe? Where does my picture actually go?

For most web-based tools, answering that means giving a separate app a lot of reach. You hand over your files, grant it access it may not need, and hope it only touches what you meant. Revive is built on the opposite premise. It's a Google Workspace™ add-on operated right inside Google Drive, and the defining fact of its design is control: Revive only ever sees the exact files you pick, it never modifies your originals, and it writes each finished color copy straight back into your own Drive folder beside the source.

This post walks through exactly what that means, why it matters for photo colorization privacy, and how Revive's model differs — concretely — from tools that ask you to hand over your whole library.

The problem with handing your photos to a separate app

The typical colorization service is a website with a drop zone. You drag in a photo, then repeat the upload-and-download dance for every batch — and to make that convenient, many tools ask for sweeping access to your files so they can reach whatever they like. The exposure isn't just one photo; it's how much of your library the app can touch and how little of that you actually chose.

That's fine for a single throwaway snapshot. It's a real problem when you're working through hundreds of family portraits, a museum's archive, or a studio's production stills. The safer model is the opposite: expose only the files you explicitly select, keep every original exactly as it was, and keep the results in your own hands.

How Revive is different: you stay in control

Revive doesn't have a drop zone, because you never upload or download anything by hand. It runs as an add-on inside Google Drive. When you open the side panel and pick a folder or a set of files, Revive works only on the images you handed it — through Google's own Drive APIs — and writes each finished color copy straight back into the same folder, named filename-color.jpg. The photos you selected are the only ones it can see, and your originals are left exactly as they were.

Here's the workflow a photo follows, entirely inside your own Drive:

Because you never hand over more than the files you pick, the usual privacy questions largely dissolve. There's no separate library to grant away and nothing in your Drive that Revive can reach on its own — it sees only the photos you queue, your originals stay exactly as they were, and the color copies land back in your own Drive beside them. For a fuller walkthrough of the mechanics, see how it works.

Narrow permissions: the drive.file scope

Not every add-on that touches Drive is equally trustworthy, and the difference usually comes down to scope — how much of your Drive an app is allowed to see. Many tools request broad read access to your entire Drive. Revive uses the narrow drive.file scope, which means it can only see the specific files and folders you explicitly hand it through the picker.

In practice: Revive cannot browse your Drive on its own, cannot read documents you didn't select, and cannot reach into folders you never pointed it at. It sees the photos you queue for colorization and nothing else. That's the smallest possible footprint for a tool that has to read and write image files.

Your originals are never modified

Safety isn't only about where a file goes — it's also about what happens to the one you started with. Revive never overwrites or alters your originals. Colorization always produces a new copy saved alongside the source as filename-color.jpg. Point it at a folder tree and the sub-folder structure is preserved, so a 10,000-image archive comes back organized exactly the way you left it, with every black-and-white original still intact.

That matters for archives and estates especially, where the original scan is often the record of authority. You get the colorized version as an addition, never as a replacement.

Built for teams, with a clear audit trail

Privacy at the individual level is one thing; accountability across an organization is another. Revive is domain-installable, and its credits are tied to a shared billing account that every Workspace user can draw on. Crucially, every job is attributed in the usage report — count, files, images spent, and who ran it. So when a library, studio, or agency colorizes a collection, there's a record of exactly what was processed and by whom, with the color copies landing right back in the organization's own Drive.

Drive-native vs. upload-and-hope

Put the two models side by side and the difference in exposure is stark:

None of this comes at the cost of speed or scale. Revive colorizes a photo in roughly 50–100 milliseconds and can push through about 1,000 images in a minute — folder-aware and batched, straight from Drive. Staying in control and staying fast are not a trade-off here.

What you actually pay for

The model has a pricing consequence worth naming: because there's no subscription, you simply buy image credits and use them when you like. 1 image = 1 colorized photo, credits never expire, and failed jobs are auto-refunded — you only pay for results. Packs start at $9 for 100 images ($0.09 each) and scale down to about 5¢ per photo at volume. Full numbers are on the pricing page.

Trying it safely

The best way to satisfy yourself that photos are safe is to watch the model work on your own Drive. Signing up gives you 3 free images with no credit card, so you can colorize a few photos, confirm the color copies appear right next to your originals, and see that nothing else in your Drive was touched. If you're setting it up for a team, the setup guide covers domain install and shared billing, and our piece on colorizing an entire Drive folder shows the folder-aware workflow end to end.

Photo colorization safe enough for a family archive shouldn't mean handing that whole archive to a separate app. With Revive it doesn't — you pick the exact files, your originals stay untouched, and the color copies land back in your own Drive.