Privacy Policy

• Account data — your email address and a securely hashed password. We never store your password in plaintext.
• Usage data — API request metadata such as endpoint, timestamp, status, response time, and the IP address a request came from, used for billing, rate limiting, and abuse prevention.
• Content you submit — the HTML, URLs, and assets you send to be rendered. These are processed transiently to produce your output and are not used for any other purpose (see retention below).
• Payment data — handled entirely by our payment processor (Stripe). We receive a customer/subscription identifier and plan status; we never see or store full card numbers.

To operate and secure the Service: authenticate you, render your requests, meter usage and bill your plan, prevent abuse, provide support, and improve reliability. We do not sell your personal information, and we do not use Your Content to train machine-learning models.

We share data only with providers that help us run the Service, under contract:

• Stripe — payment processing and subscription billing.
• Our hosting provider — the server that runs the Service.
• Resend — transactional email (verification, password reset).

Data is kept only as long as needed, then automatically deleted:

• rendered job output is deleted after a short window (7 days by default);
• idempotency records expire after 24 hours;
• request-log rows are pruned after 90 days (aggregate usage counts remain);
• account data is kept until you delete your account, plus any period required by law or for legitimate business records (e.g. tax).

We protect data in transit with HTTPS, hash passwords and store only hashes of API keys, gate access behind authentication, and apply rate limiting and other safeguards. No system is perfectly secure, but we work to protect your information and to respond promptly to incidents.

The dashboard uses a single first-party session cookie to keep you signed in. We do not use it for cross-site advertising. Marketing pages may include third-party analytics or advertising services that set their own cookies under their own policies.

Depending on where you live (e.g. under GDPR or CCPA), you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at privacy@rendral.com. We will respond within the time required by applicable law.

We may process data in countries other than yours; where required, we rely on appropriate safeguards for such transfers. The Service is not directed to children under 16, and we do not knowingly collect their personal information.

We may update this Policy from time to time; material changes will be reflected in the "Last updated" date above. Questions or requests? Contact us at privacy@rendral.com.