1. What we collect
Information you give us
- Account info: Email address, password (hashed — we never store it in plain text).
- Onboarding responses: Your role, software you use, primary use case, team size. All optional.
- Uploaded images: Screenshots, sketches, photos, and floor plans you upload for rendering.
- Generated renders: The images Renderato creates for you.
- Payment info: Processed by our payment provider (Polar.sh). We don't store your credit card number, CVV, or full billing details — Polar handles that.
Information we collect automatically
- Usage data: Which tools you use, how often, timestamps of renders, credit balance changes.
- Device info: Browser type, operating system, screen resolution, IP address.
- Cookies: We use essential cookies to keep you logged in, functional cookies to remember your preferences, and analytics cookies to understand how visitors use the platform. See Section 4 for the specific analytics providers we work with. We don't use advertising cookies or social media tracking pixels.
2. Why we collect it
| Data | Why |
|---|---|
| Email + password | So you can log in and we can contact you |
| Onboarding responses | To tailor the product experience to your role and workflow |
| Uploaded images | To generate your renders (the core service) |
| Generated renders | To display them in your account and let you download them |
| Payment info | To process purchases (handled by Polar.sh) |
| Usage data | To understand how the product is used and improve it |
| Device info | To ensure the product works properly on your device |
| Cookies | To keep you logged in, remember your settings, and (for analytics cookies) understand how the platform is used |
We don't sell your data. We don't sell access to your data. We don't use your data for advertising.
3. How we use your uploaded images and renders
This is the section most people care about, so here it is clearly:
- Your uploads are used only to generate your renders. We send your uploaded image to our AI rendering provider to produce the output you requested. That's it.
- We don't use your uploads to train AI models. Your images are not added to any training dataset.
- We don't share your uploads with other users. Your images are private to your account.
- We don't browse, review, or analyze your images manually unless required for technical support (at your request) or to investigate a reported violation of our terms.
Your renders are stored in your account so you can access and download them. If you delete your account, your uploads and renders are permanently deleted within 30 days.
4. Third-party services
We use a small number of third-party services to operate Renderato:
| Service | What it does | What data it receives |
|---|---|---|
| AI rendering provider | Generates renders from your uploads | Your uploaded images and prompts/style selections |
| Polar.sh | Processes payments | Payment and billing information |
| Cloud hosting provider | Hosts the application and stores your data | All application data (encrypted) |
| Email provider | Sends transactional and lifecycle emails | Your email address |
| Google Analytics | Helps us understand how visitors use the platform and where to improve it | Page views, clicks, referrer, device and browser info, anonymized IP address, and cookie identifiers |
We choose providers that maintain industry-standard security practices. We don't share your data with third parties for their own marketing or advertising purposes.
5. Cookies
Renderato uses cookies for three purposes:
- Essential cookies: Keep you logged in, remember your session, ensure the platform functions correctly. These can't be disabled without breaking the product.
- Functional cookies: Remember your preferences (e.g., last tool used, style settings). These improve your experience but aren't strictly required.
- Analytics cookies: Help us understand how visitors use the platform so we can improve it. These are set by third-party analytics providers (listed in Section 4) and may collect things like page views, clicks, device info, and an anonymized IP address.
We don't use:
- Advertising or marketing cookies
- Cross-site retargeting trackers
- Social media tracking pixels
If your browser blocks cookies, the platform may not function correctly. Where required by law, you can decline non-essential (functional and analytics) cookies — see Section 8 for how to exercise that right.
6. Data security
We take reasonable measures to protect your data:
- All data is transmitted over HTTPS (encrypted in transit).
- Passwords are hashed — we never store them in plain text.
- Uploaded images and renders are stored in encrypted cloud storage.
- Access to production systems is restricted to authorized team members with role-based permissions.
No system is 100% secure. If we ever discover a breach that affects your data, we'll notify you promptly and tell you what happened, what data was affected, and what we're doing about it.
7. Data retention
- Account data: Stored as long as your account is active.
- Uploaded images and renders: Stored in your account until you delete them, or until you delete your account.
- After account deletion: All your data (uploads, renders, account info) is permanently deleted within 30 days.
- Payment records: Retained as required by law (typically 5-7 years for financial records), even after account deletion.
- Usage/analytics data: Retained in anonymized form indefinitely for product improvement.
8. Your rights
Depending on where you live, you may have legal rights regarding your data. These commonly include:
- Access: Request a copy of the data we hold about you.
- Correction: Ask us to fix inaccurate data.
- Deletion: Request that we delete your data (subject to legal retention requirements).
- Export: Request your data in a portable format.
- Objection: Object to certain types of data processing.
To exercise any of these rights, email hello@renderato.com. We'll respond within 30 days.
For EU/EEA residents (GDPR): Our legal basis for processing your data is: (a) contract performance (providing the service you signed up for), (b) legitimate interest (improving the product), and (c) your consent (for optional data like onboarding responses). You can withdraw consent at any time.
For California residents (CCPA): We don't sell your personal information. You have the right to know what data we collect, request deletion, and opt out of any future sale (which we don't do).
For Brazilian residents (LGPD): Your data is processed based on: (a) contract performance, (b) legitimate interest, and (c) consent. You have the rights described above, plus the right to request anonymization of unnecessary data. Contact us at hello@renderato.com.
9. Children
Renderato is not designed for children under 16. We don't knowingly collect data from anyone under 16. If you believe a child under 16 has created an account, contact us and we'll delete it.
10. Changes to this policy
We may update this policy from time to time. When we do, we'll update the "Last updated" date at the top. For material changes, we'll notify you via email.
11. Contact
Questions about this privacy policy or your data? Email us at hello@renderato.com.