Privacy Policy

1.1 Information You Provide to Us

• Account data, such as your name, email address and password (stored only as a secure hash), and any profile details you add.
• Onboarding answers: when you create an account we ask a few questions, such as what describes you, what you plan to make, which tools you have used, roughly how much you create and spend on AI tools, your team size and how you heard about us, along with how long each question took, your time zone and your browser language. We use them to tailor your studio and plan suggestions and to understand who uses the Service.
• Content, such as the prompts and settings you enter, the reference images, video and audio you upload, and the images, video and audio you generate.
• Transaction data, such as your Membership status, the Credit packs you buy, your Credit balance and history, and records of payments and refunds. Card details are collected and stored by our payment processor, Whop, not by us.
• Communications data, such as the contents of emails you send us and your notification preferences.

1.2 Third-Party Sources

• Google: if you sign in with Google, we receive your name, email address and profile picture from your Google account.
• Whop: when you pay, Whop tells us what you bought, the payment status and identifiers we need to link the purchase to your account.
• Model providers: the services that run your generations return the results, status and error information for each request.

1.3 Automatic Data Collection

When you use the Service, we and our hosting providers automatically log information such as your IP address, browser and device type, operating system, pages and features used, generation and Credit activity, timestamps, and error and diagnostic data. We also record page views, invite-link clicks and the country your connection comes from, which we use to understand how people find and use the Service. We use this to run, secure, troubleshoot and improve the Service. Page-view records are deleted after about 13 months.

1.4 Data About Others

Files you upload may include images, video or voices of other people. Only upload them if you have the right to (see our Terms of Service). We process such data only to provide the Service to you.

1.5 Cookies and Similar Technologies

We use essential cookies to keep you signed in and secure your session, and cookies and browser storage to remember preferences such as theme and layout. We also count visits ourselves: a first-party cookie holds a random visitor ID (kept for a year), another remembers how your first visit reached us — the referring site, campaign tags and landing page (kept for 30 days) — so a later sign-up can be attributed, and your browser keeps a visit ID for the session. Our host, Vercel, also counts page views for us with Vercel Web Analytics, which sets no cookies: it receives the page’s path (with invite codes and query details removed, apart from campaign tags), the referring site, your approximate location (country, region and city), and your device type, operating system and browser, and recognises a returning visitor only by a hash of the request that it discards after 24 hours. If your browser sends Global Privacy Control or Do Not Track, we don’t set these analytics cookies, record your page views, or load Vercel Web Analytics. We don’t use advertising cookies, and we don’t let third parties track you across sites through the Service.

1.6 Biometric Information

Uploaded images, video or audio may show a person’s face or contain their voice. We do not extract face geometry, voiceprints or other biometric identifiers from them, and we do not use them to identify anyone. They are sent to the model you choose only to generate your result.

2.1 Service Delivery and Operations

To create and maintain your account; run your generations and store your files and history; charge Credits and manage your Membership; process payments and refunds; provide support; and send service messages such as sign-in links, password resets, receipts and (if you turn them on) generation alerts.

2.2 Service Improvement and Analytics

To understand how the Service is used in aggregate — for example which models are popular or which errors occur — so we can fix problems and improve it.

2.3 Marketing

We only send you marketing email if you have agreed to receive it, and you can opt out at any time using the link in the email.

2.4 Compliance and Protection

To prevent fraud and abuse; enforce our Terms, including content rules; respond to legal requests; and protect the rights, safety and property of our users, us and others.

2.5 Aggregated and De-identified Data

We may create aggregated or de-identified data that can no longer reasonably identify you, and use it for any lawful purpose.

2.6 No Training on Your Content

We do not use your Content to train AI models, and we do not sell your personal information.

3.1 General

• Generated files and uploaded reference files are deleted automatically 14 days after they are created.
• Generation history (prompts and settings) is kept while your account is open.
• Transaction records are kept as long as tax and accounting laws require.
• Security and diagnostic logs are kept for a limited period.

3.2 When Information Is No Longer Needed

When we no longer need personal information — including after you close your account — we delete it or de-identify it, except where we must keep it to comply with the law, resolve disputes or enforce our agreements.

5.1 Access or Update Your Information

You can view and update your profile in Settings, and download your files at any time while they are kept.

5.2 Opt Out of Communications

You can turn off optional emails in Settings → Notifications, or with the unsubscribe link in any marketing email. We may still send service messages about your account and purchases.

5.3 Cookies

You can block or delete cookies in your browser settings. If you block essential cookies, you won’t be able to sign in.

5.4 Declining to Provide Information

We need certain information, such as an email address, to provide the Service. If you don’t provide it, some or all of the Service won’t be available to you.

5.5 Linked Third-Party Platforms

If you signed in with Google, you can remove renderlight’s access from your Google account settings. You will then need another way to sign in.

5.6 Delete Your Content or Account

Files are deleted automatically after 14 days. To delete your account and the personal information associated with it, email support@renderlight.dev from the address on the account.

11.1 Applicability

This section applies to residents of U.S. states with consumer privacy laws, such as California, Colorado, Connecticut, Virginia and others, to the extent those laws apply to us.

11.2 Categories of Personal Information

In the last 12 months we collected the following categories of personal information:

• Identifiers, such as name, email address and IP address.
• Commercial information, such as purchases, Membership status and Credit history.
• Internet or network activity, such as usage logs and diagnostics.
• Audio, visual and similar information, such as uploaded and generated media.
• Account login credentials, such as your email and hashed password.

We collect them from the sources and use them for the purposes described in Personal Information We Collect and How We Use Your Personal Information, and disclose them to the recipients described in How We Share Your Personal Information.

11.3 Sale, Sharing and Targeted Advertising

We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising, and have not done so in the last 12 months.

11.4 Sensitive Personal Information

We use account login credentials only to authenticate you, and we do not use or disclose sensitive personal information for purposes that would give you a right to limit it.

11.5 Your Rights

Depending on your state, you may have the right to:

• know and access the personal information we hold about you;
• correct inaccurate personal information;
• delete your personal information;
• receive a portable copy of your personal information; and
• not be discriminated against for exercising these rights.

11.6 How to Exercise Your Rights

Email support@renderlight.dev from the address on your account. We will verify your request by confirming you control that address. You may use an authorized agent, who must give us proof of your permission. If we deny your request, you can appeal by replying to our decision; if you’re unhappy with the result of the appeal, you can contact your state attorney general.

11.7 California “Shine the Light”

We do not disclose personal information to third parties for their own direct marketing purposes.

12.1 Where This Notice Applies

This notice applies to individuals in Europe and supplements the rest of this Privacy Policy. “Personal information” here means “personal data” under the EU General Data Protection Regulation and the UK GDPR.

12.2 Controller

renderlight is the controller of your personal information processed under this Privacy Policy. You can contact us at support@renderlight.dev.

12.3 Legal Bases for Processing

• Contract: to provide the Service, run your generations, manage your account, Membership and Credits, and process payments.
• Legitimate interests: to secure and improve the Service, prevent fraud and abuse, and enforce our Terms, where those interests aren’t overridden by your rights.
• Legal obligation: to keep transaction records and respond to lawful requests.
• Consent: for optional marketing emails. You can withdraw consent at any time.

14.1 No Obligation to Provide Personal Information

You are not required to give us personal information, but some of it, such as your email address, is needed to create an account and use the Service.

14.2 Sensitive Information

Please don’t send us special categories of personal data (for example health, religion or sexual orientation) unless it is necessary.

14.3 No Automated Decision-Making

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. Automated safety filters may refuse a generation request; contact us if you think one was refused in error.

15.1 General

You have the right to access, correct, delete, restrict or object to the processing of your personal information, to receive it in a portable format, and to withdraw consent where we rely on it, subject to the exceptions in the law.

15.2 Exercising These Rights

Email support@renderlight.dev. We will respond within the time required by law, usually one month.

15.3 Complaints

You may lodge a complaint with the data protection authority where you live or work, or where you believe a breach occurred. We’d appreciate the chance to address your concern first.