Privacy Policy

[Company legal name], [Registered address], is responsible for the personal data described in this policy. Questions and requests about your data can go to [legal@your-domain].

When a business uses Rendament to process personal data of other people, for example names in a spreadsheet used to generate images, that business is responsible for that data and we process it on its behalf. Our Data Processing Addendum covers that case.

• Account data: your name, email address, password (stored only as a secure hash), and, if you turn them on, two-factor authentication settings and passkeys.
• Workspace data: workspace names, members and their roles, invitations, API keys (stored hashed) and billing records such as credit balances and usage.
• Your content: templates, uploaded images and fonts, rows from CSV files and Google Sheets you connect, and the images you generate. This can include personal data if you put it there.
• Payment data: Lemon Squeezy handles payments. We receive the plan you bought, the order and subscription status, and the name and email on the purchase. We never see or store your full card details.
• Technical data: logs of requests and errors (including IP addresses and browser information), and the cookies described in our Cookie Policy.

• To provide Rendament: sign you in, run your workspaces, generate images and deliver them.
• To bill you and keep track of credits.
• To keep the service secure, prevent abuse and fix problems.
• To send you emails about your account, such as invitations, password resets, low-credit notices and reminders before credits expire.
• To meet legal obligations, for example keeping accounting records.

We rely on our contract with you, our legitimate interest in running a secure and reliable service, and legal obligations. We do not use your content to train machine learning models.

We share personal data only with service providers that help us run Rendament:

• Lemon Squeezy, our merchant of record, for payments, receipts and taxes.
• Google, only to read Google Sheets that you share with our service account.
• DigitalOcean, which hosts our servers and stores your data.
• [Email provider], which delivers our emails.

Background removal runs on our own servers; your images are not sent to a third-party service for it. We may also disclose data when the law requires it.

We keep your account data and content while your account is open. Images that are not part of a batch (editor previews, signed URL and API images) are deleted automatically after 30 days without use.

When you close your account, we delete it together with any workspace you are the only member of. If you delete a single workspace and want its remaining data erased permanently, contact us at [legal@your-domain]. We keep billing records for as long as tax and accounting laws require, and logs for a limited time for security.

We use encrypted connections (HTTPS), hash passwords and API keys, encrypt sensitive settings, limit staff access to what support needs, and offer two-factor authentication and passkeys for your account.

Depending on where you live, you can ask us to access, correct, delete or export your personal data, object to or restrict how we use it, and complain to your data protection authority. Many of these you can do yourself in your account settings. For anything else, write to [legal@your-domain]. If your data is in a workspace run by someone else, we may refer you to that workspace's owner.

We will update this policy when what we do with personal data changes, and tell you by email or in the app when a change matters.