Privacy Policy
Effective Date: February 23, 2026
1. Introduction
RenderStack ("we," "us," or "our") operates the RenderStack platform, an API-first image and PDF generation service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and related services (collectively, the "Service"). By accessing or using the Service, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Account Information
When you create an account, we collect information provided through the authentication provider, which may include your name, email address, profile image, and unique user identifier.
2.2 Usage Data
We automatically collect information about how you interact with the Service, including API call logs, template creation and editing activity, render requests, feature usage, browser type, IP address, access times, and pages viewed.
2.3 Content and Assets
We store the templates, images, fonts, and other assets you upload or create through the Service. We also store the rendered outputs generated from your templates.
2.4 Payment Information
Payment processing is handled by Stripe. We do not store your full credit card number or payment credentials on our servers. We receive and store billing-related information such as your subscription plan, payment status, and transaction history from Stripe.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process your API requests and render templates
- Manage your account, subscriptions, and billing
- Monitor usage against plan limits and enforce rate limiting
- Send service-related communications such as invoices, plan updates, and security alerts
- Analyze usage patterns to improve platform performance and features
- Detect, prevent, and address technical issues and security threats
- Comply with legal obligations
4. Data Sharing and Disclosure
We do not sell your personal information. We may share information with:
- Service Providers: Third-party vendors who assist in operating the Service, such as payment processors (Stripe), cloud hosting providers, and analytics services.
- AI Providers: When you use AI-powered features, relevant data may be sent to third-party AI providers (such as OpenAI or Anthropic) for processing. This data is used solely to provide the requested functionality.
- Organization Members: Information within your organization is accessible to other members of that organization based on their assigned roles and permissions.
- Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.
5. Data Storage and Security
We implement commercially reasonable security measures to protect your data, including encrypted connections (TLS/SSL), secure authentication, role-based access controls, and encrypted storage for sensitive credentials. Your templates, assets, and rendered outputs are stored using secure cloud storage. While we strive to protect your information, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
6. Data Retention
We retain your account information and content for as long as your account is active or as needed to provide the Service. Usage logs and analytics data may be retained in aggregate form for platform improvement. When you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, subject to legal retention requirements and ongoing obligations.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access, correct, or delete your personal information
- Export your data in a portable format
- Restrict or object to certain processing activities
- Withdraw consent where processing is based on consent
To exercise these rights, contact us using the information provided at the end of this policy.
8. Cookies and Tracking
We use essential cookies and local storage to maintain your session, remember your preferences (such as theme settings), and ensure the Service functions correctly. We do not use third-party advertising trackers. Analytics cookies, if used, collect aggregated, non-identifiable usage information.
9. Children's Privacy
The Service is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete such information.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Effective Date." Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.
11. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us through the platform's support channels or at the contact information provided on our website.