Privacy Policy
RenderThink respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use and protect your information in accordance with the General Data Protection Regulation (GDPR).
Last updated:
1. Data controller
RenderThink - SAS RENDERTHINK, registered in France under SIRET number 102 977 147 00010, specialized in AI image transformation services for professionals.
Data protection contact: contact@renderthink.com. In the absence of a designated Data Protection Officer (DPO), any data protection request may be addressed to this email.
2. Data collected
Account data
- Name, first name, professional title
- Email address, phone number (optional)
- Encrypted password, authentication preferences
- Profile picture, company information
Usage data
- Created projects, file metadata
- Uploaded and transformed images (temporarily)
- Activity history, user preferences
- Interface settings, language, notifications
Technical data
- IP address, approximate geolocation
- Device type, browser, operating system
- Pages visited, session time, actions performed
- Performance and error logs
Billing data
- Credit purchase and subscription history
- Billing information and addresses
- Payment data processed by Stripe (not stored by us)
3. Processing purposes
- Providing and improving image transformation services
- User account management and authentication
- Subscription management, billing and commercial support
- Technical support and customer assistance
- Usage analysis to improve the platform
- Platform security and fraud prevention
- Compliance with legal and regulatory obligations
- Transactional and marketing communications (with consent)
4. Legal basis for processing
- Contract execution:
- Providing RenderThink services according to our ToS
- Legitimate interest:
- Improving our services, security, server-side usage measurement, business prospecting towards professionals
- Legal obligation:
- Accounting, invoice retention, fraud prevention
- Consent:
- In-browser audience measurement (cookies and session recording), marketing communications
6. Data security
- Secure connections: HTTPS/TLS for all communications, encryption of sensitive data at rest
- Secure authentication: hashed passwords, JWT sessions, login attempt limits, access logging
- Monitoring: rate limiting, automatic blocking after repeated failed attempts
- Backups: regular data backups, servers located in France
- In case of security incident: CNIL notification within 72h as per GDPR, affected client notification, corrective measures
7. Retention period
- Account data:
- As long as the account is not deleted; deleting it erases your data, except where the law requires us to keep it
- Projects and files:
- During the subscription. After it ends, a warning is sent after 7 days, then the content is permanently deleted 37 days after the end of the subscription. An item moved to the trash is deleted at the end of your plan’s trash period
- Support ticket attachments:
- 6 months
- Notifications:
- 90 days
- Payment events received from our provider:
- 90 days
- Sign-in attempts:
- 90 days
- Administration log:
- 1 year
- Demo accounts:
- 7 days
- Billing data:
- 10 years for accounting and tax obligations
- Business prospecting:
- 3 years without any contact from you
8. International transfers
Your data is stored in Europe: our servers are located in France and your files are kept in the European Union. Some artificial intelligence processing may be carried out by providers located outside the European Union, and some of our other processors may access data from abroad. These transfers are governed by:
- European Commission adequacy decisions
- Standard contractual clauses for data protection
9. B2B business prospecting
RenderThink presents its services to interior design professionals (kitchen designers, interior architects, space planners…) who may need them. This section concerns the people contacted for that purpose, whether or not they have an account.
Data collected
- Company name and identifiers (SIREN), business activity, address
- Name and position of the company officers
- Publicly available business contact details: company phone, email address and website
Sources
Public business directories, company websites, the French national business register.
Purpose and legal basis
Presenting RenderThink through messages related to your professional activity. This processing relies on our legitimate interest in making our services known to the professionals concerned.
Retention period
Your data is deleted after 3 years without any contact from you.
Right to object
You can object at any time, without giving a reason, by replying to one of our messages or by writing to contact@renderthink.com. Your personal data is then erased and you are no longer contacted.
10. Your rights
- Right of access
- Obtain a copy of your personal data
- Right to rectification
- Correct inaccurate or incomplete data
- Right to erasure
- Request deletion of your data
- Right to restriction
- Restrict processing of your data
- Right to portability
- Receive your data in a structured format: the export is requested from support (support@renderthink.com or from the application)
- Right to object
- Object to processing for legitimate reasons, and to business prospecting without any reason
To exercise your GDPR rights, contact us at contact@renderthink.com. We respond within one month. For any request, please specify your identity and the right you wish to exercise.
12. Complaints
If you believe your rights are not being respected, you can file a complaint with
your national data protection authority
13. Policy updates
This policy may be updated to reflect changes in our practices or regulations. We will notify you of significant changes.
14. Contact
For any questions regarding this privacy policy:
- RenderThink - Data Protection
- Contact: contact@renderthink.com
- Technical support: support@renderthink.com
- Subject: Personal data protection