RENDERCAD, LLC ("RENDERCAD," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at rendercad.ai, our Windows desktop application, browser extension, and connected integrations such as ChatGPT (collectively, the "Service").
1. Information We Collect
1.1 Account Information
- Email Address: Collected when you create an account
- Profile Information: Name and profile picture if you use Google OAuth authentication
- Account Credentials: Securely hashed passwords if you use email/password authentication
1.2 Usage Data
- Render Data: Images you upload, render parameters (quality, materials, styles), and generated outputs
- API Usage: API token usage, device code authentications from the Windows desktop app and browser extension
- Subscription Information: Plan type, payment status, monthly render usage
- Technical Data: IP addresses, browser type, device information, and access logs
1.3 Payment Information
Payment processing is handled by Stripe. We do not store your full credit card information. Stripe collects and processes payment data according to their privacy policy and PCI-DSS standards.
1.4 Connecting RENDERCAD to ChatGPT
When you choose to connect RENDERCAD, you authorize ChatGPT to use the permissions shown on our connection screen. The integration can return your account profile (name, email address and account identifier), current plan and available credits, and your own render history, job status and results. It receives the images you select for a rendering request, temporary attachment download references, your instructions and rendering settings. We use this information to prepare your request, show its credit cost, create a render after you confirm, and display the result. We do not receive your entire ChatGPT conversation through this integration.
Selected files transfer from ChatGPT's file service to our storage edge. Rendering uses the storage and AI compute providers described below. Render previews, output links and requested account information are returned to OpenAI so ChatGPT can display and use the result. OpenAI handles information in ChatGPT under its own privacy policy and your applicable settings. You sign in on RENDERCAD; your RENDERCAD password is not returned to ChatGPT. Connection credentials are stored and used to authorize the integration.
Unconfirmed render quotes expire after 20 minutes. Their temporary attachment references are removed by the next cleanup, scheduled every ten minutes, or immediately after successful submission. We retain integration draft and job-attribution records for up to 90 days. Input files and completed renders follow the plan-based retention periods below. Limited integration request logs record operation names, status and timing for security and troubleshooting; these logs do not include attachment download links, authentication secrets or rendering instructions.
You can revoke access at any time in Manage connections or disconnect the plugin in ChatGPT. Revoking RENDERCAD access stops subsequent authorized requests; it does not cancel a render you already confirmed or remove results already shared in ChatGPT. Use your RENDERCAD account controls to delete stored renders or your account, and ChatGPT's controls for information retained there.
2. How We Use Your Information
We use your information to:
- Provide and maintain the RENDERCAD Service
- Process your CAD rendering requests using AI technology
- Manage your account and subscription
- Send service-related emails (verification, password resets, receipts)
- Monitor and analyze usage patterns to improve our Service
- Prevent fraud and enforce our Terms of Service
- Comply with legal obligations
3. Data Storage and Security
3.1 Storage Infrastructure
- Cloud Storage: Input images and rendered outputs are stored on secure cloud storage infrastructure
- Database: Account data and render metadata stored in access-controlled databases
- Backups: Regular automated backups with industry-standard retention policies to ensure data recovery capabilities
3.2 Data Retention
- Lite Users: 15 days
- Starter Users: 30 days
- Professional Users: 90 days
- Business Users: 365 days
- Legacy Beta Users: 30 days
- Legacy Enterprise Users: 365 days
- Account and render content is removed when you delete your account. Anonymous service metrics may be retained.
- Feedback, bug reports, contact submissions, and support reports may be retained as service and support records after account deletion.
- Encrypted disaster-recovery backups age out under the backup retention schedule and are not used as active account records.
- Technical data (access logs, IP addresses): retained for a limited period for security and operational purposes
- Website conversion diagnostics: For up to 30 days, we retain limited signup, verification, plan-offer and checkout-step events, timestamps, coarse browser/device and country categories, and a pseudonymous account reference when signed in. We compare these with existing signup and payment records to diagnose failed or abandoned purchase paths. This logging creates no new cookies, does not collect entered credentials, file content, prompts or card details, and is not sent to advertising partners. Global Privacy Control or Do Not Track prevents collection of these diagnostic events. Collection is capped and may omit events.
3.3 Security Measures
- End-to-end HTTPS encryption via Cloudflare
- DDoS protection and Web Application Firewall via Cloudflare
- Bcrypt password hashing
- CSRF protection on all authenticated requests
- Rate limiting to prevent abuse
- Regular security audits and updates
4. Information Sharing and Disclosure
We share your information with:
- Infrastructure and Service Providers:
- Google - OAuth authentication (account login)
- Cloudflare - CDN, DDoS protection, web application firewall, and cloud file storage (R2). All web traffic passes through Cloudflare's network. Your uploaded input images and rendered outputs are stored in Cloudflare R2 object storage.
- Backblaze - Cloud object storage for uploaded input images and rendered outputs
- Stripe - Payment processing. Stripe receives your payment information and billing details directly and is solely responsible for their handling.
- AI compute providers - Your input images are transmitted to third-party AI infrastructure services to generate renders. RENDERCAD does not use your input images or rendered outputs to train AI models, and does not sell your content to any third party. The retention and use of your content by these providers is governed by their own terms of service and privacy policies.
- Email delivery provider - Your email address is used to send transactional emails (account verification, password resets, billing receipts).
We take reasonable steps to ensure these providers handle your data appropriately and use it only to provide services to us.
- Legal Requirements: When required by law, court order, or government request
- Business Transfers: In connection with a merger, acquisition, or sale of assets
We do not sell your personal information to third parties.
5. Your Rights and Choices
You have the right to:
- Access: View your account information and render history
- Correction: Update your email or profile information
- Deletion: Delete your account and render content via Settings. Anonymous metrics and submitted feedback/support reports are retained.
- Export: Download your render history as ZIP file
- Opt-Out: Unsubscribe from marketing emails (service emails still required)
6. Cookies and Tracking
We use:
- Session Cookies: To maintain your login state
- Analytics: Traffic and usage statistics via Google Analytics 4. Google Analytics collects data such as page views, session duration, and general location (city/country level). You can opt out via Google's opt-out browser add-on.
- First-Party Website Tests: We use a first-party cookie to keep the same homepage version in your browser and compare aggregate signup and first-subscription purchase rates. If you register or sign in, we link your test assignment to your account for this measurement. These experiment records are not sent to advertising partners. For the current test, the cookie expires when its 60-day enrollment and 7-day follow-up period ends. Individual experiment records are removed from our active database within eight days after follow-up ends; aggregate results are retained and routine backup retention still applies. Enabling Global Privacy Control or Do Not Track before your homepage visit prevents enrollment in this test.
- LocalStorage: For UI preferences such as theme settings and interface state
- Error Monitoring: We use error monitoring software to automatically detect and report technical issues with the Service. When you are logged in, this service may collect your user ID, email address, name, and subscription plan, along with browser information, page URLs, and error details. This data is used solely to diagnose and fix technical problems and is not shared with third parties for any purposes.
- LinkedIn Insight Tag: We use LinkedIn's Insight Tag to measure the effectiveness of our LinkedIn advertising campaigns and understand how visitors engage with our website. This tag may collect your IP address, browser information, and page URL. You can opt out of LinkedIn tracking at LinkedIn's opt-out page.
7. Children's Privacy
RENDERCAD is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us immediately.
8. International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or prominent notice on our Service. Continued use after changes constitutes acceptance.
10. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us through the contact page:
Contact: Send a message