Privacy policy

Last updated October 3, 2026

The short version

  • We collect what we need to run your account, make your pictures and take payment.
  • Your prompts and pictures go to the image providers that make them, and to the services that run Rendrly, listed below. Nobody else.
  • We do not sell your data, show ads, or run analytics or advertising trackers.
  • You can ask us to delete your account and everything in it.

What we collect

  • Your account. Your email address and a password. The password is kept only as a salted hash by our sign-in system, so we never see it. If you sign in with Google, Google shares your email address, name and profile picture with us. We use your email address to identify your account and do not use the rest for anything else.
  • What you make. The prompts and settings you enter, the pictures you generate, any pictures you upload to edit, and the names of the folders you make to organize them. Pictures are kept in private storage and shown to you through links that expire. Every picture is private until you make it public, and folders are never shown to anyone else.
  • Public pictures. When you make a picture public, it is shown with its prompt and the model that made it, and never your name or email address, in the gallery on our home page and on a page of its own that anyone with the link can open. Services that build link previews (a chat app, a social network) also fetch it when someone shares the link. Making it private again, or deleting it, takes it down within a few minutes; copies that someone else has already saved are outside our control.
  • Billing. Your plan, your credit balance, and a record of credits bought, spent and refunded. Stripe, through Link, takes your payment: your billing address and payment details go to them, not to us. We keep your Stripe customer reference and the state of your subscription, and we never see your card number.
  • Free credits. When we give free credits to new accounts, we keep a one-way fingerprint (a hash) of your email address, with dots and +tags ignored, so that they are given once per person. It cannot be turned back into your address. We keep it after you delete your account, so that deleting and registering again does not earn a second gift, but it is no longer linked to you.
  • Technical information. Cookies that keep you signed in, and standard request logs (such as IP address, browser and the pages requested) kept by our hosting and database providers for security and to fix problems.

How we use it

  • To sign you in, run your account, and keep your pictures available to you.
  • To send your requests to an image provider, charge credits for them, and refund a picture that could not be made.
  • To take payment, and to keep the records that tax and accounting rules require.
  • To prevent abuse and fraud, for example by limiting how quickly requests can be sent, and to keep the service secure.
  • To answer you when you write to us.

We can technically open stored content, and we do so only to investigate abuse, fix a problem you report, or meet a legal requirement.

Who else handles it

  • fal.ai, kie.ai and WaveSpeed, the image providers. They receive your prompt, your settings and any picture you upload to edit (as a temporary link), and send back the result. What they do with that is governed by their own terms and privacy policies.
  • Supabase runs our database, sign-in and file storage, on servers in the United States.
  • Vercel hosts the website.
  • Stripe, and its consumer network Link, process payments and manage subscriptions. If you ask Stripe or Link to delete your data, they handle that request for a purchase made this way.
  • Google, only if you choose to sign in with Google.

We share information beyond this only when the law requires it, or to protect the service and other people from abuse.

Signing in with Google

We ask Google only for the basic sign-in details described above. Rendrly’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies

We use only the cookies that keep you signed in. We do not use advertising or analytics cookies, and there are no third-party trackers on this site.

How long we keep it

We keep your account, your pictures and your history until you ask us to delete them or close your account. We then delete them within 30 days, and copies in backups follow as the backups expire. Billing and tax records may be kept for as long as the law requires. Image providers may keep prompts and pictures for a limited time under their own policies.

Your choices

You can delete any picture from your library yourself, and make any picture public or private, at any time. When you delete a picture its file is removed from our storage straight away. We keep a record of the request (your prompt, the model, the credits and what it cost us) for billing, support and handling abuse, until you ask us to delete your account. You can also ask us to show you what we hold about you, correct it, send you a copy, or delete it. To make any request, write to us at the address below. We will answer within 30 days.

Children

Rendrly is not meant for children under 13, and we do not knowingly collect information from them.

Changes to this policy

When this policy changes we will update the date above. If a change affects how we use what you have already given us, we will tell you by email or in the studio before it takes effect.

Contact

Rendrly is run by Anthony Gillion, an individual in the United States, who is responsible for the data described here. Write to support@rendrly.online about your data or this policy.