Privacy Policy

Last updated: August 12, 2026

1. Controller

[COMPANY NAME], [ADDRESS] — [PRIVACY EMAIL] is the data controller for personal data processed through RenderJam.

2. What we collect

• Account data: email address, username, hashed password, plan/tier, email-verification status.
• Prompts and generated media: the text prompts you submit and the video/music files generated for you, stored in your account library until you delete them or your account.
• Usage records: which tool you used, credits spent, timestamps, and technical metadata (never prompt content in error logs).
• Billing data: handled by SureCart and Stripe; we receive subscription status and price identifiers, never full card numbers.
• Technical data: IP address (rate limiting, abuse prevention — stored only as short-lived hashes for signup throttling), browser data via cookies strictly necessary for login.

3. How prompts are processed (AI providers)

To generate your content, your prompt text is transmitted to our AI processors: Runway AI, Inc. (video, USA) and Google LLC (music — Gemini API / Lyria, USA). Transfers are safeguarded by the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses. Do not include personal data about yourself or others in prompts unless necessary.

4. Purposes and legal bases (GDPR Art. 6)

• Providing the service, generating content, storing your library — contract performance (6(1)(b)).
• Billing and tax records — legal obligation (6(1)(c)).
• Abuse prevention, rate limiting, account security — legitimate interest (6(1)(f)).
• Product emails beyond transactional ones — consent (6(1)(a)), withdrawable any time.

5. Retention

Account data and your library are kept until you delete them or your account. Usage/billing records are kept as long as required by tax law ([e.g. 10 years]). Signup throttling data expires within 24 hours. Deleting your account purges your conversations, usage counters and library entries; media files are removed from storage within [30] days.

6. Recipients / processors

• [HOSTING PROVIDER] — website and database hosting ([LOCATION])
• Runway AI — video generation (USA)
• Google (Gemini API) — music generation (USA)
• SureCart / Stripe — payments and subscriptions
• [EMAIL/SMTP PROVIDER] — transactional email
• Cloudflare — CDN, security, optional Turnstile bot protection

7. Cookies

RenderJam uses only strictly necessary cookies: WordPress login/session cookies and a currency preference. We do not run third-party advertising or analytics cookies by default. If analytics are added later, this policy and a consent banner will be updated first.

8. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction, portability, and objection, plus the right to withdraw consent and to lodge a complaint with your supervisory authority ([AUTHORITY NAME/LINK]). You can delete your generation history directly in the app ("Delete all history"), and request full account deletion at [PRIVACY EMAIL] — we respond within 30 days.

9. Security

Passwords are stored hashed; API keys for AI providers are stored server-side only; access to production data is limited to [COMPANY NAME] personnel who need it. Generated media files are stored in your library and are accessible via their direct URL — treat highly sensitive content accordingly.

10. Changes

We will announce material changes to this policy by email or in-app notice before they take effect.