Rendeon is an architectural rendering service that produces marketing images from the drawings you provide. Rendeon is operated by Masitects LLC ("Masitects", "we", "us", "our").
This Privacy Policy explains how we collect, use, disclose, and process your personal data when you use https://www.rendeon.ai, the Rendeon web application, our marketing pages, and our other products and services (together, the "Services"). It applies to the personal data of the individual who holds an account with us. Where you use the Services on behalf of a firm, employer, or client, this Policy still governs our handling of your personal data, and your arrangement with that organization governs your relationship with them.
The Services run on two separate properties. This Policy treats them separately throughout, because they do different things and are subject to different practices.
- The Application is at https://www.rendeon.ai. It is where you create an account, upload Drawings, write Prompts, receive Renders, manage your projects, and pay. Everything confidential you entrust to us is given to us here.
- The Marketing Site is at rendeon.com, together with our blog. It is a public brochure. You cannot sign in there, you cannot upload anything there, and no payment is taken there.
We count visits on the Marketing Site, and we do none of that in the Application. The Application contains no analytics software, no advertising tag, no session recording, no keystroke logging, and no third party script of any kind. We do not record or replay anyone's screen on either property. Sections 1 and 7 set out exactly what runs where.
This Privacy Policy also describes your privacy rights. More information about those rights, and how to exercise them, is set out in Section 5 ("Rights and Choices"). Section 4 ("Model Training and Your Materials") describes how your work is used to improve our models and how to stop that at any time.
The Services are offered to businesses and professionals located in the United States. We do not currently market or offer the Services to individuals located in the European Economic Area, the United Kingdom, or Switzerland. Our systems and our Providers process and store personal data in the United States, and if you access the Services from outside the United States you understand that your personal data will be transferred to and processed in the United States under United States law.
Your use of the Services is also governed by our Terms of Service.
1. Collection of Personal Data
We collect the following categories of personal data.
Personal data you provide to us directly
Identity and Contact Data. We collect identifiers, including your email address and, if you choose to enter one, your name. We may also generate indirect identifiers for your account (for example, an account identifier in the form of a UUID). We do not ask for or store a password, because we sign you in using a single use link sent to your email address.
Payment Information. If you purchase a subscription or a credit pack, our payment processor collects your payment credentials directly. We receive and store the billing records described under "Personal data we receive from third parties" below, and we never receive or store your full payment card number.
Drawings and Prompts (your "Inputs"). You provide the material we render from. This includes elevations, floor plans, keynote sheets, and other drawing images you upload (your "Drawings"), photographs of materials or swatches you upload, the plain language instructions you write describing the result you want (your "Prompts"), the material and color answers you give when the Services ask about something the Drawings do not show, the regions you mark and the changes you describe when you request an edit, and the project and file names you choose. Drawings and Prompts are together your "Inputs".
Drawing sheets commonly carry a title block, which may contain a project address, a client or owner name, a firm name, a sheet author, and a date. We treat everything appearing on a sheet you upload as your confidential project content and handle it under this Policy.
Renders (your "Outputs"). The images the Services generate from your Inputs are your "Renders". Inputs and Renders together are your "Materials". Renders are produced by artificial intelligence models, and Section 5 of our Terms of Service describes what they are and are not suitable for.
Communication Information. If you contact us for support or for any other reason, we collect your contact information and the contents of the messages you send, including any Drawings or Renders you attach to them.
Account Activity Data. We collect the choices you make in your account, including your plan, your credit transactions, the reason you give if you cancel a subscription, your answers to any cancellation survey, and your response to any retention offer we make you.
Marketing List Data. If you join our early access or marketing list, we collect the email address you submit and the source from which you submitted it.
Personal data we receive automatically from your use of the Services
When you use the Services we also receive certain technical data automatically (together, "Technical Information"). This includes:
- Device and Connection Information. Your device type, operating system, browser type and version, referring page, internet service provider, and IP address, including the approximate location derived from that IP address.
- Usage Information. The dates and times you access the Services, the pages and endpoints you request, the operations you submit, and how you move through the application.
- Log and Troubleshooting Information. Records of how the Services perform for you, including log files, error reports, failed requests, and diagnostic traces, together with the state of the application at the time an error occurred.
- Abuse Prevention Data. Short lived counts of recent requests from an address, used to rate limit our sign in, signup, and upload endpoints against automated abuse.
- Cookies and Similar Technologies. We and our Providers use cookies and similar technologies to keep you signed in, to protect the Services, and to remember a preference you set. Section 7 describes these in detail, including what we do not use them for.
Marketing Site analytics
This applies to the Marketing Site only. On the Marketing Site we use analytics software, operated by us on infrastructure we control rather than by a third party analytics company, to count visits and understand which pages are useful. It records the page visited, the source that referred you, the approximate location derived from an IP address, and the type of device and browser. It does not identify you by name, and it is not used for advertising.
None of this operates in the Application, so it never touches a Drawing, a Prompt, a Render, a project, or an account page. Payment pages are hosted by our payment processor and are outside both properties.
We do not record you, on either property. We do not use session recording, session replay, screen recording, or keystroke logging anywhere. We do not reconstruct or replay what you did on screen, and we do not record the contents of the fields you type into. We do not use a third party analytics or advertising product on either property.
We do keep the server side records described in this Section. Storing your Drawings and Prompts is how the product works, and request logs are how it is kept running and secure. That is a record of what you submitted to us, not a recording of you submitting it, and the two are not the same thing.
Personal data we receive from third parties
- Payment Processor Data. From Stripe we receive and store the records that document your billing relationship with us, including a customer identifier, subscription and invoice identifiers, your plan, price, currency, amounts charged and refunded, payment status, billing period dates, discounts and promotion codes applied, and the event data Stripe sends us when something happens on your account. That event data may include your billing name, the email address you gave Stripe, the brand and last four digits of your payment card, and your billing country and postal code.
- Email Delivery Data. From our transactional email Provider we receive delivery information, including whether a message we sent you was delivered, bounced, or was reported as spam.
- Infrastructure and Security Data. From our hosting, network, and security Providers we receive request and security logs, including records of traffic that was blocked or throttled.
- Marketing Platform Data. From our marketing platform we receive the address you submitted to our early access list and the source it came from.
Personal data you should not submit
The Services are built to receive architectural drawings and instructions about them. Please do not submit personal data you are not entitled to share, and do not submit categories of data the Services were never designed to hold. In particular, do not submit Social Security numbers or other government identification numbers, payment card or financial account numbers, health or medical records, biometric data, information concerning children, or records governed by HIPAA, the Gramm-Leach-Bliley Act, FERPA, or a comparable regime. Where you are handling a client's confidential material, submit only what you have the right to submit for the purpose of producing a rendering.
2. Uses of Personal Data
We use your personal data for the following purposes:
- To create and administer your account, to sign you in, and to keep your session secure;
- To provide, maintain, and facilitate the Services, including producing your Renders and delivering them to you;
- To store your projects, Materials, and history so that you can return to them;
- To meter, grant, and deduct Credits and to maintain an accurate ledger of them;
- To take payment, issue receipts, apply discounts, process refunds, and handle payment disputes;
- To prevent and investigate fraud, abuse, and violations of our Terms of Service, unlawful activity, and unauthorized access to or use of personal data or our systems;
- To respond to your support requests and to investigate and resolve problems on your account;
- To investigate and resolve security issues, and to debug, identify, and repair errors that impair existing functionality;
- To measure and improve the quality of the Services, and to train and improve the models behind them, subject to Section 4;
- To send you service communications you cannot decline while you hold an account, including sign in links, receipts, notices of failed payment, and notice of material changes to this Policy or our Terms of Service;
- To send you product news, offers, and other marketing communications, which you may decline at any time;
- To comply with legal, tax, and accounting obligations, and to establish, exercise, or defend legal claims.
3. Recipients and Third-Party Data Sources
We disclose personal data to, or receive personal data from, the following categories of third parties for the purposes explained in this Policy. The vendors we engage to operate the Services are together our "Providers", and each is bound by contract to use personal data only to provide its service to us.
Model and infrastructure Providers. Producing a Render requires sending your Materials to the Providers that host and run the models and the systems behind them.
| Provider | What it receives |
|---|---|
| Anthropic | Your Prompts, Drawings, and any swatch photographs, which it reads to help prepare and check your Render |
| Fal.ai | Text describing the Render, together with the Drawings needed to produce it, which it uses to generate the image |
| Inngest | Coordination data for each run, which may include your identifiers, your Prompt text, and references to your files |
| Supabase | Your account record, your Materials, and every other record we store, as our database, authentication, and private file storage Provider |
| Vercel | Requests to the Services, as our application hosting Provider, including request logs |
| Cloudflare | Traffic to our domains, as our DNS, network, and abuse mitigation Provider |
We select model Providers on the basis that they do not use customer content submitted through their interfaces to train their own models by default, and we do not grant them permission to do so. Provider terms are theirs to change rather than ours. Where a Provider materially changes its position, we will update this Policy.
How Rendeon prepares, checks, and improves a Render is our confidential method and our trade secret. This Policy describes the personal data each Provider receives and why, which is what a privacy policy is for. It is not a description of how the Services work internally.
Service providers and business partners. We disclose personal data to the Providers that support the commercial and communications side of the Services, including Stripe for payment processing, subscription management, invoicing, refunds, and payment fraud prevention; our transactional email Provider for messages including your sign in links; our marketing platform for our early access list and marketing email; and our marketing site host for our public pages and blog.
Stripe also processes your personal data for its own purposes, including fraud prevention, regulatory compliance, and its own legal obligations, and acts on its own behalf rather than ours for those purposes. Stripe's practices are described in the Stripe Privacy Policy. Stripe's fraud prevention tools collect technical information about the device and browser used at checkout in order to distinguish a genuine customer from an attacker.
Our own analytics. The analytics described in Section 1 run on infrastructure Masitects operates, at a subdomain we control. That data is not sent to a third party analytics company, is not sold, is not shared with an advertising network, and is not combined with your Application account or your Materials.
Marketing Site tools. Our website host serves the Marketing Site and our blog, a search optimization tool runs on those pages, and an embedded form from our marketing platform collects enquiries submitted there. Each sets the cookies it requires. None of them are present in the Application.
Affiliates and corporate partners. Rendeon is operated by Masitects, which also operates an architectural visualization studio. Where you ask about studio services, or accept an offer to work with the studio, we disclose the personal data needed to respond to you. We do not otherwise disclose your Materials to the studio.
As part of a significant corporate event. If we are involved in a merger, acquisition, financing, bankruptcy, or other transaction involving the transfer of business assets, personal data may be disclosed or transferred as part of that transaction. We will notify you before your personal data becomes subject to a materially different privacy policy.
Pursuant to regulatory or legal requirements, safety, and to enforce our rights. We may disclose personal data to government authorities, law enforcement, or other third parties where, based on the information available to us, we have a good faith belief that disclosure is reasonably necessary to comply with applicable law, regulation, or legal process, including for legal, tax, or accounting purposes; to prevent serious harm to any person or to property; to detect, prevent, or address fraud or other illegal activity; or to enforce our Terms of Service or protect the rights, property, security, or safety of Masitects, our members, or others. Where we are permitted to notify you of a demand for your personal data, we will endeavor to do so.
With your consent or at your direction. We otherwise disclose personal data where you give us permission or direct us to do so, including where you ask our support staff to examine a specific project.
We do not sell personal data. We do not sell your personal data as that term is defined by applicable United States privacy laws, and we do not share it for cross context behavioral advertising. We have not done either in the twelve months preceding the effective date of this Policy. We do not disclose your Materials to any advertising partner for any purpose.
4. Model Training and Your Materials
What we do. Unless you opt out, we use your Materials, together with the answers you give during a run and the choices you make about the results, to measure quality, improve the Services, and train and fine tune the models behind Rendeon. This is how the Services learn to hold a Render to the Drawing, and it is why Rendeon improves as it is used.
What we do not do. We do not sell your Materials. We do not publish your Drawings or your Renders. We do not use your Materials in our marketing, case studies, or sample galleries without first asking you in writing. We do not give other members access to your projects.
How to opt out. Open Settings in your account and turn off "Help improve Rendeon". The change takes effect immediately and applies to your account. If you would prefer that we do it for you, email privacy@rendeon.ai from the address on your account and we will action the request within five business days and confirm when it is done. Opting out is free, does not change your price, and does not limit any feature of the Services.
What opting out reaches. Opting out stops us from using your Materials to train or improve our models, and applies to your Materials from any period, including runs that took place before you opted out. Material that has already been incorporated into a trained model cannot be extracted from that model, and opting out does not require us to discard a model that has already been trained.
What opting out does not reach. Opting out is not a request to stop operating the Services for you, and it therefore does not change any of the following. We continue to store your Materials and project history so that the product functions and so that you can return to your work. We continue to record what occurred on each run, because that record is how our support staff explain an unsatisfactory Render, how a payment dispute is resolved, and how abuse is detected. Our support staff may still access your account under Section 6 to investigate a problem you have reported. We may also continue to use aggregated or de-identified measurements that do not identify you, your firm, or your project, as described in Section 8.
5. Rights and Choices
Depending on the state in which you live, you may have certain rights regarding your personal data. We honor the rights below for every member, whatever state you live in, subject to the exceptions applicable law provides.
- Right to know. The right to know what personal data we process about you, including the categories of personal data, the categories of sources it is collected from, the business or commercial purposes for collecting it, and the categories of third parties to whom we disclose it.
- Access and data portability. The right to request a copy of the personal data we hold about you, in a portable format, subject to certain exceptions and conditions.
- Deletion. The right to request that we delete personal data we collected from you, subject to the records we are required to retain by law, including billing records, and to personal data we need to resolve a dispute, enforce our agreements, or prevent abuse.
- Correction. The right to request that we correct inaccurate personal data we hold about you. Please note that we cannot guarantee the accuracy of a Render, and a Render that depicts something inaccurately is addressed by generating or editing a further Render rather than by a correction request.
- Opt out of model training. The right to stop us using your Materials to train or improve our models, as described in Section 4.
- Opt out of marketing. The right to decline marketing communications, using the unsubscribe link in any marketing message or by writing to us. Service communications about your account continue while you hold an account.
- Opt out of sale, sharing, and targeted advertising. We do not sell personal data, share it for cross context behavioral advertising, or conduct targeted advertising, so there is nothing on our side to opt out of. We honor Global Privacy Control and comparable browser signals as a valid opt out request where applicable law treats them as one.
- Automated decision making. We do not make decisions about you based solely on automated processing that produce legal effects concerning you or similarly significant effects. The Services decline requests that fall outside architectural visualization, which is a limit on what the product will render and not a decision about you.
- Non-discrimination. We will not deny you the Services, charge you a different price, or provide you a lower quality experience because you exercised a privacy right.
How to exercise your rights. You or an authorized agent may submit a request by emailing privacy@rendeon.ai and stating the request and the email address on your account. After we receive your request we may verify it by confirming your control of that address, and for a deletion or access request we may ask you to confirm the request a second time before we action it. Where an authorized agent submits a request on your behalf, we require evidence of authority to act for you.
How long we take. We acknowledge requests within 10 business days and respond within 45 days of receiving a verifiable request. Where your request is complex, we may extend that period by up to a further 45 days and will tell you why before doing so.
Appeals. If we decline your request, you may appeal by replying to our decision or by emailing privacy@rendeon.ai with "appeal" in the subject line. A person who was not involved in the original decision will review it, and we will respond in writing within 45 days with the outcome and the reasoning behind it. If we deny your appeal, we will tell you how to submit a complaint to your state attorney general.
6. Support Access to Your Account
Our support and engineering staff may, in limited circumstances, open your account in order to reproduce a problem you have reported. When that occurs we record which staff member did so, whose account was accessed, the reason given, and the times at which the session started and ended, and the session closes automatically after a period of inactivity. We use this access to answer support requests, not to review member work.
7. Cookies and Similar Technologies
We use a small number of cookies and browser storage items, and none of them are used for advertising. The Application sets only what is required to sign you in, protect the Services, and remember a display preference. It carries no analytics, no advertising tag, and no session recording. The Marketing Site additionally carries the analytics described in Section 1. Where any of this changes, we will update this Policy before it does.
- Authentication cookies. Set by our authentication Provider to keep you signed in. The Services cannot function without them.
- Support session cookie. Present only while a support session described in Section 6 is open.
- Security and abuse cookies. Set by our hosting and network Providers to protect the Services.
- Theme preference. Stored in your browser so the application opens in the mode you selected. It is never transmitted to our servers.
- Payment processor cookies. Set by Stripe on its own checkout and billing pages, and by its fraud prevention tooling, when you make a payment or manage your subscription.
- Marketing Site analytics. Our own analytics software stores what it needs to recognize a repeat visit. Marketing Site only.
- Marketing Site functionality. Our website host, our search optimization tool, and our embedded enquiry form set the cookies they require to serve and secure those pages. Marketing Site only.
We do not respond to Do Not Track browser headers, which have no agreed meaning. We do honor Global Privacy Control as described in Section 5.
8. Data Retention, Data Lifecycle, and Security Controls
Retention. We retain personal data for as long as reasonably necessary for the purposes set out in this Policy, and according to the following criteria.
| Category | Retention period |
|---|---|
| Identity and Contact Data | For as long as your account is open, then deleted or de-identified within 90 days of account closure |
| Drawings and other uploaded files | For as long as your account is open, or until you delete them, then removed from active storage within 30 days and from backups within 90 days |
| Renders and project history | As for Drawings |
| Credit ledger and billing records | Seven years, because tax and accounting law requires us to retain records of what you paid |
| Payment processor event records | Seven years, for the same reason |
| Run records used for quality and training | Up to five years, and de-identified within 90 days of account closure unless you have opted out under Section 4, in which case they are deleted |
| Communication Information and cancellation survey responses | Three years |
| Technical Information, including server, security, and rate limit logs | Up to 12 months, and shorter for most request logs |
| Support access records | Two years |
| Marketing Site analytics | Up to 24 months, and in aggregate form after that |
| Marketing List Data | Until you unsubscribe or ask us to remove you |
Backups are rotated on their own schedule, so a deleted record may persist in an encrypted backup for a period after it is removed from the live system. We do not restore deleted records from backup except in order to recover from a failure.
Aggregated or de-identified information. We apply aggregation and de-identification techniques as part of our data minimization practices. For example, we may measure how often a quality check fails across all accounts in order to improve the Services. Where personal data is de-identified, we maintain and use it in that form and will not attempt to re-identify it, except as permitted by law.
Security controls. We implement technical and organizational measures designed to protect personal data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. These include the following:
- Drawings and Renders are held in private storage. There is no public link to your files, and access occurs through short lived signed links or through our own server code.
- Database access is constrained by row level security, so one member's queries cannot reach another member's records.
- Credentials for our model, payment, and database Providers are held server side only and are never transmitted to the browser.
- Data is encrypted in transit using TLS, and our infrastructure Providers encrypt data at rest.
- Authentication uses a single use emailed link, so we hold no password of yours. Our sign in, signup, and upload endpoints are rate limited, and our sign in responses do not reveal whether an address has an account.
- Credit balances can be altered only by server side code.
- Support access to a member account is recorded and expires automatically.
No method of transmission or storage is completely secure, and we do not represent otherwise. Where a security incident affects your personal data, we will notify you and any regulator as applicable law requires.
9. State Privacy Disclosures
California. In the twelve months preceding the effective date of this Policy, we collected the categories of personal data described in Section 1 and disclosed them for a business purpose to the categories of recipients described in Section 3. We did not sell personal data, we did not share personal data for cross context behavioral advertising, and we did not knowingly do either with the personal data of any individual under 16 years of age. We do not collect sensitive personal information for purposes that would require us to offer a right to limit its use. California residents may exercise the rights described in Section 5 and may designate an authorized agent to do so. Under California Civil Code section 1798.83, we do not disclose personal data to third parties for those third parties' own direct marketing purposes.
Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with comparable laws. Residents have the rights to confirm whether we process their personal data and to access it, to correct it, to delete it, to obtain a portable copy, and to opt out of targeted advertising, the sale of personal data, and profiling in furtherance of decisions producing legal or similarly significant effects. We do not conduct any of those three activities. Where applicable law provides a right of appeal, Section 5 describes how to exercise it. Minnesota residents may additionally ask about the reasoning behind a profiling decision, and Oregon residents may request the specific third parties, rather than the categories of third parties, to which we disclosed their personal data.
Nevada. We do not sell covered information as Nevada defines that term. You may nonetheless submit an opt out request to privacy@rendeon.ai.
10. Children
The Services are a professional tool and are not directed to children. You must be at least 18 years of age to hold an account. We do not knowingly collect personal data from anyone under 18, and we do not knowingly collect, sell, or share the personal data of anyone under 16. If you become aware that a person under 18 has provided personal data to us, email privacy@rendeon.ai and we will investigate and, where appropriate, delete it.
11. Changes to Our Privacy Policy
We may update this Privacy Policy from time to time, and will update the effective date at the top when we do. Where a change materially reduces the protections that apply to your personal data, including any change to how we use your Materials, we will give you notice by email or within the application before the change takes effect, and where applicable law requires your consent we will ask for it rather than assume it.
12. Contact Information
The entity responsible for your personal data is Masitects LLC, of 4801 Glenwood Avenue, Suite 200, PMB 253, Raleigh, NC 27612, United States.
- Privacy requests and questions: privacy@rendeon.ai
- Legal notices: legal@rendeon.ai
- Support: hello@rendeon.ai
You have the right to submit a complaint to the attorney general of the state in which you live.