What personal data Rendreal collects when you use the design assistant and order printed products, why, who sees it, how long we keep it, and the rights you have over it. One notice for every region.
Effective September 18, 2026Rendreal, Inc. · Delaware, USA
Part I
Who, what and why
1Who is responsible for your data
Rendreal, Inc., c/o Mixam, Inc., 1 N Wacker Dr, Suite 2410, Chicago, IL 60606, USA, is the controller for the activities described in this Policy. Contact us at hello@rendreal.ai.
If you are in the European Economic Area, the details of our representative under Article 27 GDPR are available on request at hello@rendreal.ai. If you are in the United Kingdom, the details of our representative under Article 27 UK GDPR are available on request at the same address. You may contact either of them instead of us about anything in this Policy.
2What we collect
Account and contact data: name, email address, login and account identifiers, billing and delivery addresses, and phone number.
Conversation data: everything you type or say to the design assistant, the assistant's replies, the Designs it produces, your choices between candidates, your approvals, and files you upload (logos, photos, PDFs and other Input). Uploads may contain personal data about you or about other people, such as faces, names and contact details.
Order data: products ordered, specifications, print-ready files, prices, taxes, payment status, shipping and tracking information. Payment information is handled by our payment provider.
Usage and device data: IP address, browser and device type, language, time zone, referring page, pages viewed, and error and performance logs, including observability traces that record how a request moved through our systems.
Product analytics data: how you use the Service, including pages and features used, interactions with prompts, candidates and Designs, timing, and order outcomes. We may record replays of sessions in the Service. Session replays may include content displayed in the Service and your interactions. Analytics may be associated with a browser identifier or your account.
Communications: emails and support messages you exchange with us, and your responses to surveys or feedback prompts.
Please do not submit sensitive personal information, such as health, religious, ethnic, biometric or sexual-orientation information. Ordinary photographs are not categorically prohibited, but uploads may contain personal data about other people.
3Why we use it, and on what legal basis
We use personal data for the purposes below. The legal basis column applies where GDPR or UK GDPR governs.
Purpose
Data
Legal basis (EU/UK)
Run the design assistant: send your messages and uploads to Technology Partners, generate Designs, keep the conversation state
Conversation, account
Contract (Art. 6(1)(b))
Produce, ship and support your Orders, including sending print files and delivery details to Manufacturers and carriers
Order, account
Contract
Take payment, prevent fraud, handle disputes and chargebacks
Order, account, usage
Contract; legitimate interest in preventing fraud
Keep tax, accounting and order records
Order, account
Legal obligation (Art. 6(1)(c))
Keep the Service secure, detect abuse and enforce our Terms, including automated screening of conversations and Designs for prohibited content
Conversation, usage
Legitimate interest in security and lawful operation
Handle rights complaints, including copyright and trademark notices, and keep records of them
Conversation, order, account
Legal obligation; legitimate interest in defending claims
Improve the assistant and the Service: review conversations, Designs and candidate choices to find failures, refine model instructions and knowledge, test changes and improve quality checks (clause 5)
Conversation, usage
Legitimate interest in improving the Service
Understand how the Service is used, measure which features and flows work, fix errors and improve it (product analytics, clause 6)
Product analytics, usage, account
Legitimate interest in understanding and improving the Service; where the law requires consent for the cookies or storage involved (EU/UK), your consent (clause 11)
Send you order updates and service messages
Account
Contract
Send you marketing, if you agreed or the law allows it for existing customers
Account
Consent (Art. 6(1)(a)); legitimate interest for existing-customer email where permitted, always with an unsubscribe
For legitimate-interest processing, our interests include operating, securing and improving the Service, preventing fraud and protecting our legal rights. We consider the impact on individuals and offer the objection right where applicable (clause 9). Contract is the basis for data about the individual entering into or using the contract; for other contact details we control, we may rely on legitimate interests where appropriate.
4Technology Partners: the AI providers behind the assistant
The design assistant runs on large language, image and layout models operated by third-party providers ("Technology Partners"). When you use the assistant, your messages, uploads and the resulting Designs are transmitted to one or more Technology Partners to generate a reply. We choose which Technology Partner handles a request and may change or combine them.
Technology Partners process data for us to provide the assistant. Some providers may also process data for their own security, legal or payment obligations, as applicable. Where required, we put appropriate processor terms in place. The current list of Technology Partners and other service providers, with their function and processing location, is available on request.
5Training, and using conversations to improve the Service
Currently, we do not use conversations, uploads or Designs to train or fine-tune models. We use AI provider APIs offered on no-training terms.
We may, however, use conversation data to improve the Service. That includes reviewing conversations, Designs and your choices between candidates to see where the assistant misunderstood a request or produced a poor Design, refining the instructions, examples and knowledge we give the models, testing changes before we release them, and improving our print specifications and quality checks. Where practical we work with samples, aggregates or data with direct identifiers removed, and access is limited to people who need it for this work. We may also analyse Service use to operate and secure the Service as described in this Policy.
If we decide to train or fine-tune models on conversations, uploads or Designs, we will update this Policy first and give any notice, and obtain any consent, the law requires. Where we rely on legitimate interest for the improvement uses above, you can object as described in clause 9 by writing to hello@rendreal.ai.
Part II
Sharing, transfers, retention
6Who we share data with
We share personal data only as needed for the purposes in clause 3, with:
Technology Partners (clause 4): conversation data and uploads, to generate replies and Designs.
Manufacturers and carriers: name, delivery address, phone number where needed, and print-ready files for an Order.
Service providers for hosting, file storage, payments, email, customer support, analytics, session replay, and error and performance telemetry.
Rights holders and their agents, where a copyright, trademark or illegal-content notice concerns your Design: we may disclose the Design and, where the law requires or a court orders it, your identity.
Authorities, courts and regulators where the law requires, or to protect our rights or someone's safety.
A buyer or successor if we are acquired or merge, with notice to you.
We do not sell personal data, and we do not share it for cross-context behavioural advertising.
7Where your data goes
We are based in the United States. Our providers and manufacturers may process data in the United States, the United Kingdom, and other countries relevant to the service or order.
When transfer law applies, we use an adequacy decision or approved contractual clauses, including relevant UK or Swiss adaptations, and supplementary measures where required. You may request a copy of the relevant safeguards, where applicable, at hello@rendreal.ai.
8How long we keep it
We set retention by category and keep data no longer than necessary for the criteria below, subject to applicable law, disputes, legal holds and security investigations.
Account and contact data: while the account or customer relationship is active, then for account closure, support, security, and applicable legal obligations.
Conversations, Designs and uploads: based on the last activity, whether work is completed or abandoned, and whether the content remains needed to provide the Service. For uploads not used in an Order, we consider the upload's purpose and account status.
Order, print and delivery data: print files and delivery data for fulfilment, reprints, returns, disputes and claims; invoice and payment records for the applicable statutory accounting and tax recordkeeping period.
Analytics, session replay and technical logs: while identifiable data remains necessary to analyse a current Service issue or use pattern, improve performance, maintain security, investigate abuse or errors, or meet legal obligations; we delete or anonymise it when it is no longer necessary for those purposes.
Communications and rights records: for responding to requests and support matters, resolving disputes, defending claims, and applicable statutory recordkeeping or limitation periods.
When deletion is appropriate, we delete or anonymise data, subject to applicable retention exceptions. Copies may remain in backups until overwritten under our backup processes.
Part III
Your rights, children, security, changes
9Your rights and how to use them
Your rights depend on applicable law. To exercise them, write to hello@rendreal.ai. We may need to verify your identity and will respond within applicable legal deadlines.
If you are in the EEA, Switzerland or the UK, you may have rights of access, correction, erasure, restriction, portability and objection. You may object to processing based on legitimate interests, including profiling, and have an unconditional right to object to direct marketing. You may withdraw consent where processing is based on consent, without affecting earlier processing. You may complain to your local data protection authority. We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.
If a US privacy law applies to you, you may have rights to know, access, correct, delete, opt out of certain processing, and not be discriminated against for exercising rights. Where applicable, you may appeal a decision by replying to it, and may use an authorised agent as law permits.
10Children
The Service is not directed to children, and you must be 18 to hold an account (Terms, clause 3). Adults may upload content that includes children, such as family photographs, to use the Service or produce an Order, if they have the necessary permissions under the Terms. If you believe that a child has used the Service or submitted personal data directly, write to hello@rendreal.ai.
11Cookies and similar technologies
We use cookies and similar technologies to operate the Service, keep you signed in, remember your conversation and cart, and protect against fraud. These are necessary for the Service and do not need your consent.
Analytics cookies and session replay help us understand how the Service is used (clause 3). If you visit from the European Union, the European Economic Area, the United Kingdom or Switzerland, they run only after you accept them in the banner shown on our website; we determine this from the country your connection comes from. Elsewhere they run by default. Wherever you are, you can turn them off, or change an earlier choice, at any time using the "Cookie choices" link in the page footer, and you can also clear or block cookies in your browser. We honour the Global Privacy Control signal from your browser as a refusal. Your choice is stored in a cookie on rendreal.ai so that the website and the design assistant embedded in it honour it together.
If you do not accept analytics cookies, we still record the milestones of a chat session, such as a design being generated, a quote being shown or an order being placed, under a session identifier that is not linked to a visitor profile, so that we can measure how the Service performs (clause 3). Details of cookies, purposes and durations are available on request.
12Security
We use reasonable technical and organisational measures designed to protect personal data. No system is perfectly secure; if a breach requires notification, we will notify affected people and authorities as applicable law requires.
13Changes to this Policy
We may update this Policy. The effective date at the top shows the current version. We will provide notice of material changes where required by law. Before processing personal data for a new purpose, we will provide any notice and obtain any consent required by law. An update does not override rights or restrictions that apply to personal data already collected.
14Contact
Rendreal, Inc., c/o Mixam, Inc., 1 N Wacker Dr, Suite 2410, Chicago, IL 60606, USA. Privacy questions and requests: hello@rendreal.ai. EU and UK representatives: details available on request. Effective date: September 18, 2026.
This Policy works together with our Terms of Service, which govern your use of the Service and the products you order.