Privacy Policy

1. Information we collect

• Account and sign-in data: your email address and authentication identifiers. If you register with an email and password, your password is handled by Google Firebase Authentication and is never stored by us in readable form.
• Google Sign-In data: if you sign in with Google, we receive your name, email address, profile picture, and Google account identifier. We do not request access to your Gmail, Google Drive, contacts, calendar, or any other Google account data.
• Content you provide: prompts, chat messages, uploaded images, videos, and audio, reference media, image edits, saved presets and projects, and the outputs generated for you.
• Account settings: your preferences (such as theme and content filter settings) and records of your acceptance of these Terms.
• Purchases and credits: credit pack purchases, credit balances and usage, payment status, and payment references supplied by our payment providers (such as transaction or wallet identifiers for crypto payments). Card details are entered with our payment providers and are never stored by OpenRender.
• Referral and affiliate data: the referral code you signed up with and, if you join the affiliate programme, the information needed to track and pay commissions.
• Device and usage data: IP address, browser and device type, operating system, pages visited, feature usage events, and error logs. We also derive a device identifier from your browser configuration to prevent fraud, abuse, and misuse of multiple accounts.
• Support communications: messages you send us through the contact form or by email.

2. How we use your information

• To create and maintain your account, authenticate you, and keep your account secure.
• To run the generation, editing, and chat features you request, including sending your prompt, settings, and reference media to the AI provider that runs the model you select, and storing the results in your account.
• To process purchases, maintain credit balances, and keep billing and accounting records.
• To run automated safety checks that screen for and block prohibited content (for example, content involving minors and AI-generated Non-Consensual Intimate Imagery (AI NCII)) and to enforce these Terms.
• To prevent fraud, abuse, misuse of multiple accounts, and security incidents.
• To understand how the Service is used, fix errors, and improve performance and reliability.
• To respond to support requests and send service messages, such as password reset emails.
• To comply with legal obligations and respond to lawful requests from authorities.

Under UK data protection law, we rely on the following legal bases: performing our contract with you, our legitimate interests in operating a safe and reliable service, compliance with legal obligations, and your consent where we ask for it. You can withdraw consent at any time.

3. Your content is private

Your prompts, uploads, chats, and generated media are private to your account. We do not publish them, and OpenRender staff do not browse them. Content is only reviewed by a moderator when moderator action is flagged as required (for example, when our automated safety checks flag content as potentially breaching these Terms or the law), when you ask us to look at it as part of a support request, or when we are legally required to.

4. How we share information

We do not sell or rent your personal data, and we do not share it with advertisers. We do not share anything that is not necessary to perform the Service or to comply with legal requirements. We share information only:

• With the service providers listed below, which process data on our behalf to run the Service. Each provider receives only the data needed for its part of the Service. For example, a generation provider receives the prompt, settings, and reference media for your request, not your payment details.
• With law enforcement, regulators, or courts where we are legally required to, or where we reasonably believe disclosure is necessary to protect people or the Service (see section 6 of our Terms and Conditions).

Our third-party API and infrastructure providers:

• Google: Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, and Firebase Analytics host your account, content, and usage data. Google Gemini models power chat features and automated safety checks.
• OpenAI: AI models used for chat, image generation, and automated moderation of prompts.
• Wavespeed: AI image and video generation. Receives the prompt, settings, and reference media for your request.
• Alibaba: AI image and video generation models. Receives the prompt, settings, and reference media for your request.
• ByteDance: AI image and video generation models. Receives the prompt, settings, and reference media for your request.
• Runpod: Cloud GPU infrastructure that runs some of our image generation and automated safety classification models.
• MuleRouter: AI model access for some generation requests.
• Thirdweb: Payment processing for card and crypto checkout. Receives the information needed to complete and verify your payment.
• NOWPayments: Crypto payment processing.

If a model you choose is hosted by another inference provider, your request is sent to that provider on the same basis. Providers process data under their own terms and privacy policies.

5. Google user data

If you sign in with Google, we only use your basic profile information (name, email address, and profile picture) to create, identify, and secure your account. We do not sell this information, use it for advertising, or use it to develop, improve, or train AI or machine-learning models, and we do not transfer it to third parties except as needed to provide the Service, to comply with law, or with your consent. We never use Google APIs or Google user data to create AI-generated Non-Consensual Intimate Imagery (AI NCII) or any other content prohibited by these Terms. OpenRender's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. International transfers

Some of our providers process data outside the United Kingdom, including in the United States and Asia. When data is transferred internationally, we take the steps required by UK data protection law to protect it.

7. Cookies and local storage

We use cookies, local storage, and similar technologies to keep you signed in, remember your preferences (such as theme and gallery settings), record referral codes, and measure how the Service is used. You can clear or block these in your browser settings, but parts of the Service may not work without them.

8. Security

Data is encrypted in transit using HTTPS and stored with infrastructure providers that encrypt data at rest. Access to user data is restricted to authorised personnel who need it for the purposes in this policy, such as flagged moderation, support, or legal compliance. No system is completely secure, so we cannot guarantee absolute security.

9. Retention and deletion

• You can delete individual uploads and generations at any time. Deleted items move to trash and are permanently removed after a short grace period.
• You can delete your account from Settings. Your account is disabled immediately, and your profile, uploads, and generations are permanently deleted after 7 days.
• We keep billing, payment, and transaction records for as long as required for accounting, tax, and legal purposes. We may also keep records needed to investigate abuse, enforce these Terms, or comply with law, such as data relating to suspected illegal activity.

10. Your rights

Depending on where you live, including under UK GDPR, you may have the right to access, correct, or delete your personal data, to restrict or object to its processing, and to receive a copy of it in a portable format. To exercise these rights, email support@openrender.app. We may need to verify your identity before acting on a request. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.

11. Privacy contact

Privacy questions and requests can be sent to support@openrender.app or by post to OPENRENDER LTD, 128 City Road, London, EC1V 2NX, United Kingdom. We update this Privacy Policy as described in section 13 of our Terms and Conditions.