Privacy policy
Last updated: October 31, 2026
This policy explains what personal data Renderist collects, why, and what rights you have. We keep it short and plain.
1. Who is responsible for your data
The controller of your personal data is Piotr Zapolski, Piotr Zapolski Web Development, Cybernetyki 2, 02-677 Warszawa, Poland, NIP 5811976789, REGON 523629115 ("we").
For any privacy question write to [email protected].
2. What data we collect
Account data: your email address, a name (taken from your email or your Google account), a password stored only as a secure hash, and the language you signed up in.
If you sign in with Google: your name, email address and Google account id, as shared by Google.
Technical data: IP address, browser type and the time of your requests, kept in server logs for security.
Analytics data: pages you visit and how you use them, only if you accept analytics cookies.
When the product opens: the images you upload, the messages you write and the renders we create for you.
3. Why we use it and on what legal basis
To create and run your account and to tell you when Renderist opens (contract, Art. 6(1)(b) GDPR).
To keep the service secure and prevent abuse (our legitimate interest, Art. 6(1)(f) GDPR).
To measure how the website is used with Google Analytics (your consent, Art. 6(1)(a) GDPR). You can withdraw consent at any time in the cookie settings.
To meet tax and accounting duties once you pay for a plan (legal obligation, Art. 6(1)(c) GDPR).
4. Your images and renders
We never use your uploads or renders to train AI models.
We send your image and your request to the AI model provider only to create the render you asked for.
You can delete a project at any time, and its files are then removed from our storage.
5. Who receives your data
We use the service providers listed below. They process data only on our instructions.
- Hetzner Online GmbH (DE): Hosting of the website and app
- Google Ireland Limited (IE): Google sign-in and Google Analytics (only with your consent)
- Hostinger International Ltd. (Titan Mail) (CY): Sending account emails
- Cloudflare, Inc. (US): Hosting of the website and app
6. Transfers outside the EEA
Some providers may process data outside the European Economic Area. In that case we rely on an adequacy decision or the European Commission's standard contractual clauses.
7. How long we keep it
Account data: while your account exists. After you delete your account we remove it, except data we must keep by law.
Server logs: up to 90 days.
Analytics data: up to 14 months.
8. Your rights
You have the right to access your data, correct it, delete it, limit its use, move it to another service and object to its use. Where we rely on consent, you can withdraw it at any time.
To use a right, write to [email protected]. We answer within one month.
You can also complain to the data protection authority. In Poland it is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.
9. Changes
If we change this policy we will update the date at the top. If the change is important, we will tell you by email.