Privacy Policy

Welcome to Renas AI ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered content creation platform at renas.ai (the "Service").

By accessing or using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

We collect information that you provide directly to us, information generated automatically when you use the Service, and information from third-party sources.

Personal Information

When you create an account or use our Service, we may collect:

• Account Information: Name, email address, and password when you register for an account.
• Profile Information: Avatar, display name, and preferences you set in your account settings.
• Payment Information: Billing details processed securely through Stripe. We do not store your full credit card number on our servers.
• Communication Data: Messages and attachments you send through our support ticket system.

Usage Data

We automatically collect certain information when you use the Service:

• Device Information: Browser type, operating system, device identifiers, and screen resolution.
• Log Data: IP address, access times, pages viewed, referring URLs, and actions taken on the platform.
• Usage Patterns: Features used, frequency of use, credit consumption, and subscription activity.

AI Interaction Data

When you use our AI features, we collect:

• Prompts and Inputs: Text prompts, instructions, and configuration settings you provide to our AI tools (text generation, image generation, chat, blog wizard).
• Generated Content: AI-generated text, images, and other outputs created through the Service.
• Chat History: Conversations with AI assistants, including message history and conversation metadata.
• Uploaded Content: Files, images, and documents you upload to the platform for AI processing or asset management.

We use the information we collect for the following purposes:

• Providing the Service: To operate, maintain, and deliver the features and functionality of Renas AI, including AI text generation, image generation, chat, and content management.
• Account Management: To create and manage your account, process subscriptions, track credit usage, and handle billing.
• Improvement: To understand how users interact with our Service, identify areas for improvement, and develop new features.
• Communication: To send you service-related announcements, respond to support tickets, and notify you of updates to our platform or policies.
• Security: To detect, prevent, and address technical issues, fraud, abuse, or other harmful activity.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

Renas AI integrates with multiple third-party AI providers to deliver our services. Understanding how your data is processed by these providers is important to us.

Third-Party AI Providers

When you use our AI features, your prompts and inputs may be sent to the following providers for processing:

• OpenAI — For GPT-based text generation and chat.
• Anthropic — For Claude-based text generation and chat.
• Google AI — For Gemini-based text generation and chat.
• xAI — For Grok-based text generation.

Each provider processes data in accordance with their own privacy policies and data processing agreements. We use API-level access, which means your data is typically not used to train these providers' models.

Data Minimization

We only send the minimum amount of data necessary to the AI provider to fulfill your request. We do not send your account information, payment details, or other personal data to AI providers.

We use trusted third-party services to operate our platform. These services may have access to your information only to perform tasks on our behalf:

• Supabase: Database hosting, user authentication, and file storage. Data is stored securely with encryption at rest.
• Stripe: Payment processing for subscriptions and credit purchases. Stripe handles all payment card data in compliance with PCI DSS.
• Vercel: Application hosting and content delivery network (CDN) for fast, global access to the platform.

We encourage you to review the privacy policies of these third-party services for more information about how they handle your data.

We implement industry-standard security measures to protect your personal information:

• Encryption: All data in transit is encrypted using TLS/SSL. Data at rest is encrypted using AES-256 encryption.
• Authentication: Secure authentication with bcrypt password hashing, session management, and optional social login.
• Access Control: Role-based access control (RBAC) and row-level security (RLS) policies ensure data is only accessible to authorized users.
• Infrastructure: Our infrastructure is hosted on enterprise-grade cloud providers with SOC 2 compliance.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We retain your personal information for as long as your account is active or as needed to provide you with our Service. Specific retention periods include:

• Account Data: Retained while your account is active and for up to 30 days after account deletion to allow for recovery.
• Generated Content: Stored until you delete it or your account is terminated. You may delete individual items at any time.
• Chat History: Retained until you delete conversations or your account is closed.
• Payment Records: Retained for up to 7 years as required by tax and financial regulations.
• Usage Logs: Anonymized and aggregated after 90 days for analytics purposes.

Depending on your location, you may have the following rights regarding your personal information:

For All Users

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Export: Request your data in a portable, machine-readable format.
• Objection: Object to certain processing of your personal data.

GDPR (European Economic Area)

If you are located in the EEA, you have additional rights under the General Data Protection Regulation, including the right to restrict processing, the right to data portability, and the right to lodge a complaint with a supervisory authority.

CCPA (California)

If you are a California resident, you have the right to know what personal information is collected, whether it is sold or disclosed, and to whom. You have the right to opt out of the sale of personal information. We do not sell your personal information.

To exercise any of these rights, please contact us at support@renas.ai.

We use cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device that help us remember your preferences and understand how you use our Service.

For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete that information promptly. If you believe that a child has provided us with personal information, please contact us at support@renas.ai.

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country.

When we transfer your data internationally, we take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy and applicable data protection laws, including the use of Standard Contractual Clauses approved by the European Commission where applicable.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date.

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@renas.ai
• Support: Through the Help Center in your Renas AI dashboard

We will respond to your request within 30 days, or sooner as required by applicable law.