Privacy Policy

Data Controller Entity: Rendertz Technologies is the designated Data Controller responsible for the processing of your personal information.

Supervisory Authority: For artists in the United Republic of Tanzania, our processing is governed by the Personal Data Protection Commission (PDPC). For users located in the European Economic Area (EEA) and the United Kingdom, we adhere to the statutory principles of GDPR and UK-GDPR.

Data Protection Officer (DPO): Inquiries regarding our compliance or data protection practices may be directed to our appointed DPO at privacy@rendertz.com.

We collect only the minimum information necessary to provision your account, execute cloud rendering workloads, and maintain financial billing integrity:

• Account & Identity Data: Verified email address, display name, account role, authentication timestamps, and hashed password credentials (secured via enterprise cryptographic key derivation protocols). Phone numbers are collected optionally for SMS render alerts and mobile money payment reconciliation.
• 3D Scene Metadata: File name, archive hash (SHA-256), project label, detected render engine (e.g., Blender Cycles / Eevee), frame ranges, render resolution, sample counts, and camera configurations. We do not inspect the creative geometry of your models except via automated CLI pre-flight validation.
• Compute Telemetry & Flight Records: Worker start/stop timestamps, worker execution seconds, memory usage peaks, log streams, and hardware tier consumed.
• Financial Transaction Data: Token deposit history, ledger balances, and payment processor transaction reference IDs (e.g., M-Pesa receipt code, Stripe token ID). We never capture or store raw credit card numbers or mobile PINs.
• Technical & Network Telemetry: IP address, browser user-agent, operating system, and DCC add-on version strings for security auditing and rate limiting.
• Client Add-on Diagnostic Telemetry: When using the Rendertz After Effects Extension or Blender Add-on, error logs are maintained in an ephemeral in-memory ring buffer (up to 150 lines). Before any crash or user-initiated report is transmitted to our support desk:
  • Personal Access Tokens are automatically masked (rz_pat_[REDACTED]).
  • Local operating system paths are sanitized to mask local usernames (C:\Users\[USER]\...).
  • Raw diagnostic ticket records automatically and permanently expire after 30 days via database TTL.

Under the Tanzania PDPA 2022 (Section 26) and GDPR (Article 6), we process your personal data under the following recognized legal bases:

• Performance of Contract: To provision your account, process uploads, dispatch render workers, meter token balances, and deliver finished image deliverables.
• Legitimate Interests: To detect bot abuse, prevent multi-account promo fraud, ensure network security, and maintain cluster uptime.
• Compliance with Legal Obligations: To maintain mandatory accounting records, comply with tax reporting obligations, and respond to lawful regulatory requests.
• Consent: Where you provide explicit opt-in consent (e.g., receiving platform feature newsletters or marketing spotlights).

Your data is processed strictly for the following operational purposes:

• Provisioning and maintaining your Rendertz Web Studio account;
• Executing high-throughput cloud rendering on headless compute nodes;
• Deducting tokens accurately from your ledger based on verified compute seconds;
• Notifying you via email or the dashboard when render batches complete;
• Diagnosing worker crashes and refunding tokens in the event of hardware faults;
• Protecting the compute fleet against crypto-mining, denial-of-service, or brute-force attacks.

Rendertz guarantees that your uploaded 3D scene files (.blend, archives, textures, shaders, linked geometry) and your rendered frames (PNG, EXR, MP4, ProRes) are treated as strictly confidential commercial assets.

We do not sell, license, scrape, analyze, or provide your assets to any third party for machine learning, artificial intelligence, neural rendering, or computer vision model training. Compute workers operate in isolated, ephemeral execution containers that are securely destroyed upon job completion.

To provide high-performance cloud compute, we engage trusted enterprise infrastructure subprocessors bound by strict Data Processing Addendums (DPAs):

• Enterprise Cloud Infrastructure & Compute Providers: Tier-1 ISO 27001 and SOC 2 Type II certified cloud data centers providing encrypted object storage (Cloud Vault), identity management, automated render farm nodes, and database ledger clusters.
• Regional Telecom & Payment Networks: Authorized mobile money operators (Vodacom M-Pesa, Airtel Money, Tigo Pesa, HaloPesa) and PCI-DSS certified payment processors for secure transaction validation.
• Global Content Delivery Networks (CDN): Edge caching networks and DDoS mitigation infrastructure for accelerated software delivery and low-latency studio connections.

We enforce automated data lifecycles to protect your privacy and maintain cloud hygiene:

• Scene Files & Textures: Irreversibly deleted from our Cloud Vault exactly seven (7) calendar days following upload.
• Render Deliverables & EXRs: Irreversibly deleted from the Output Gallery exactly seven (7) calendar days following render completion.
• Account Profile Data: Retained for the active duration of your account. When you delete your account, your profile is permanently erased within 30 days.
• Financial & Ledger Records: Kept for seven (7) years to satisfy mandatory tax compliance and commercial audit obligations.

Rendertz does not use third-party behavioral advertising cookies, cross-site tracking pixels, or commercial data brokers. We utilize only strictly necessary functional cookies and tokens:

• rz_access_token & rz_refresh_token: HttpOnly, secure authentication session tokens;
• rz_sidebar_pinned: Stores your console layout preference;
• nuxt-color-mode: Stores your light/dark theme preference.

Regardless of your country of residence, Rendertz extends full data protection rights to all creators:

• Right of Access: You may request a copy of all personal information and telemetry records associated with your account.
• Right to Rectification: You may update your profile details at any time via Account Settings.
• Right to Erasure (“Right to be Forgotten”): You may request complete account and profile deletion by emailing privacy@rendertz.com.
• Right to Restrict or Object: You may object to any processing conducted under legitimate interest grounds.
• Right to Data Portability: You may export your render transaction ledger and account metadata in structured JSON format.

We implement defense-in-depth technical safeguards to protect your 3D intellectual property:

• End-to-end transport layer security (TLS 1.3) with HSTS enforcement;
• Server-side encryption for all stored files using AES-256;
• Ephemeral compute worker isolation with automatic memory scrubbing;
• Principle of least privilege (PoLP) and strict IAM role separation;
• Automated anti-brute-force rate limiting and disposable email rejection.

Rendertz is a professional commercial rendering platform not intended for children under 13. We do not knowingly collect personal information from children. If we discover an account registered by a child under 13 without verified parental consent, we will terminate the account and purge all associated records immediately.

To exercise any of your data protection rights, or if you have questions regarding this Privacy Policy, please contact our Data Protection Officer: