Start for free

Privacy Policy

Last updated · August 6, 2026

Introduction

Onix Technologies SRL (“we,” “us,” “our,” or “Company”) operates Rendley (rendley.com), a Video Platform that provides tools for video creation, editing, and publishing, including a web-based editor, SDK, API, and MCP (Model Context Protocol) server (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

This Privacy Policy applies to all users of the Service, including those who interact with Rendley through third-party AI assistants or integrations via our API or MCP server.

1. Information We Collect

1.1 Information You Provide Directly

Personal information you voluntarily provide includes:

  • Account Information: Name and email address at account creation.
  • Authentication Data: Credentials from social sign-in services (e.g., Google, Facebook, Microsoft).
  • Communication: Messages, feedback, or inquiries sent via email or support channels.
  • Payment Information: Subscription and purchase details processed through our third-party payment provider. We do not directly store your payment card numbers.

1.2 User Content

When you use the Service, you may upload, create, or process content including video files, images, audio files, text, project files, and other media (“User Content”). We process and store User Content to provide the Service. This includes media you upload, projects and editing configurations you create, brand assets, prompts and instructions you provide to AI-powered features, AI-generated outputs, and exported files.

1.3 Information Collected Automatically

Information collected automatically during your use of the Service includes:

  • Usage Data: Feature interactions, editing operations, file activities, and session duration for product improvement.
  • Analytics: We use analytics tools to track page views, clicks, feature usage, and interaction metrics for product improvement.
  • Device and Technical Information: Device type, browser information, operating system, screen size, approximate geographic region, and referring URLs.

1.4 Cookies and Tracking Technologies

We use cookies and similar technologies as follows:

  • Essential Cookies: Authentication cookies to maintain your logged-in session. These are strictly necessary and do not require consent.
  • Analytics Cookies: Our analytics tools may use cookies or cookieless tracking methods to collect usage data, depending on your consent preferences.

You can manage your cookie preferences through our cookie consent mechanism. Disabling essential cookies may prevent you from using the Service. For EU/EEA users, non-essential cookies are only activated after you provide consent. A detailed list of the specific cookies we use, including their names, purposes, and durations, is available through our cookie consent banner on the Service.

1.5 Information from API and MCP Integrations

When you access Rendley through our MCP server or API (including through third-party AI assistants):

  • We collect authentication tokens and authorization data necessary to verify your identity and permissions.
  • We receive prompts, instructions, and parameters sent through the API or MCP to execute requested functions.
  • We log request metadata (timestamps, endpoints accessed, response status) and limited diagnostic error information for security, debugging, and usage metering. Operational request logs do not contain full prompts, tool arguments, authentication credentials, or uploaded file contents.
  • We collect only the data necessary to perform the requested function. We do not access or extract data from the AI assistant’s memory, chat history, or conversation context beyond what is explicitly sent to our tools.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Account Management: To create, authenticate, and manage your account.
  • Service Delivery: To operate the Service, process your edits, render and export video content, and provide AI-powered features.
  • AI Processing: To process your prompts and content through third-party AI models in order to generate, edit, or otherwise transform content as you direct.
  • API and MCP Operations: To execute tool calls and workflows initiated through our API or MCP server.
  • Product Improvement: To analyze usage patterns and improve features, performance, and user experience, including through aggregated and de-identified analytics data.
  • Communication: To provide support, respond to inquiries, and send service-related announcements and transactional emails.
  • Security and Compliance: To detect and prevent fraud, unauthorized access, and other security threats, and to comply with legal obligations.
  • Billing: To manage subscriptions, credit balances, usage metering, and payment processing.

3. AI Features and Third-Party AI Providers

3.1 AI-Powered Features

The Service includes AI-powered features that use artificial intelligence models provided by third-party providers to generate, edit, and transform content (“AI Features”). These features may evolve over time as we expand the platform.

3.2 Data Sent to Third-Party AI Providers

When you use AI Features, we transmit your content and/or prompts to third-party AI service providers for processing. The data transmitted may include text prompts and instructions, media files you submit for AI processing (e.g., for background removal, translation, or as reference material), and brand-related assets. We transmit only the minimum data necessary to perform the requested function.

3.3 Third-Party AI Provider Practices

We do not own or operate the AI models used to deliver AI Features. Each third-party AI provider processes data according to its own terms and privacy policy. You are responsible for ensuring that the content you submit to AI Features complies with applicable law and the terms of the underlying AI providers. Content that violates these terms may be flagged or rejected by the provider, and you bear sole responsibility for your requests and the resulting outputs.

3.4 EU AI Act Transparency

In compliance with the EU AI Act (Regulation 2024/1689), we disclose that certain content generated or modified through our Service is produced using artificial intelligence. You are responsible for applying appropriate disclosures when distributing AI-generated content outside the Service, in accordance with applicable law.

4. Data Security

We implement administrative, technical, and physical security measures to protect your personal information and User Content from unauthorized access, alteration, disclosure, or destruction. These measures include encryption for data in transit and at rest, access controls and authentication mechanisms, and regular security reviews.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

We do not sell, trade, or rent your personal information to any third parties.

5. Third-Party Services

5.1 Social Media Authentication

You may authenticate using third-party sign-in providers (e.g., Google, Facebook, Microsoft). During authentication, we access only the information necessary for account creation (name and email). These providers’ own privacy policies govern their data handling.

5.2 Analytics

We use analytics tools to understand how our platform is used so we can improve usability, reliability, and performance. Our analytics tools collect data including: user interactions, clicks, navigation paths, feature usage, and page views; session recordings (anonymized, with personally identifiable information masked); and technical metadata (browser type, operating system, screen size, approximate geographic region).

Analytics data is processed on our behalf by our analytics provider. You may opt out of analytics tracking through our cookie consent mechanism or by contacting us.

5.3 Payment Processing

Payments for subscriptions and credit purchases are processed by a third-party payment provider. When you make a purchase, the payment provider collects and processes your payment information according to its own privacy policy. We receive confirmation of your payment status and transaction identifiers, but we do not directly store or access your payment card numbers.

5.4 Email Communications

We use a third-party email service to send transactional emails (such as account confirmations and service notifications). Your email address and name are shared with this provider for this purpose. Marketing emails are sent only with your explicit opt-in consent and you may unsubscribe at any time.

5.5 AI Service Providers

We use third-party AI service providers as described in Section 3 above. User Content and prompts may be transmitted to these providers to deliver AI-powered features.

5.6 Infrastructure and Hosting

Our Service infrastructure, including application servers and object storage, is hosted within the European Union. User Content and data are stored on servers located in the EU.

5.7 Stock Media Providers

The Service integrates with third-party stock media providers to offer access to stock photos, videos, and GIFs. When you search for stock media, your search queries are transmitted to these providers. Use of stock media is subject to the respective provider’s license terms.

5.8 Cookies

We use cookies for authentication and, with your consent, for analytics purposes. You can manage cookies through your browser settings or our consent mechanism. Disabling authentication cookies may prevent you from using the Service.

6. Cross-Border Data Transfers

Our primary infrastructure is located in the European Union. However, when you use AI-powered features, your data may be transferred to third-party AI providers whose servers are located outside the EU/EEA, including in the United States. Such transfers are made on the basis of Standard Contractual Clauses (SCCs), adequacy decisions where applicable, and your consent to the use of AI Features that require such transfers.

By using AI-powered features, you acknowledge that your content will be processed by third-party providers who may operate servers outside your jurisdiction. You may choose not to use AI-powered features if you do not wish your data to be transferred outside the EU/EEA.

7. Data Retention and Deletion

We retain your personal information and User Content while your account remains active or as necessary to provide the Service. Upon account deletion, we remove:

  • Name, email address, and authentication credentials.
  • Projects, files, editing history, and User Content.
  • AI-generated outputs and conversation history.
  • Brand assets and account-associated data.

7.1 Retention Periods

We apply the following retention periods:

  • Account data (name, email, credentials): Deleted within 30 days of account closure.
  • User Content (projects, media, exports): Deleted within 30 days of account closure.
  • AI-generated outputs and prompts: Deleted within 30 days of account closure. Third-Party AI Providers may retain data according to their own policies.
  • API and MCP operational logs (request metadata and limited diagnostic error information): Retained for up to 90 days for security and debugging purposes, then automatically deleted.
  • Encrypted backups: Data may persist in encrypted backups for up to 30 days after deletion from primary systems, after which it becomes permanently inaccessible.
  • Analytics data: Aggregated and de-identified analytics data may be retained indefinitely for product improvement. This data cannot be used to identify you.
  • Legal and compliance records: Where retention is required by law (e.g., tax records, fraud investigations), relevant data may be retained for the period required by applicable law.

Content you have exported is under your control and is not affected by account deletion.

8. Your Rights and Choices

8.1 General Rights

Depending on your jurisdiction, you may have the right to:

  • Access: Request a copy of the personal information we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your account and associated data.
  • Data Portability: Receive your data in a portable format.
  • Restriction: Request restriction of processing in certain circumstances.
  • Objection: Object to processing based on legitimate interests.
  • Withdraw Consent: Where processing is based on consent, withdraw consent at any time without affecting the lawfulness of prior processing.

8.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the CCPA/CPRA, including the right to know what personal information is collected and how it is used, the right to delete, and the right to opt out of the sale or sharing of personal information. We do not sell your personal information. To exercise your rights, contact us at support@rendley.com.

8.3 EU/EEA Residents (GDPR)

If you are located in the EU or EEA, you have rights under the General Data Protection Regulation (GDPR) as outlined in Section 8.1. You also have the right to lodge a complaint with your local supervisory authority. Our legal bases for processing are described in Section 12.

8.4 Exercising Your Rights

To exercise any of these rights, contact us at support@rendley.com with a clear description of your request. We will respond within 30 days or as required by applicable law.

9. Children’s Privacy

The Service is not directed to children under 13 years of age (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete such information promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@rendley.com.

10. Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay through the email address associated with your Account or via in-product notification. We will also notify the relevant supervisory authority within 72 hours of becoming aware of such a breach, as required by applicable law. The notification will describe the nature of the breach, the likely consequences, and the measures taken or proposed to address it.

11. Automated Decision-Making

We do not use your personal data for automated decision-making or profiling that produces legal effects or similarly significant effects on you. AI Features process content at your direction and do not make autonomous decisions about you. Usage-based rate limiting and fraud detection systems operate on technical metadata and do not constitute profiling under GDPR.

12. Legal Basis for Processing

For users in the EU/EEA and other jurisdictions that require a legal basis for processing, we process your personal information based on:

  • Contractual Necessity: Account creation, authentication, Service delivery (including video editing, rendering, export), AI Feature processing, API/MCP operations, payment processing, and customer support — these are all necessary to perform the contract between you and Rendley.
  • Legitimate Interests: Product analytics and usage tracking (to improve features and performance), security monitoring and fraud prevention, and aggregated/de-identified data analysis. Our legitimate interest in these activities is to maintain and improve a secure, reliable Service. We have assessed that these interests are not overridden by your rights, particularly given the non-sensitive nature of the data processed and the availability of opt-out mechanisms for analytics.
  • Compliance with Legal Obligations: Tax record retention, responding to lawful government requests, and complying with applicable regulations including the EU AI Act.
  • Consent: Non-essential/analytics cookies, marketing email communications, and optional session recordings. You may withdraw consent at any time through our cookie settings, email unsubscribe links, or by contacting us, without affecting the lawfulness of processing performed prior to withdrawal.

13. Categories of Data Processors

We engage the following categories of third-party data processors to help us deliver the Service:

  • Cloud Infrastructure: Hosting and object storage within the EU.
  • AI Service Providers: Third-party AI model providers for AI-powered features.
  • Payment Processing: Subscription and credit purchase processing.
  • Email Services: Transactional and marketing email delivery.
  • Analytics: Product analytics and usage tracking.
  • Video Processing: Serverless compute for video rendering and export.
  • Stock Media: Stock content search and delivery.

Each processor is bound by data processing agreements and is required to implement appropriate security measures. A detailed list of our current sub-processors is available upon request by contacting support@rendley.com.

14. Contact Us

For privacy questions, concerns, data protection inquiries, or to exercise your rights, contact us at:

Email: support@rendley.com

Entity: Onix Technologies SRL, Moldova

We will respond within 30 days or as required by applicable law.

EU/EEA Data Protection Contact

For EU/EEA-specific data protection inquiries, including requests related to your rights under the GDPR, you may contact us at support@rendley.com. We are committed to resolving data protection concerns and will work with appropriate regulatory authorities if we cannot resolve your complaint directly. If you are unsatisfied with our response, you have the right to lodge a complaint with your local supervisory authority.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. Material changes will be posted with an updated date and, where required by law, we will provide additional notice (such as via email or in-product notification). Your continued use of the Service after any modifications constitutes your acceptance of the updated Privacy Policy.

Rendley is committed to being transparent about how we collect and use your data.