Privacy Policy

1. Introduction

Welcome to RenderDoc ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our document generation API platform and services.

By using RenderDoc, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide to us when you:

• Register for an account (name, email address, company name)
• Sign in using third-party authentication providers (Google, GitHub, Microsoft)
• Use our services (document templates, API keys, billing information)
• Contact us for support (support tickets, feedback)
• Subscribe to our newsletter or marketing communications

2.2 Automatically Collected Information

When you use our services, we automatically collect:

• Usage data (API calls, document generations, feature usage)
• Device information (IP address, browser type, operating system)
• Log data (access times, pages viewed, errors)
• Cookies and tracking technologies

2.3 Document Data

Important: We process the data you send through our API to generate documents. Generated documents are stored temporarily for download and then automatically deleted based on your plan's retention settings (1-3 days). We only retain metadata (template ID, timestamp, document type) for operational purposes.

3. Third-Party Authentication Services (Social Login)

RenderDoc allows you to create an account and sign in using third-party authentication providers. This section describes how we access, use, store, and protect data from these services.

3.1 Google Sign-In

When you choose to sign in with Google, we request access to the following information from your Google account:

• Email address: Used to identify your account and for communication
• Name (display name): Used to personalize your experience
• Profile picture: Used as your avatar in the application (optional)
• Google user ID: Used to link your Google account to your RenderDoc account

Scope requested: profile and email

3.2 GitHub Sign-In

When you choose to sign in with GitHub, we request access to the following information from your GitHub account:

• Email address: Used to identify your account and for communication
• Name/Username: Used to personalize your experience
• Profile picture: Used as your avatar in the application (optional)
• GitHub user ID: Used to link your GitHub account to your RenderDoc account

Scope requested: user:email and read:user

3.3 Microsoft Sign-In

When you choose to sign in with Microsoft, we request access to the following information from your Microsoft account:

• Email address: Used to identify your account and for communication
• Name (display name): Used to personalize your experience
• Microsoft user ID: Used to link your Microsoft account to your RenderDoc account

Scope requested: openid, profile, email, and User.Read

3.4 How We Use Social Login Data

Data obtained through social login is used exclusively for the following purposes:

• Account creation and authentication: To create your RenderDoc account and verify your identity when you sign in
• Profile personalization: To display your name and profile picture within the application
• Communication: To send you important account-related notifications to your email address

We do NOT use your social login data to:

• Access your contacts or social connections
• Post content on your behalf
• Access any data beyond what is explicitly listed above
• Sell or share your data with third parties for advertising purposes

3.5 How We Store Social Login Data

When you authenticate using a social login provider, we store the following information in our secure database:

• The provider name (Google, GitHub, or Microsoft)
• Your unique identifier from that provider
• Your email address and name
• Your profile picture URL (if provided)
• The date and time you connected the account

We do NOT store your password from any social login provider. Authentication is handled securely through OAuth 2.0, and we only receive a token that allows us to verify your identity.

3.6 Sharing of Social Login Data

Your social login data is NOT shared with any third parties except as necessary to provide our services (e.g., cloud hosting providers that store your account data). We do not sell, rent, or trade your social login information.

3.7 Disconnecting Social Login

You can disconnect a social login provider from your RenderDoc account at any time through your account settings. When you disconnect:

• We remove the connection between your RenderDoc account and that provider
• You will no longer be able to sign in using that provider unless you reconnect
• Your RenderDoc account and data remain intact

You can also revoke RenderDoc's access from the provider's side:

• Google: Visit Google Account Permissions
• GitHub: Visit GitHub Authorized Applications
• Microsoft: Visit Microsoft App Access

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your transactions and send billing information
• Send you technical notices, updates, and security alerts
• Respond to your comments, questions, and customer service requests
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues and fraudulent activity
• Comply with legal obligations and enforce our terms

5. How We Share Your Information

We may share your information in the following situations:

5.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Cloud hosting providers (AWS, Cloudflare)
• Payment processors
• Document storage providers
• Analytics services

5.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).

5.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Security

We implement appropriate technical and organizational security measures to protect your information:

• Encryption in transit (TLS/SSL) and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Regular backups and disaster recovery procedures
• Employee training on data protection practices

7. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account Information: Retained while your account is active
• Social Login Data: Retained while your account is active and the social login connection is linked. Deleted when you disconnect the provider or delete your account
• Generated Documents: Retained for 1-3 days based on your plan (configurable)
• Document Metadata: Retained for 90 days for operational purposes
• Billing Records: Retained for 7 years as required by law
• Support Tickets: Retained for 2 years

8. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your personal information
• Restriction: Request restriction of processing

To exercise these rights, please contact us at privacy@renderdoc.dev

9. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our service and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

Types of cookies we use:

• Essential Cookies: Required for the service to function
• Analytics Cookies: Help us understand how you use our service
• Preference Cookies: Remember your settings and preferences

10. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your country. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable law.

11. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us: