1. Introduction
Welcome to FastRender.ai ("we," "our," "us," or "Service"). This Privacy Policy explains how FreeForge LLC, a Wyoming limited liability company, collects, uses, discloses, and protects your personal information when you use our AI-powered architectural rendering service.
Our Commitment
We are committed to protecting your privacy and being transparent about our data practices. This policy describes what data we collect, why we collect it, how we use it, and your rights regarding your personal information.
Scope
This Privacy Policy applies to all users of FastRender.ai, including our web application, Rhino 3D plugin, Studio features, and any related services.
Contact Information
- Email: hello@fastrender.ai
- For Privacy-Specific Inquiries: hello@fastrender.ai
- Address: FreeForge LLC, Wyoming, United States
2. Information We Collect
2.1 Personal Information You Provide
Account Registration:
- Email address (required)
- Full name (required)
- Company name (optional)
- Phone number (optional)
- Billing address (required for paid subscriptions)
Authentication:
- Google OAuth credentials (if you choose Google sign-in)
- Password (if you create a direct account)
- Authentication tokens and session information
2.2 User-Generated Content
3D Model Snapshots:
- PNG or JPEG image captures of your 3D models (not the original 3D files)
- These snapshots are sent to our AI generation service to create renders
Text Prompts and Metadata:
- Location inputs, style preferences, material descriptions
- Weather conditions, daytime settings, environment details
- Custom prompts and creative instructions
- Rendering preferences and settings
Reference Images (Temporary Processing):
- Reference images you upload are processed in real-time to enhance AI generation
- Important: We do NOT permanently store your reference images
- Reference images are only held temporarily in memory during the generation process and are immediately deleted after processing
Generated Renders:
- AI-generated images created by our service
- Image metadata (generation parameters, timestamps, associated prompts)
- Stored indefinitely unless you choose to delete them
2.3 Payment Information
All payment processing is handled exclusively by Stripe, our third-party payment processor. We do NOT store:
- Credit card numbers
- Bank account information
- CVV codes or security codes
We do receive from Stripe:
- Payment confirmation status
- Subscription tier information
- Billing cycle dates
- Transaction IDs (for record-keeping)
2.4 Automatically Collected Technical Data
Analytics and Usage Data (via PostHog):
- IP addresses
- Browser type, version, and language
- Device type, operating system, and screen resolution
- Pages visited, features used, and time spent
- Click patterns and navigation paths
- Session duration and frequency of use
- Geographic location (city/country level from IP)
Error and Diagnostic Data (via Sentry):
- Error logs and crash reports
- API request logs and response times
- System performance metrics
- Stack traces and debugging information
Cookies and Tracking Technologies:
- Session Cookies: Essential for login and service functionality
- Analytics Cookies: Track usage patterns and service improvements (PostHog)
- Marketing Cookies: Support our marketing efforts and campaigns
2.5 Rhino Plugin Data
Our Rhino 3D plugin collects:
- Plugin version and update information
- Rendering settings and preferences
- Connection status and authentication tokens
- Error logs for troubleshooting
3. How We Use Your Information
3.1 Service Provision and Improvement
- Core Service Delivery: Process your 3D snapshots and prompts to generate AI-powered renders
- Account Management: Maintain your account, authenticate access, and manage subscriptions
- Feature Enhancement: Analyze usage patterns to improve our service, fix bugs, and develop new features
- Customer Support: Respond to your inquiries, troubleshoot issues, and provide technical assistance
3.2 AI Processing and Third-Party Services
Google Gemini API Integration:
- Your text prompts, 3D snapshots, and reference images are sent to Google's Gemini 2.5 Flash API to generate renders
- Google retains prompts and outputs for up to 55 days for abuse monitoring purposes only
- Important: Google does NOT use your data to train AI models under their paid API terms
- Google may cache data for up to 24 hours for performance optimization
Future AI Services:
We may integrate additional AI services such as:
- Runway, Stability AI, Midjourney for image generation
- Video generation services like Veo 3 and Sora
- Image upscaling and enhancement tools
- When new services are added, we will update this policy and notify you
3.3 AI Model Training (Current and Future)
Current Practice:
We do NOT currently use your data (prompts, images, or renders) to train our own AI models.
Future Plans:
- We plan to use user data for AI model training in the future to improve our services
- You will have the right to opt-out of having your data used for training purposes
- We will provide clear opt-out mechanisms in your account settings
- We will update this policy and notify you before implementing any AI training programs
3.4 Communications
- Service Notifications: Account updates, subscription changes, and technical notices
- Marketing Communications: Product updates, new features, and promotional offers
- You can opt-out of marketing emails at any time by clicking "unsubscribe" or updating your preferences
3.5 Legal and Security Purposes
- Detect, prevent, and address fraud, security threats, and technical issues
- Enforce our Terms of Service and investigate violations
- Comply with legal obligations, court orders, and regulatory requirements
- Protect our rights, property, and safety, and that of our users
4. Information Sharing and Disclosure
4.1 Third-Party Service Providers
We share your information with carefully selected service providers who help us operate FastRender.ai:
AI and Processing Services:
- Google Gemini API – AI image generation (text prompts, 3D snapshots, reference images)
- Future AI Providers – Runway, Stability AI, Midjourney, Veo 3, Sora, and others (as implemented)
Infrastructure and Hosting:
- AWS S3 (US Region) – Generated image storage
- CloudFront (AWS CDN) – Content delivery
- Neon.com (US Region) – PostgreSQL database hosting
- Railway – API server hosting
- Vercel – Web application hosting
Authentication and Security:
- Better-Auth – Custom authentication library
- Google OAuth – Social sign-in service
Payment Processing:
- Stripe – All payment processing, billing, and subscription management
Analytics and Monitoring:
- PostHog – Product analytics and user behavior tracking
- Sentry – Error tracking and performance monitoring
Communication:
- Resend – Email delivery service
Data Processing Agreement: These service providers are contractually obligated to protect your data and use it only for the purposes we specify.
4.2 Business Transfers
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred to the successor entity. We will notify you via email and/or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.
4.3 Legal Requirements
We may disclose your information if required to do so by law or in response to:
- Valid legal processes (subpoenas, court orders, search warrants)
- Government or regulatory investigations
- Requests to protect our rights, property, or safety
- Emergencies involving potential threats to personal safety
4.4 With Your Consent
We may share your information with other parties when you explicitly consent to such sharing.
4.5 What We Do NOT Do
- We do NOT sell your personal information to third parties
- We do NOT share your data for third-party advertising purposes
- We do NOT publicly disclose your generated renders without permission
5. Data Storage and Security
5.1 Data Location
Primary Storage Locations:
- United States: AWS S3 (US Region), Neon.com database (US Region), Railway API hosting
- International Transfers: If you access our service from outside the United States, your data will be transferred to and processed in the United States
For EU/UK Users:
- We rely on Standard Contractual Clauses (SCCs) and adequacy decisions for international data transfers
- We implement appropriate safeguards to protect your data in accordance with GDPR requirements
5.2 Security Measures
We implement industry-standard security practices:
Technical Safeguards:
- Encryption in Transit: All data transmitted between your device and our servers uses SSL/TLS encryption
- Encryption at Rest: Data stored in AWS S3 and our database is encrypted at rest
- Secure Authentication: Password hashing with salting using industry-standard algorithms
- Access Controls: Role-based access restrictions to limit internal data access
Password Requirements:
- Minimum 8 characters (required)
- We recommend at least 12-15 characters for enhanced security
- Maximum 64 characters supported
- All printable characters and spaces allowed
- We do NOT require periodic password changes unless there is evidence of compromise
Operational Safeguards:
- Regular security updates to our infrastructure
- Error monitoring and logging through Sentry
- Automated backup systems
Limitations:
- We are a small team and do NOT currently perform formal security audits or penetration testing
- We do NOT currently offer two-factor authentication (2FA)
- We do NOT have a formal incident response plan in place
User Responsibility:
- You are responsible for maintaining the confidentiality of your account credentials
- Use a strong, unique password for your FastRender.ai account
- Notify us immediately if you suspect unauthorized access
5.3 Data Retention
Active Accounts:
- User Account Data: Retained for as long as your account is active
- Generated Images: Stored indefinitely until you delete them or close your account
- Text Prompts and Metadata: Stored alongside generated images until deleted
- Reference Images: NOT stored (deleted immediately after processing)
- Analytics Data: Retained permanently for business intelligence purposes
- Database Backups: Maintained permanently for disaster recovery
Account Deletion:
- When you request account deletion, we delete your personal information immediately
- Generated images and associated data are permanently deleted
- Some data may be retained in encrypted backups for up to 90 days, then permanently deleted
- Analytics data is anonymized and retained for statistical purposes
Legal and Compliance Retention:
We may retain certain information as required by law or for legitimate business purposes (e.g., tax records, dispute resolution).
6. Your Rights and Choices
6.1 Access and Control
Account Management:
- Access Your Data: View and download your personal information and generated images
- Update Information: Modify your profile, email, and preferences at any time
- Delete Content: Remove specific images or projects from your account
- Export Data: Download all your data in a portable format
- Delete Account: Permanently close your account and delete all associated data
Marketing Preferences:
- Opt-out of marketing emails via the "unsubscribe" link in any marketing email
- Update email preferences in your account settings
6.2 Regional Privacy Rights
For California Residents (CCPA/CPRA):
You have the right to:
- Know: Request disclosure of the categories and specific pieces of personal information we collect
- Delete: Request deletion of your personal information (with certain exceptions)
- Correct: Request correction of inaccurate personal information
- Opt-Out: Opt-out of the "sale" or "sharing" of personal information (we do not sell or share)
- Limit Use of Sensitive Information: Request limits on use of sensitive personal information
- Non-Discrimination: Not receive discriminatory treatment for exercising your rights
For EU/UK Residents (GDPR/UK GDPR):
You have the right to:
- Access: Obtain a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure ("Right to be Forgotten"): Request deletion of your data in certain circumstances
- Restrict Processing: Limit how we use your data
- Data Portability: Receive your data in a structured, machine-readable format
- Object: Object to processing based on legitimate interests or for direct marketing
- Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
- Lodge a Complaint: File a complaint with your local data protection authority
Note on EU/UK Service:
- We do NOT have a European representative or local data processing infrastructure
- By using our service from the EU/UK, you acknowledge that your data will be processed in the United States
- We implement appropriate safeguards including Standard Contractual Clauses
For Other US States:
Many US states have enacted privacy laws (Colorado, Connecticut, Virginia, Utah, Montana, Oregon, Texas, Delaware, Iowa, Indiana, Tennessee, and others). If you reside in a state with a comprehensive privacy law, you may have rights similar to those described under CCPA.
6.3 Exercising Your Rights
How to Make a Request:
- Email us at hello@fastrender.ai with the subject line "Privacy Rights Request"
- Include your name, email address, and specific request
- Provide sufficient information to verify your identity
Response Time:
- We will respond to verified requests within 30 days (or as required by applicable law)
- We may extend the response period by an additional 30 days with notice
Verification Process:
- We will verify your identity before processing requests to protect your privacy
- We may request additional information to confirm your identity
8. Children's Privacy
8.1 Age Requirements
Minimum Age:
- We do not have a specific minimum age requirement for using FastRender.ai
- However, users must be capable of forming a binding contract
Children Under 13 (COPPA Compliance):
- We do NOT knowingly collect personal information from children under 13
- Our service is NOT directed at children under 13
- If we learn we have collected information from a child under 13, we will delete it immediately
Parental Notice:
- If you believe we have collected information from a child under 13, contact us at hello@fastrender.ai
- We will investigate and delete such information promptly
9. International Data Transfers
9.1 Cross-Border Transfers
Global Service:
- FastRender.ai is a worldwide service accessible to users in any country with internet access
- Your data may be transferred to and processed in the United States
Safeguards:
- We implement Standard Contractual Clauses (SCCs) approved by the European Commission
- We ensure our service providers implement appropriate technical and organizational measures
EU-US and Swiss-US Privacy Shield:
While we do not currently certify under Privacy Shield frameworks, we implement substantially similar protections.
9.2 User Acknowledgment
By using FastRender.ai from outside the United States, you acknowledge and consent to:
- The transfer of your personal information to the United States
- Processing of your data under US law
- The privacy practices described in this policy
10. AI-Specific Privacy Considerations
10.1 Biometric Data
Face and Likeness Processing:
- FastRender.ai is designed primarily for architectural and interior design renders
- We do NOT specifically target or process facial recognition or biometric data
- If your 3D models or reference images contain human faces, those images are processed by AI services
User Responsibility:
- You are solely responsible for ensuring you have proper rights and consents for any images containing people's faces or likenesses
- You must not upload images of people without their consent
- We disclaim all liability for unauthorized use of individuals' likenesses
10.2 AI-Generated Content
Ownership of Outputs:
- You own all rights to the AI-generated renders created using your inputs
- We do not claim any ownership interest in your generated content
Content Authenticity:
- AI-generated content may not be accurate, realistic, or error-free
- We do NOT warrant the accuracy or quality of AI-generated renders
- Users are responsible for verifying and validating AI outputs before use
Third-Party AI Services:
- AI generation is performed by Google Gemini API and potentially other third-party services
- These services have their own data handling practices and terms
- We recommend reviewing Google's Privacy Policy and Terms for Gemini API
10.3 Training and Machine Learning
Future Training Opt-Out:
- When we implement AI training using user data, you will have clear opt-out options
- Opt-out settings will be available in your account dashboard
- Opting out will NOT affect your ability to use our core services
11. Third-Party Links and Services
11.1 External Links
Our service may contain links to third-party websites, services, or resources. We are NOT responsible for:
- Privacy practices of third-party sites
- Content or services provided by external parties
- Data collection by linked websites
Recommendation: Review the privacy policies of any third-party sites you visit.
11.2 Third-Party Integrations
Plugin and Extension Compatibility:
- Our Rhino 3D plugin interfaces with Rhino software, which has its own privacy policy
- We are not responsible for data practices of third-party software
12. Changes to This Privacy Policy
12.1 Updates and Notifications
Policy Updates:
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. Material changes will be communicated via:
- Email notification to your registered email address
- Prominent notice on our website
- In-app notifications
Effective Date:
- Updates become effective on the date indicated at the top of this policy
- Continued use of our service after changes constitute acceptance of the updated policy
Review Recommendations:
- We encourage you to review this policy periodically
- Significant changes will be highlighted in our notification emails
12.2 User Acceptance
Material Changes Requiring Consent:
- For substantial changes that affect your rights, we may require you to accept the updated policy
- Failure to accept may result in inability to access certain features or services
13. Limitation of Liability
13.1 Data Security Disclaimer
Best Efforts:
- While we implement reasonable security measures, no system is completely secure
- We cannot guarantee absolute security of your data
- Internet transmission is inherently insecure, and we cannot ensure security of data in transit
Your Responsibility:
- You are responsible for maintaining the security of your account credentials
- Use our service at your own risk
- We are not liable for unauthorized access resulting from your failure to secure your account
13.2 Service Provider Reliance
Third-Party Dependencies:
- We rely on third-party services (AWS, Neon.com, Railway, Vercel, Stripe, Google, etc.)
- We are not liable for failures, breaches, or issues caused by our service providers
- Users acknowledge the inherent risks of cloud-based services
13.3 Maximum Liability
To the fullest extent permitted by law:
- Our total liability for any claims related to privacy or data security is limited to the amount you paid us in the 12 months preceding the claim
- We are NOT liable for indirect, incidental, consequential, or punitive damages
- Some jurisdictions do not allow liability limitations, so these may not apply to you
14. Contact Us
14.1 Privacy Questions and Requests
General Inquiries:
- Email: hello@fastrender.ai
- Expected Response Time: Within 7 days
Privacy Rights Requests:
- Email: hello@fastrender.ai with subject line "Privacy Rights Request"
- Include: Your name, email, account information, and specific request
Data Protection Inquiries:
- We do NOT currently have a dedicated Data Protection Officer
- All privacy inquiries should be sent to hello@fastrender.ai
Mailing Address:
FreeForge LLC
Wyoming, United States
14.2 Complaints and Concerns
EU/UK Residents:
- You have the right to lodge a complaint with your local data protection authority
- Contact your supervisory authority if you believe we have violated your privacy rights
US Residents:
- You may contact your state attorney general's office with privacy complaints
- California residents can contact the California Attorney General's Office
15. Legal Basis for Processing (GDPR)
For EU/UK users, we process your personal information under the following legal bases:
Contract Performance (Article 6(1)(b) GDPR):
- Processing necessary to provide our service and fulfill our contract with you
- Account management, render generation, and subscription services
Legitimate Interests (Article 6(1)(f) GDPR):
- Service improvement and analytics
- Fraud prevention and security
- Marketing to existing customers (with opt-out rights)
Consent (Article 6(1)(a) GDPR):
- Marketing communications to non-customers
- Optional features and data processing
- AI training (future implementation)
Legal Obligations (Article 6(1)(c) GDPR):
- Compliance with tax and financial regulations
- Responding to legal requests
You have the right to object to processing based on legitimate interests or withdraw consent at any time.
16. Glossary of Terms
- Personal Information:
- Information that identifies, relates to, or could reasonably be linked to you.
- Processing:
- Any operation performed on personal data, including collection, storage, use, and deletion.
- Data Controller:
- The entity that determines the purposes and means of processing personal data (FreeForge LLC).
- Data Processor:
- A third-party that processes personal data on behalf of the controller (our service providers).
- Third Party:
- Any entity other than you and us.
- AI Model Training:
- Using data to teach artificial intelligence systems to improve their performance.
Appendix: Data Processing Summary
Information We Collect
| Data Type | Source | Purpose | Retention |
|---|---|---|---|
| Account Info (email, name) | User Input | Authentication, Communication | Account Lifetime |
| Payment Info | Stripe | Billing, Subscription | Per Stripe Policy |
| 3D Snapshots | Plugin Upload | Render Generation | User Controlled |
| Text Prompts | User Input | Render Generation | User Controlled |
| Reference Images | User Upload | Render Enhancement | NOT Stored |
| Generated Renders | AI Processing | Service Output | User Controlled |
| Analytics Data | PostHog | Service Improvement | Permanent |
| Error Logs | Sentry | Troubleshooting | 90 Days |
Third-Party Services
- Google Gemini API: AI render generation (55-day retention for abuse monitoring)
- Stripe: Payment processing (independent data controller)
- AWS S3 / CloudFront: Image storage and delivery
- Neon.com: Database hosting
- PostHog: Analytics
- Sentry: Error tracking
- Resend: Email delivery
Acknowledgment: By using FastRender.ai, you acknowledge that you have read, understood, and agree to this Privacy Policy.
Version: 1.0
Last Updated: January 30, 2026