Privacy Policy

FastRender.ai

Operated by FreeForge LLC

Please read this privacy policy carefully before using our service.

1. Introduction

Welcome to FastRender.ai ("we," "our," "us," or "Service"). This Privacy Policy explains how FreeForge LLC, a Wyoming limited liability company, collects, uses, discloses, and protects your personal information when you use our AI-powered architectural rendering service.

Our Commitment

We are committed to protecting your privacy and being transparent about our data practices. This policy describes what data we collect, why we collect it, how we use it, and your rights regarding your personal information.

Scope

This Privacy Policy applies to all users of FastRender.ai, including our web application, Rhino 3D plugin, Studio features, and any related services.

Contact Information

  • Email: hello@fastrender.ai
  • For Privacy-Specific Inquiries: hello@fastrender.ai
  • Address: FreeForge LLC, Wyoming, United States

2. Information We Collect

2.1 Personal Information You Provide

Account Registration:

  • Email address (required)
  • Full name (required)
  • Company name (optional)
  • Phone number (optional)
  • Billing address (required for paid subscriptions)

Authentication:

  • Google OAuth credentials (if you choose Google sign-in)
  • Password (if you create a direct account)
  • Authentication tokens and session information

2.2 User-Generated Content

3D Model Snapshots:

  • PNG or JPEG image captures of your 3D models (not the original 3D files)
  • These snapshots are sent to our AI generation service to create renders

Text Prompts and Metadata:

  • Location inputs, style preferences, material descriptions
  • Weather conditions, daytime settings, environment details
  • Custom prompts and creative instructions
  • Rendering preferences and settings

Reference Images (Temporary Processing):

  • Reference images you upload are processed in real-time to enhance AI generation
  • Important: We do NOT permanently store your reference images
  • Reference images are only held temporarily in memory during the generation process and are immediately deleted after processing

Generated Renders:

  • AI-generated images created by our service
  • Image metadata (generation parameters, timestamps, associated prompts)
  • Stored indefinitely unless you choose to delete them

2.3 Payment Information

All payment processing is handled exclusively by Stripe, our third-party payment processor. We do NOT store:

  • Credit card numbers
  • Bank account information
  • CVV codes or security codes

We do receive from Stripe:

  • Payment confirmation status
  • Subscription tier information
  • Billing cycle dates
  • Transaction IDs (for record-keeping)

2.4 Automatically Collected Technical Data

Analytics and Usage Data (via PostHog):

  • IP addresses
  • Browser type, version, and language
  • Device type, operating system, and screen resolution
  • Pages visited, features used, and time spent
  • Click patterns and navigation paths
  • Session duration and frequency of use
  • Geographic location (city/country level from IP)

Error and Diagnostic Data (via Sentry):

  • Error logs and crash reports
  • API request logs and response times
  • System performance metrics
  • Stack traces and debugging information

Cookies and Tracking Technologies:

  • Session Cookies: Essential for login and service functionality
  • Analytics Cookies: Track usage patterns and service improvements (PostHog)
  • Marketing Cookies: Support our marketing efforts and campaigns

2.5 Rhino Plugin Data

Our Rhino 3D plugin collects:

  • Plugin version and update information
  • Rendering settings and preferences
  • Connection status and authentication tokens
  • Error logs for troubleshooting

3. How We Use Your Information

3.1 Service Provision and Improvement

  • Core Service Delivery: Process your 3D snapshots and prompts to generate AI-powered renders
  • Account Management: Maintain your account, authenticate access, and manage subscriptions
  • Feature Enhancement: Analyze usage patterns to improve our service, fix bugs, and develop new features
  • Customer Support: Respond to your inquiries, troubleshoot issues, and provide technical assistance

3.2 AI Processing and Third-Party Services

Google Gemini API Integration:

  • Your text prompts, 3D snapshots, and reference images are sent to Google's Gemini 2.5 Flash API to generate renders
  • Google retains prompts and outputs for up to 55 days for abuse monitoring purposes only
  • Important: Google does NOT use your data to train AI models under their paid API terms
  • Google may cache data for up to 24 hours for performance optimization

Future AI Services:

We may integrate additional AI services such as:

  • Runway, Stability AI, Midjourney for image generation
  • Video generation services like Veo 3 and Sora
  • Image upscaling and enhancement tools
  • When new services are added, we will update this policy and notify you

3.3 AI Model Training (Current and Future)

Current Practice:

We do NOT currently use your data (prompts, images, or renders) to train our own AI models.

Future Plans:

  • We plan to use user data for AI model training in the future to improve our services
  • You will have the right to opt-out of having your data used for training purposes
  • We will provide clear opt-out mechanisms in your account settings
  • We will update this policy and notify you before implementing any AI training programs

3.4 Communications

  • Service Notifications: Account updates, subscription changes, and technical notices
  • Marketing Communications: Product updates, new features, and promotional offers
  • You can opt-out of marketing emails at any time by clicking "unsubscribe" or updating your preferences

3.5 Legal and Security Purposes

  • Detect, prevent, and address fraud, security threats, and technical issues
  • Enforce our Terms of Service and investigate violations
  • Comply with legal obligations, court orders, and regulatory requirements
  • Protect our rights, property, and safety, and that of our users

4. Information Sharing and Disclosure

4.1 Third-Party Service Providers

We share your information with carefully selected service providers who help us operate FastRender.ai:

AI and Processing Services:

  • Google Gemini API – AI image generation (text prompts, 3D snapshots, reference images)
  • Future AI Providers – Runway, Stability AI, Midjourney, Veo 3, Sora, and others (as implemented)

Infrastructure and Hosting:

  • AWS S3 (US Region) – Generated image storage
  • CloudFront (AWS CDN) – Content delivery
  • Neon.com (US Region) – PostgreSQL database hosting
  • Railway – API server hosting
  • Vercel – Web application hosting

Authentication and Security:

  • Better-Auth – Custom authentication library
  • Google OAuth – Social sign-in service

Payment Processing:

  • Stripe – All payment processing, billing, and subscription management

Analytics and Monitoring:

  • PostHog – Product analytics and user behavior tracking
  • Sentry – Error tracking and performance monitoring

Communication:

  • Resend – Email delivery service

Data Processing Agreement: These service providers are contractually obligated to protect your data and use it only for the purposes we specify.

4.2 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred to the successor entity. We will notify you via email and/or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

  • Valid legal processes (subpoenas, court orders, search warrants)
  • Government or regulatory investigations
  • Requests to protect our rights, property, or safety
  • Emergencies involving potential threats to personal safety

4.4 With Your Consent

We may share your information with other parties when you explicitly consent to such sharing.

4.5 What We Do NOT Do

  • We do NOT sell your personal information to third parties
  • We do NOT share your data for third-party advertising purposes
  • We do NOT publicly disclose your generated renders without permission

5. Data Storage and Security

5.1 Data Location

Primary Storage Locations:

  • United States: AWS S3 (US Region), Neon.com database (US Region), Railway API hosting
  • International Transfers: If you access our service from outside the United States, your data will be transferred to and processed in the United States

For EU/UK Users:

  • We rely on Standard Contractual Clauses (SCCs) and adequacy decisions for international data transfers
  • We implement appropriate safeguards to protect your data in accordance with GDPR requirements

5.2 Security Measures

We implement industry-standard security practices:

Technical Safeguards:

  • Encryption in Transit: All data transmitted between your device and our servers uses SSL/TLS encryption
  • Encryption at Rest: Data stored in AWS S3 and our database is encrypted at rest
  • Secure Authentication: Password hashing with salting using industry-standard algorithms
  • Access Controls: Role-based access restrictions to limit internal data access

Password Requirements:

  • Minimum 8 characters (required)
  • We recommend at least 12-15 characters for enhanced security
  • Maximum 64 characters supported
  • All printable characters and spaces allowed
  • We do NOT require periodic password changes unless there is evidence of compromise

Operational Safeguards:

  • Regular security updates to our infrastructure
  • Error monitoring and logging through Sentry
  • Automated backup systems

Limitations:

  • We are a small team and do NOT currently perform formal security audits or penetration testing
  • We do NOT currently offer two-factor authentication (2FA)
  • We do NOT have a formal incident response plan in place

User Responsibility:

  • You are responsible for maintaining the confidentiality of your account credentials
  • Use a strong, unique password for your FastRender.ai account
  • Notify us immediately if you suspect unauthorized access

5.3 Data Retention

Active Accounts:

  • User Account Data: Retained for as long as your account is active
  • Generated Images: Stored indefinitely until you delete them or close your account
  • Text Prompts and Metadata: Stored alongside generated images until deleted
  • Reference Images: NOT stored (deleted immediately after processing)
  • Analytics Data: Retained permanently for business intelligence purposes
  • Database Backups: Maintained permanently for disaster recovery

Account Deletion:

  • When you request account deletion, we delete your personal information immediately
  • Generated images and associated data are permanently deleted
  • Some data may be retained in encrypted backups for up to 90 days, then permanently deleted
  • Analytics data is anonymized and retained for statistical purposes

Legal and Compliance Retention:

We may retain certain information as required by law or for legitimate business purposes (e.g., tax records, dispute resolution).

6. Your Rights and Choices

6.1 Access and Control

Account Management:

  • Access Your Data: View and download your personal information and generated images
  • Update Information: Modify your profile, email, and preferences at any time
  • Delete Content: Remove specific images or projects from your account
  • Export Data: Download all your data in a portable format
  • Delete Account: Permanently close your account and delete all associated data

Marketing Preferences:

  • Opt-out of marketing emails via the "unsubscribe" link in any marketing email
  • Update email preferences in your account settings

6.2 Regional Privacy Rights

For California Residents (CCPA/CPRA):

You have the right to:

  1. Know: Request disclosure of the categories and specific pieces of personal information we collect
  2. Delete: Request deletion of your personal information (with certain exceptions)
  3. Correct: Request correction of inaccurate personal information
  4. Opt-Out: Opt-out of the "sale" or "sharing" of personal information (we do not sell or share)
  5. Limit Use of Sensitive Information: Request limits on use of sensitive personal information
  6. Non-Discrimination: Not receive discriminatory treatment for exercising your rights

For EU/UK Residents (GDPR/UK GDPR):

You have the right to:

  1. Access: Obtain a copy of your personal data
  2. Rectification: Correct inaccurate or incomplete data
  3. Erasure ("Right to be Forgotten"): Request deletion of your data in certain circumstances
  4. Restrict Processing: Limit how we use your data
  5. Data Portability: Receive your data in a structured, machine-readable format
  6. Object: Object to processing based on legitimate interests or for direct marketing
  7. Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
  8. Lodge a Complaint: File a complaint with your local data protection authority

Note on EU/UK Service:

  • We do NOT have a European representative or local data processing infrastructure
  • By using our service from the EU/UK, you acknowledge that your data will be processed in the United States
  • We implement appropriate safeguards including Standard Contractual Clauses

For Other US States:

Many US states have enacted privacy laws (Colorado, Connecticut, Virginia, Utah, Montana, Oregon, Texas, Delaware, Iowa, Indiana, Tennessee, and others). If you reside in a state with a comprehensive privacy law, you may have rights similar to those described under CCPA.

6.3 Exercising Your Rights

How to Make a Request:

  • Email us at hello@fastrender.ai with the subject line "Privacy Rights Request"
  • Include your name, email address, and specific request
  • Provide sufficient information to verify your identity

Response Time:

  • We will respond to verified requests within 30 days (or as required by applicable law)
  • We may extend the response period by an additional 30 days with notice

Verification Process:

  • We will verify your identity before processing requests to protect your privacy
  • We may request additional information to confirm your identity

7. Cookies and Tracking Technologies

7.1 Types of Cookies We Use

Essential Cookies:

  • Required for authentication and core service functionality
  • Session management and security
  • Cannot be disabled without affecting service functionality

Analytics Cookies (PostHog):

  • Track user behavior, feature usage, and service performance
  • Help us understand how users interact with our service
  • Used to improve our product and user experience

Marketing Cookies:

  • Support our marketing campaigns
  • Track effectiveness of promotional efforts
  • Help us understand which marketing channels are most effective

7.2 Managing Cookies

Browser Settings:

  • Most browsers allow you to refuse or delete cookies
  • Refer to your browser's help documentation for instructions
  • Disabling essential cookies may prevent you from using our service

Opt-Out:

  • You can opt-out of analytics tracking through your browser settings or privacy extensions
  • PostHog respects "Do Not Track" signals where technically feasible

8. Children's Privacy

8.1 Age Requirements

Minimum Age:

  • We do not have a specific minimum age requirement for using FastRender.ai
  • However, users must be capable of forming a binding contract

Children Under 13 (COPPA Compliance):

  • We do NOT knowingly collect personal information from children under 13
  • Our service is NOT directed at children under 13
  • If we learn we have collected information from a child under 13, we will delete it immediately

Parental Notice:

  • If you believe we have collected information from a child under 13, contact us at hello@fastrender.ai
  • We will investigate and delete such information promptly

9. International Data Transfers

9.1 Cross-Border Transfers

Global Service:

  • FastRender.ai is a worldwide service accessible to users in any country with internet access
  • Your data may be transferred to and processed in the United States

Safeguards:

  • We implement Standard Contractual Clauses (SCCs) approved by the European Commission
  • We ensure our service providers implement appropriate technical and organizational measures

EU-US and Swiss-US Privacy Shield:

While we do not currently certify under Privacy Shield frameworks, we implement substantially similar protections.

9.2 User Acknowledgment

By using FastRender.ai from outside the United States, you acknowledge and consent to:

  • The transfer of your personal information to the United States
  • Processing of your data under US law
  • The privacy practices described in this policy

10. AI-Specific Privacy Considerations

10.1 Biometric Data

Face and Likeness Processing:

  • FastRender.ai is designed primarily for architectural and interior design renders
  • We do NOT specifically target or process facial recognition or biometric data
  • If your 3D models or reference images contain human faces, those images are processed by AI services

User Responsibility:

  • You are solely responsible for ensuring you have proper rights and consents for any images containing people's faces or likenesses
  • You must not upload images of people without their consent
  • We disclaim all liability for unauthorized use of individuals' likenesses

10.2 AI-Generated Content

Ownership of Outputs:

  • You own all rights to the AI-generated renders created using your inputs
  • We do not claim any ownership interest in your generated content

Content Authenticity:

  • AI-generated content may not be accurate, realistic, or error-free
  • We do NOT warrant the accuracy or quality of AI-generated renders
  • Users are responsible for verifying and validating AI outputs before use

Third-Party AI Services:

  • AI generation is performed by Google Gemini API and potentially other third-party services
  • These services have their own data handling practices and terms
  • We recommend reviewing Google's Privacy Policy and Terms for Gemini API

10.3 Training and Machine Learning

Future Training Opt-Out:

  • When we implement AI training using user data, you will have clear opt-out options
  • Opt-out settings will be available in your account dashboard
  • Opting out will NOT affect your ability to use our core services

11. Third-Party Links and Services

11.1 External Links

Our service may contain links to third-party websites, services, or resources. We are NOT responsible for:

  • Privacy practices of third-party sites
  • Content or services provided by external parties
  • Data collection by linked websites

Recommendation: Review the privacy policies of any third-party sites you visit.

11.2 Third-Party Integrations

Plugin and Extension Compatibility:

  • Our Rhino 3D plugin interfaces with Rhino software, which has its own privacy policy
  • We are not responsible for data practices of third-party software

12. Changes to This Privacy Policy

12.1 Updates and Notifications

Policy Updates:

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. Material changes will be communicated via:

  • Email notification to your registered email address
  • Prominent notice on our website
  • In-app notifications

Effective Date:

  • Updates become effective on the date indicated at the top of this policy
  • Continued use of our service after changes constitute acceptance of the updated policy

Review Recommendations:

  • We encourage you to review this policy periodically
  • Significant changes will be highlighted in our notification emails

12.2 User Acceptance

Material Changes Requiring Consent:

  • For substantial changes that affect your rights, we may require you to accept the updated policy
  • Failure to accept may result in inability to access certain features or services

13. Limitation of Liability

13.1 Data Security Disclaimer

Best Efforts:

  • While we implement reasonable security measures, no system is completely secure
  • We cannot guarantee absolute security of your data
  • Internet transmission is inherently insecure, and we cannot ensure security of data in transit

Your Responsibility:

  • You are responsible for maintaining the security of your account credentials
  • Use our service at your own risk
  • We are not liable for unauthorized access resulting from your failure to secure your account

13.2 Service Provider Reliance

Third-Party Dependencies:

  • We rely on third-party services (AWS, Neon.com, Railway, Vercel, Stripe, Google, etc.)
  • We are not liable for failures, breaches, or issues caused by our service providers
  • Users acknowledge the inherent risks of cloud-based services

13.3 Maximum Liability

To the fullest extent permitted by law:

  • Our total liability for any claims related to privacy or data security is limited to the amount you paid us in the 12 months preceding the claim
  • We are NOT liable for indirect, incidental, consequential, or punitive damages
  • Some jurisdictions do not allow liability limitations, so these may not apply to you

14. Contact Us

14.1 Privacy Questions and Requests

General Inquiries:

  • Email: hello@fastrender.ai
  • Expected Response Time: Within 7 days

Privacy Rights Requests:

  • Email: hello@fastrender.ai with subject line "Privacy Rights Request"
  • Include: Your name, email, account information, and specific request

Data Protection Inquiries:

  • We do NOT currently have a dedicated Data Protection Officer
  • All privacy inquiries should be sent to hello@fastrender.ai

Mailing Address:

FreeForge LLC
Wyoming, United States

14.2 Complaints and Concerns

EU/UK Residents:

  • You have the right to lodge a complaint with your local data protection authority
  • Contact your supervisory authority if you believe we have violated your privacy rights

US Residents:

  • You may contact your state attorney general's office with privacy complaints
  • California residents can contact the California Attorney General's Office

16. Glossary of Terms

Personal Information:
Information that identifies, relates to, or could reasonably be linked to you.
Processing:
Any operation performed on personal data, including collection, storage, use, and deletion.
Data Controller:
The entity that determines the purposes and means of processing personal data (FreeForge LLC).
Data Processor:
A third-party that processes personal data on behalf of the controller (our service providers).
Third Party:
Any entity other than you and us.
AI Model Training:
Using data to teach artificial intelligence systems to improve their performance.

Appendix: Data Processing Summary

Information We Collect

Data TypeSourcePurposeRetention
Account Info (email, name)User InputAuthentication, CommunicationAccount Lifetime
Payment InfoStripeBilling, SubscriptionPer Stripe Policy
3D SnapshotsPlugin UploadRender GenerationUser Controlled
Text PromptsUser InputRender GenerationUser Controlled
Reference ImagesUser UploadRender EnhancementNOT Stored
Generated RendersAI ProcessingService OutputUser Controlled
Analytics DataPostHogService ImprovementPermanent
Error LogsSentryTroubleshooting90 Days

Third-Party Services

  • Google Gemini API: AI render generation (55-day retention for abuse monitoring)
  • Stripe: Payment processing (independent data controller)
  • AWS S3 / CloudFront: Image storage and delivery
  • Neon.com: Database hosting
  • PostHog: Analytics
  • Sentry: Error tracking
  • Resend: Email delivery

Acknowledgment: By using FastRender.ai, you acknowledge that you have read, understood, and agree to this Privacy Policy.

Version: 1.0
Last Updated: January 30, 2026