This Privacy Policy explains how Creator Hideout LLC, the operator of Renderbuff (“we,” “us,” or “our”), collects, uses, discloses, and retains personal information through our website at https://www.renderbuff.com, creative studio, and related services (the “Service”). It covers visitors, waitlist members, account holders, and people who contact us.
Your studio content is private unless you choose to publish it. We process it with the providers needed to operate the Service. We do not sell personal information, use your private creations to train our own models, or include prompts and media in optional product analytics. Publishing a work makes the selected content available to the public.
See our Terms of Service for the rules governing your account and Content, and the Cookie Policy to manage analytics and referral preferences.
1. Who we are
Creator Hideout LLC is responsible for the personal information we process to operate Renderbuff. Where data protection law uses that term, we act as the controller for this processing. Contact us at admin@creatorhideout.com. Some providers also process information for their own purposes, such as payment fraud prevention or compliance with their legal obligations, under their own privacy notices.
2. Information we collect
We receive information directly from you, automatically when you interact with the Service, and from providers or other users where necessary for the activities below.
Account and communications
We collect your email, account identifier, selected public handle, age confirmation, invitation status, and records of accepted Terms and privacy choices. Email links are used for sign-in; we do not collect an account password. If you send feedback or contact us, we receive your message, the page you sent it from when it is a path on this site, and information needed to address it. Waitlist records include your email, confirmation status, and invitation delivery and acceptance.
Creative content and activity
We process prompts, reference images, video and audio, job settings, generated or upscaled files, thumbnails, file metadata, and job history. We also record actions such as favorites, publishing, deletion, reports, and review requests. Content can include personal information about you or others, including faces or voices. We do not create our own biometric identity database or use faceprints or voiceprints to identify you. Providers process the content needed to perform your chosen task.
Payments, subscriptions, and credits
We receive subscription details, billing contact and address information, tax information where applicable, transaction identifiers, payment status, limited payment-method information, invoices, refunds, and dispute information from you and our payment provider. We keep credit balances, grants, spends, returns, and expiry records. Payment providers collect full payment credentials directly; we do not store full card numbers or card security codes.
Invitations, rewards, and public posts
We record accepted invitations, referral relationships, qualifying subscription and credit-use events, reward claims, and in-app notifications. Your inviter can see referral progress, such as whether a referred account subscribed or qualified for a reward, but the invitation program does not reveal your private creations, payment details, or itemized purchases. For published works, we record and display views, likes, and remix counts.
Device, access, and usage information
We and our hosting providers process IP addresses, approximate country or region, browser and device details, request times, and security or diagnostic records. These support delivery, access restrictions, troubleshooting, and abuse prevention. With your analytics permission, we also collect the limited product and diagnostic events described in section 5.
Safety and support records
Automated checks and authorized reviewers may process prompts, reference media, Outputs, safety decisions, reports, and review notes to prevent misuse, investigate complaints, and apply our policies. Provider decisions and job status information may be returned to us. Relevant content and records may be preserved for a legal obligation, dispute, or investigation.
We do not request precise GPS location, your phone contacts, or government identifiers for ordinary studio use. Do not include unnecessary sensitive personal information in prompts or uploads. If you submit information about someone else, you must have the permissions and legal basis required for that use.
3. How we use information
- Provide the Service: authenticate accounts, manage access, quote and run jobs, process media, deliver downloads, and maintain your gallery.
- Manage purchases: administer subscriptions, payments, credits, refunds, tax records, and payment disputes.
- Support your choices: remember settings, publish work you select, enable remixes, administer invitations and rewards, and manage notifications.
- Communicate with you: send log in links, waitlist confirmations and invitations, service updates, billing or expiry notices, and support responses.
- Protect the Service: detect fraud, apply content and access rules, investigate reports, prevent reward abuse, and protect users and others.
- Maintain and improve reliability: diagnose errors and, when you allow analytics, understand how features are used.
- Meet legal obligations: maintain required records, respond to lawful requests, report unlawful material where required, and establish or defend claims.
We do not use your private prompts, uploads, or Outputs to train our own AI models. Service and model providers process information under the terms applicable to their services, including for delivery and safety. We do not promise that every provider offers zero retention. We may use aggregated or de-identified information that cannot reasonably identify you for analysis and improvement, and will not attempt to reidentify it except as permitted by law to test the de-identification process.
4. Who receives information
We disclose information relevant to the functions below. A provider’s own website or account service may have different data practices from the service it performs for us.
- MachGen: receives prompts, references, settings, and media needed for video, selected image and audio models, and Topaz upscaling. MachGen may use model providers to perform those tasks. See its privacy policy for information about its services and downstream model processing.
- OpenAI: processes prompts and reference images for GPT Image generation or editing and content submitted for safety checks. See OpenAI’s API data controls.
- Google: processes prompts and related request data for Lyria music. See the Gemini API terms and Google Privacy Policy.
- Supabase: provides account authentication and database services for account, job, billing, and other studio records.
- Cloudflare: stores and delivers media through R2 and supports infrastructure and security.
- Vercel: hosts the website and application, including request processing and operational logs.
- Resend: delivers service email using recipient details and message content, such as invitations and credit-expiry notices.
- Stripe and Link: handle payments, billing, fraud prevention, invoices, and disputes. For a purchase sold through Link, Stripe acts as merchant of record and handles transaction support and purchase data under its own terms and privacy notice.
- PostHog: receives limited product events, diagnostic reports, and scrubbed session recordings when you allow analytics. These may include account and browser identifiers, email, device information, selected model or settings, and action or job status. We do not send prompts, uploads, or finished files to PostHog.
Content you publish or share
If you publish a work, anyone can access the public copy, thumbnail, chosen handle, and any prompt or references you elect to share. Other members may reuse the shared material through remixing as described in the Terms. Search engines and other people may index, copy, or retain public content. Unpublishing removes the copy we display; it cannot retract third-party copies or lawful remixes already made.
Legal, safety, and business purposes
We may disclose relevant information to professional advisers, payment partners, providers, affected rights holders, or authorities when reasonably necessary to investigate abuse or complaints, comply with law, protect people or rights, or establish or defend a claim. This may include reporting suspected child sexual abuse material to NCMEC and other appropriate recipients and preserving required evidence. We may share information in connection with a financing, merger, reorganization, or sale of the business, subject to applicable law and appropriate confidentiality protections. A successor remains subject to the applicable privacy obligations; a transaction does not itself authorize unrelated uses of your data.
5. Cookies, device storage, and analytics
Essential cookies support sign-in, invitations, security, and your privacy preferences. Local storage, session storage, and IndexedDB also remember studio preferences and account-specific drafts, including the last prompt, settings, and reference files. The Cookie Policy lists the items, their purposes, and retention. You can clear device storage through your browser, although doing so may sign you out, erase drafts, or reset preferences.
Analytics and optional referral storage are separate choices, both off until you allow them. Accepting a member invitation records that referral on your account; it is separate from optional referral cookies. A cookie alone does not establish eligibility for a reward.
If you allow analytics, PostHog records limited events such as sign-in, quoting, generation, purchases, and selected studio actions, along with diagnostic information and scrubbed session recordings. Text and inputs are masked, and private media is blocked. A PostHog identifier in local storage links events in that browser and, after sign-in, with your account. We do not set advertising or PostHog cookies. We do not include your prompts or media in analytics.
You can withdraw analytics or referral permission on the Cookie Policy page. Disabling analytics stops new optional collection from that browser and removes its stored analytics identifiers. Your choice applies to that browser. You can turn screen capture off on your Profile tab. Essential account, payment, job, security, and legal records continue to be processed independently of optional analytics.
Job-completion notifications are optional and require browser permission. We remember whether this browser has been asked; you can enable notices in Account settings or disable them in browser settings. Notices do not include your prompt and are displayed locally by the open studio. We do not send them through a push service to a phone or another device.
Do Not Track and privacy signals
We do not run interest-based ads, sell personal information, or share it for cross-context behavioral advertising. There is therefore no such sale or sharing for a Global Privacy Control signal to opt out of. We do not otherwise change our processing in response to browser Do Not Track signals. Optional analytics still requires your choice as described above. Providers may collect the request and device information needed for their services; our analytics does not track you across unrelated websites for advertising.
6. Retention and deletion
We keep personal information only as long as reasonably necessary for the purposes described here. Retention depends on the type of information, your account and choices, operational needs, legal requirements, and outstanding disputes or holds.
- Account and creative records: kept while needed to provide your account, gallery, jobs, or support, subject to storage limits and deletion requests. Deleting a work and unpublishing its public copy are separate actions.
- Payments and rewards: kept as needed for accounting, tax, reconciliation, payment disputes, and fraud prevention. Credit expiry does not delete the underlying transaction record.
- Safety records: retained to investigate reports, apply restrictions, address repeat abuse, and meet legal duties. Hidden flagged media may be removed after approximately 7 days unless subject to a legal hold.
- Waitlist, support, and service messages: kept while needed to manage invitations, answer requests, establish what was communicated, and resolve delivery or support issues.
- Session recordings: 30 days.
- Technical and analytics records: retained for the operational, security, or consented analytics purposes for which they were collected, taking account of their age, sensitivity, and continuing usefulness.
- Abuse-prevention records: limited account, payment, or protected email-derived identifiers may remain after closure where reasonably necessary to prevent repeated fraud or reward abuse.
Deletion may take time to complete across active systems, copies, and backups. Information retained only in backups is isolated from ordinary use until overwritten or removed. We may retain information needed for legal obligations, disputes, security, or a lawful preservation request, and use it only for the relevant purposes. Service providers may have separate retention obligations. When information is no longer needed, we delete it or de-identify it.
7. Security
We use access controls, authenticated account access, restricted service credentials, and controlled media links to help protect information. Authorized access may be necessary for support, safety, or operations. No system can guarantee absolute security. Protect your inbox and log in links, avoid sharing private media links, and notify us promptly if you suspect unauthorized access. We will provide legally required notices if a personal information breach occurs.
8. International transfers
We and our providers may process information in the United States, Canada, and other countries where they operate. MachGen also identifies processing in India and other provider locations. Data protection laws may differ from those in your country. The location of one database does not mean all processing stays in that country.
Where European or other applicable law requires safeguards for an international transfer, the relevant processing must be covered by an appropriate mechanism, such as an adequacy decision or applicable standard contractual clauses and UK addendum, together with any required supplementary protections. Contact us for information about the mechanism applicable to your data and how to obtain relevant safeguards. Using the Service does not itself waive protections required by transfer law.
9. Your choices and rights
You can view your work, delete eligible content, unpublish public works, manage subscriptions in Billing, and change optional analytics and referral choices on the Cookie Policy page. Contact admin@creatorhideout.com to correct account information, request a copy of your information, or ask to close your account. Service messages necessary for your account, purchases, or security may continue while relevant. You can stop marketing emails using the unsubscribe link in any marketing email, without signing in. We retain your email and opt-out preference to honor that choice.
Depending on applicable law, you may have rights to access, correct, delete, or receive a portable copy of personal information; restrict or object to processing; withdraw consent; or appeal a decision about a privacy request. These rights are subject to applicable exceptions. We do not discriminate or retaliate against you for exercising a protected privacy right.
We may request information reasonably necessary to verify your identity and authority and locate the relevant records. An authorized agent may submit a request with proof of authority, subject to verification permitted by law. We respond within the period required by applicable law and explain any permitted extension or refusal. Where an appeal right applies, reply to our decision to request a review, or contact your relevant privacy authority. Avoid sending unnecessary sensitive documents with a request.
10. U.S. privacy disclosures
Where applicable state law grants you privacy rights, the categories collected include identifiers and account information; customer and billing records; commercial information; internet and device activity; approximate location; and user content including images, audio, and video. Sources and purposes are described in sections 2 and 3, recipients in section 4, and retention criteria in section 6. These categories also cover information we may have collected in the preceding 12 months, to the extent the Service operated during that period.
We do not sell personal information for money or other valuable consideration, share it for cross-context behavioral advertising, or use sensitive personal information to infer characteristics for advertising. We do not knowingly sell or share information about people under 16. Information you choose to make public is disclosed at your direction. California residents may submit applicable access, correction, deletion, and portability requests using the contact method in section 9.
We do not disclose personal information to third parties for their own direct marketing purposes under California’s “Shine the Light” law. Invitation rewards are optional and subject to their published conditions; they do not require a waiver of privacy rights or fund the sale of your information.
11. European privacy rights and legal bases
Where EEA, UK, or similar data protection law applies, we rely on:
- Contract: information necessary to provide the account, creative tools, purchases, and support you request. Without necessary information, we may be unable to provide those features.
- Legitimate interests: operating a reliable service, preventing fraud and abuse, securing accounts, handling support, and defending claims, where those interests are not overridden by your rights and interests.
- Consent: optional analytics and nonessential referral storage, browser notifications, and other uses for which we request consent. You can withdraw consent without affecting the lawfulness of earlier processing.
- Legal obligations: required accounting, tax, sanctions, safety reporting, and responses to valid legal requests.
You may object to processing based on legitimate interests and request access, correction, erasure, restriction, or portability where applicable. You may complain to the supervisory authority in the country where you live or work or where you believe an infringement occurred. In the UK, this is the Information Commissioner’s Office.
Automated safety or fraud checks may restrict a job or account. You can contact us to contest a decision and request human review where required by law. We do not use your information for advertising profiles or decisions about lending, employment, housing, or similar eligibility.
12. Children
The Service is intended for adults aged 18 or older and is not directed to children. We do not knowingly allow children to create accounts. If you believe a child has provided personal information in violation of this policy, contact us. We will take appropriate steps to remove the information or close the account, subject to any legal requirement to preserve records or report unlawful material. Content involving other people remains subject to our rights and safety rules.
13. Policy updates
We may update this policy to reflect changes in the Service or legal requirements. We will update the effective date and notify you of material changes through the Service or by email, with additional notice or consent where required. A revised policy does not itself authorize a materially incompatible use of previously collected information or replace any consent the law requires.
14. Contact us
For privacy questions, rights requests, or account deletion, contact Creator Hideout LLC at admin@creatorhideout.com. Please identify the account email and describe your request so we can direct it appropriately. Our business mailing address is listed in the Terms.