Last updated
Privacy policy
How Renderlay uses account information, creative content, payments and support messages.
Contact and responsibility
Renderlay is a project created by Dynamic Things. For privacy questions, account exports or deletion requests, contact support@renderlay.com or use Contact us. The legal information page identifies the project and the business information currently available.
Information we process
We store account names, email addresses, password hashes, sessions, profile settings, models, uploaded images, textures, projects, variants, generation and export jobs, credit transactions and payment references. Community activity, follows, reports, contact requests and support emails are stored when you use those features. Security systems process connection information and rate-limit identifiers. We do not store full payment card numbers.
Why we use it
Information is used to provide accounts and requested tools, save and deliver files, manage payments and credits, respond to support requests, protect accounts and moderate abuse. Where applicable, the basis is performing the service you request, legal obligations, or legitimate interests in operating and securing it. Promotional communications are separate from essential account and payment messages and require the relevant choice.
Public content and privacy settings
Your profile visibility and sharing settings determine which portfolio information is shown. Published listings, public profiles, forum topics and replies can be viewed and indexed by search engines. Shared variants can be visible to other users who have access to their base model. Private projects and source uploads do not automatically become public listings. Review your content and privacy settings before publishing.
AI services and contributor GPUs
Requested AI inputs are sent to the selected available service: Tripo AI, Meshy AI, a Renderlay-operated model or an approved contributor GPU worker. A contributor processes assigned inputs on a computer operated by that contributor; this is not local-only processing on your own device. Avoid confidential or sensitive personal material unless that processing is suitable for your use. Provider and model terms also apply.
Server traffic statistics
Our own server records coarse page-request statistics to understand service use. Analytics records contain normalized page names, referral domains, response status, browser/device/language categories and a daily keyed connection signature. They contain no raw IP address, full browser identifier, search query, account identifier or persistent browser identifier. These records expire after 90 days. Short-lived source logs remain on the server and rotate after seven files. Requests carrying Do Not Track or Global Privacy Control are excluded from these statistics. No advertising or third-party audience tag is loaded.
Infrastructure and external providers
Dedicated infrastructure hosts the application and files. Stripe processes checkout and billing management. Azure Communication Services handles outgoing email, and Cloudflare Email Routing supports incoming support messages. Cloudflare Turnstile protects forms. OpenStreetMap-related map, search and geographic-data services receive requests needed to display or find places. Providers process necessary connection data and content for their roles, potentially in other countries, under their applicable terms.
Retention and deletion
Content is retained while needed to provide the service; available controls let you manage your own models and profile content. Billing, credit, security and moderation records may remain where necessary for accounting, disputes, abuse prevention or legal obligations. There is no single automatic retention period for every data type. Contact support for an account export or deletion review. Active-service removal does not immediately remove backup copies or copies already downloaded by others.
Your choices and rights
You can edit profile information, change visibility and manage shared content. Where applicable law provides them, you may request access, correction, deletion, portability or restriction, object to processing and withdraw consent without affecting prior lawful processing. We may verify account ownership and explain any lawful exception. You may complain to the competent data-protection authority in your country.