Privacy Policy
Effective October 9, 2026 · InDigitual, LLC, Maryland, USA
Effective date: October 9, 2026.
RenderLift is operated by InDigitual, LLC ("RenderLift," "we," "us," "our"), located in Maryland, USA. We are the data controller for the personal information described here. This Privacy Policy explains what we collect, why, the legal bases we rely on, how long we keep it, who we share it with, and the rights you have.
1. Information we collect
Account information: when you sign in with Google or continue as a guest, we receive a user identifier and, for Google sign-in, your name and email address.
Images you upload: the product photos you submit for enhancement, and any photos you add to create marketplace listings.
Generated images and listing content: the enhanced images and draft listing text RenderLift creates for you.
Purchases: records of Lift purchases (package, amount, date, and a Stripe transaction ID). Payment card details are handled by Stripe and are never stored by us.
Connected accounts: if you connect a marketplace account (for example, eBay), we store the connection and an access token so we can act on your behalf when you ask us to. You can disconnect at any time.
Usage and analytics data: if you consent to analytics, basic data about how the app is used (see Section 8). Essential operational logs are always recorded to run and secure the service.
Fraud-prevention signals: to protect free credits from abuse, we process your IP address and a device signal derived from your browser/device, which we store only in hashed (pseudonymized) form (see Section 9).
2. How we use your information, and our legal bases
Where the EU/UK GDPR applies, we rely on the following legal bases (Article 6):
- To provide the service — process your uploads, generate enhanced images and listings, store your work, and (when you ask) publish to a connected marketplace: performance of our contract with you.
- To process payments and maintain your Lift balance and transaction history: performance of our contract, and compliance with a legal obligation for the resulting financial records.
- To secure the service, prevent abuse and fraud (including the device signals in Section 9), and provide support: our legitimate interests in keeping RenderLift safe and available.
- Analytics to understand and improve RenderLift: your consent, which you can give or withdraw at any time (Section 8).
- To comply with law and enforce our terms: compliance with a legal obligation and our legitimate interests.
We do not sell your personal information or your images, and we do not use them to train third parties' general-purpose AI models.
3. How your images are processed (third parties)
To generate your results, RenderLift sends your uploaded image to trusted third-party processors:
- Google Cloud AI services — AI image enhancement and product/listing identification.
- Photoroom — background removal for transparent images.
We also use Google Firebase for authentication, image storage, database, and hosting, Stripe for payments, and marketplace APIs (such as eBay) when you connect an account and ask us to look up prices or publish a listing. These providers process your data only to perform their service for us, under contract.
4. International data transfers
We operate from the United States, and our providers (including Google, Stripe, and Photoroom) may process your data in the United States and other countries. If you are in the European Economic Area, the United Kingdom, or Switzerland, your data may be transferred outside your country. Where it is, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework — to protect it. You can contact us for more information about these safeguards.
5. Storage and retention
We keep personal data only as long as needed for the purposes above:
- Uploaded images, generated images, and listings you have NOT saved: automatically deleted 90 days after the work finishes or the batch closes. Items you save, and your account data, are kept until you delete them or delete your account.
- Purchase and transaction records: retained as required by applicable tax and accounting law (typically up to 7 years), even after account deletion.
- Fraud-prevention signals (hashed device/IP data): retained only as long as needed to prevent repeat abuse of free credits.
- Operational logs: retained for a limited period (generally up to 90 days) for security and troubleshooting.
Connected-marketplace access tokens are deleted when you disconnect, when you delete your account, or when the marketplace notifies us of a deletion request.
6. Your rights
Depending on where you live (including under the EU/UK GDPR and U.S. state privacy laws), you have some or all of these rights:
- Access — get a copy of your data. You can download it yourself in the app at Account → Download my data, or ask us.
- Rectification — correct inaccurate data.
- Erasure — delete your account and data yourself at Account → Delete Account, or ask us. Some records (such as transaction records) may be retained where the law requires.
- Portability — receive your data in a portable, machine-readable format (the in-app export provides this).
- Restriction and objection — limit or object to certain processing, including processing based on our legitimate interests.
- Withdraw consent — turn analytics off at any time at Account → Cookie settings; this does not affect processing already carried out.
- Complain — lodge a complaint with your local data protection authority.
To exercise any right, use the in-app controls above or email support@renderlift.com. We will respond as required by law.
7. Payments
Payments are processed by Stripe. We do not collect or store your full payment card number. Stripe's handling of your payment information is governed by Stripe's own privacy policy.
8. Cookies, analytics, and consent
Essential cookies and local storage keep you signed in, maintain your session, and secure the service; these are always active because the app cannot function without them.
Analytics cookies (Google Analytics / Firebase Analytics) help us understand how RenderLift is used so we can improve it. These load only if you consent. When you first visit, we ask you to Accept or Reject; if you reject, or make no choice, no analytics cookies are set. You can change your choice any time at Account → Cookie settings, or via the controls on our website. We do not use third-party advertising cookies.
9. Fraud prevention and device signals
New accounts receive free Lifts. To stop the same person from repeatedly creating accounts to farm free credits, we process your IP address and a device signal derived from your browser and device characteristics. We store these only as salted, one-way hashes (we cannot reverse them to identify your device), and we use them solely to detect and prevent this specific abuse. The legal basis is our legitimate interest in protecting the service; you can object by contacting us, though we may then be unable to offer free credits.
10. Children
RenderLift is not directed to children. In the European Economic Area and the United Kingdom, we do not knowingly collect personal information from children under 16 (or the lower minimum age set by your country, which may be as low as 13). In the United States, we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.
11. Security
We use reasonable administrative and technical measures to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date above and, where appropriate, by notice in the app.
13. Contact
Questions about this policy, or want to exercise a right? Contact us at support@renderlift.com. InDigitual, LLC, Maryland, USA.