Privacy Policy
Last updated: March 2026 · Governed by Indian Law
1. Introduction
D2V Studio ("we," "us," or "our") operates RenderDrop at renderdrop.in. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service.
By using RenderDrop, you consent to the data practices described in this policy. If you do not agree, please do not use the Service.
2. Data We Collect
Account Data: When you sign up, we collect your email address, name, and profile photo via Clerk authentication. For Google Sign-In, this data is provided by Google.
Usage Data: We collect information about how you use the Service — renders submitted, finishes selected, style presets chosen, ratings given. This data is anonymized for analytics.
Uploaded Images: When you upload a SketchUp export or viewport screenshot, it is stored in Cloudflare R2 for processing. Input images are used solely for rendering and are automatically deleted after your render is complete or per your plan's storage lifecycle.
Render Outputs: Generated render images are stored in Cloudflare R2 and retained according to your plan's storage lifetime (7 days for Free, up to 365 days for Studio).
Payment Data: Payment is processed by Razorpay. We do not store your full card details. We receive only a transaction ID, subscription status, and customer ID from Razorpay.
Technical Data: IP address, browser type, device type, and access logs for security and performance purposes.
3. How We Use Your Data
We use collected data to:
- Provide and operate the rendering service
- Process payments and manage subscriptions
- Send transactional emails (render complete, payment confirmation, low credits alerts)
- Improve AI render quality using anonymized feedback (ratings only, never images)
- Detect and prevent fraud, abuse, and security threats
- Comply with legal obligations under Indian law
We do not sell your personal data to third parties. We do not use your render images for AI training without explicit opt-in consent.
4. Data Storage and Security
Database: Account and render metadata is stored on Supabase (PostgreSQL), hosted in a secure cloud environment with encryption at rest and in transit.
File Storage: Uploaded images and render outputs are stored on Cloudflare R2 with access controlled via signed URLs. Files are never publicly accessible without a time-limited signed link.
Authentication: User authentication is handled by Clerk.dev, which implements industry-standard security measures including bcrypt password hashing and JWKS-based JWT verification.
We implement technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.
5. Third-Party Services
We share minimal required data with these trusted service providers:
- Clerk.dev — Authentication provider. Stores your email, name, and password hash.
- Razorpay — Payment processor. Handles all payment card data under PCI-DSS compliance.
- Google Gemini AI — AI rendering. Your uploaded images are sent to Google Gemini API for processing. Google's data processing terms apply for this purpose.
- Cloudflare R2 — File storage. Your images are stored in Cloudflare's infrastructure.
- Resend — Transactional email delivery.
- Sentry — Error monitoring (technical logs only, no personal data).
6. Data Retention
Render outputs are automatically deleted based on your plan's storage lifecycle:
- Free plan: 7 days from render completion
- Starter plan: 30 days from render completion
- Pro plan: 90 days from render completion
- Studio plan: 365 days from render completion
- Student plan: 30 days from render completion
Input images (uploaded SketchUp exports) are deleted immediately after the render job completes or fails.
Account data is retained while your account is active. On account deletion, personal data is removed within 30 days. Anonymized usage data may be retained indefinitely for analytics.
7. Your Rights
Under applicable law, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Object to or restrict processing of your data
- Receive a copy of your data in a portable format
To exercise these rights, contact us at privacy@renderdrop.in. We will respond within 30 days.
8. Cookies
We use essential cookies for authentication session management (via Clerk). We do not use tracking or advertising cookies. You can control cookies through your browser settings, though disabling session cookies will prevent you from using the Service.
9. Children's Privacy
RenderDrop is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from minors.
10. Contact
For privacy inquiries or to exercise your rights:
D2V Studio, Chennai, Tamil Nadu, India