Privacy and Cookies

In compliance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDPGDD), and other applicable regulations, we hereby inform you that the data controller responsible for the processing of personal data in connection with the website and services of Renderface is:

Headline: Aleix Gallego BusquetsTrade name: Renderface / Renderface AITax ID Number (NIF/CIF): 47912140NAddress: [DOMICILIO COMPLETO]Email: hello@renderface.comWebsite: www.renderface.com

Hereinafter, the data controller will be referred to as “Renderface.”

The purpose of this Privacy Policy is to inform users about the personal data that may be processed, the purposes and legal bases for such processing, the recipients of the data, the retention periods or criteria, any potential international transfers, the existence of certain analytics, advertising, or profiling activities, and the rights to which users are entitled.

This Privacy Policy applies to the processing of personal data in connection with:

• navigating and using the website;
• the registration and management of user accounts;
• access to and use of the Services;
• the sale and management of subscriptions;
• payment and billing management;
• handling inquiries, issues, and requests;
• contact and lead generation forms;
• newsletters and marketing communications;
• advertising campaigns and recruitment efforts;
• website and Services analytics and measurement;
• communications management and marketing automation;
• the management and analysis of specific social media activities;
• security and fraud prevention; and
• the exercise and defense of the legitimate rights and interests of Renderface.

This Privacy Policy is supplemented by the Cookie Policy, which specifically governs the use of cookies, pixels, tags, and similar technologies used on the website.

Renderface will process personal data in accordance with the principles established in applicable regulations, including the principles of lawfulness, fairness and transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and proactive accountability.

Personal data will be processed only for specific, explicit, and legitimate purposes and will not be further processed in a manner incompatible with those purposes.

Renderface It will ensure that the personal data processed is adequate, relevant, and limited to what is necessary for the relevant purposes, and will take reasonable measures to keep it up to date when necessary.

The data processed will depend on the user's relationship with Renderface and on the Services, features, or channels the user uses.

4.1. Identification and Contact Information

The following may be addressed:

• first and last name;
• email address;
• mailing address;
• city;
• province, state, or region;
• zip code;
• country;
• phone number, when provided; and
• other contact information that the user voluntarily provides.

4.2. Account Information

When a user creates an account, the data necessary for registration, authentication, management, and security may be processed, including:

• name;
• email address;
• credentials or items required for authentication;
• account information;
• subscription plan;
• subscription status;
• account preferences and settings; and
• information related to account activity.

Authentication credentials will be managed using the security mechanisms provided by the technology infrastructure used by Renderface and will not be intentionally stored in plain text when it is not technically necessary.

4.3. Data Related to the Use of the Services

Data related to the use of the platform may be processed, including:

• features used;
• date and time of access;
• account activity;
• configurations made;
• technical information necessary to provide and protect the Services;
• information about issues and errors; and
• information needed to detect fraudulent, abusive, or unauthorized use.

4.4. Prompts and User-Generated Content

Renderface It allows users to configure and generate prompts using a modular builder.

When data entered by the user contains information that directly or indirectly identifies a natural person, such information may constitute personal data and will be processed in accordance with this Privacy Policy.

Renderface It does not require users to provide special categories of personal data in order to use the Services.

Users must avoid entering personal data belonging to third parties when they do not have a valid legal basis for doing so, and must not enter special categories of personal data unless there is a legal basis that permits such processing.

Renderface will process the prompts and the information associated with them only to the extent necessary to provide, maintain, and protect the Services and for the features that are actually available.

4.5. Billing and Subscription Information

The information required for the purchase and management of subscriptions may include first name, last name, or business name; billing address; city; province; state or region; ZIP code; country; and NIF, CIF, VAT ID, or other tax identifier.

In addition, this information may be shared with Lemon Squeezy, a platform that handles the processing and management of subscriptions for Renderface and acts as the Merchant of Record.

The bank or credit card information used to make the payment is entered directly into the corresponding payment platform and is neither requested nor stored directly by Renderface when the payment is made through Lemon Squeezy. The processing of such data by Lemon Squeezy will be governed by its own privacy policy and applicable terms and conditions.

4.6. Data Provided Through Forms and Communications

When a user contacts Renderface via email, contact form, lead generation form, chatbot, social media, or other available channels, the following personal data may be processed:

• first and last name;
• email address;
• phone number, if provided;
• company or professional activity, if provided;
• the content of the inquiry or communication; and
• any other information the user chooses to provide.

4.7. Newsletter and Marketing Data

When a user subscribes to a newsletter, fills out a sign-up form, participates in a campaign, or provides their information to receive communications, their contact information and the information necessary to manage those communications may be processed.

This data may be used to send newsletters, commercial communications, manage campaigns, segment audiences, and automate marketing activities, always in accordance with the applicable legal basis.

The contact information used for these purposes may come from website forms, newsletter subscriptions, recruitment campaigns, and other marketing activities carried out by Renderface.

4.8. Technical and Navigation Data

Depending on the website's configuration and the technologies used, certain technical and browsing data may be processed, including:

• IP address;
• online identifiers;
• browser type and version;
• operating system;
• device used;
• language and regional settings;
• date and time of access;
• pages visited;
• events and interactions that took place;
• reason for the visit;
• information regarding campaigns;
• information about errors and performance; and
• other technical data necessary to ensure the security and proper functioning of the website.

When this data allows for the direct or indirect identification of an individual, it will be treated as personal data in accordance with applicable law.

4.9. Data Related to Advertising Campaigns

Renderface It will be able to carry out advertising campaigns and customer acquisition, measurement, and optimization initiatives through digital advertising platforms and services.

Depending on the campaign and the settings used, data related to user interactions with ads, lead generation forms, or promotional content may be processed, as well as information necessary to measure campaigns, attribute conversions, manage audiences, or carry out remarketing activities.

When these processing activities require consent, they will not be carried out until a valid legal basis has been established in accordance with applicable law.

4.10. Data Related to Communications and Automation

Renderface It may use third-party tools and services to manage conversations, automations, and user-initiated communications through supported channels.

In addition, you can use tools to manage, schedule, analyze, and measure certain activities related to social media and content.

The processing of personal data using these tools will be limited to the data necessary for the corresponding purposes and in accordance with the settings and features actually used by Renderface.

Renderface may process personal data for the following purposes:

5.1. Account Management and Provision of Services

• create and manage accounts;
• authenticate users;
• to provide access to the Services;
• manage the contracted features;
• maintain and improve the platform's performance;
• provide support;
• manage preferences and settings;
• detect and resolve errors;
• ensure safety; and
• to prevent fraudulent, abusive, or unauthorized use.

5.2. Subscription and Payment Management

• manage the procurement of plans;
• manage renewals and cancellations;
• check the status of subscriptions;
• coordinate the payment process with Lemon Squeezy;
• handle payment-related issues;
• process refunds when applicable; and
• maintain the necessary records of the contractual relationship.

5.3. Billing and Tax Obligations

• manage the data needed for billing;
• generate, manage, or provide the information needed for invoices;
• provide Lemon Squeezy with the information necessary for ordering and billing;
• comply with tax, accounting, and commercial obligations; and
• retain the documentation for the periods required by law.

5.4. Customer Service

• answer questions;
• process requests;
• resolve issues;
• provide support;
• handle complaints; and
• maintain the necessary communications related to the Services.

5.5. Commercial Communications

When there is a legal basis that permits it, Renderface may send commercial communications regarding its Services, new features, products, promotions, updates, content, and related activities.

When consent is required, commercial communications will be sent only after the user has provided such consent.

Users may withdraw their consent or unsubscribe from marketing communications at any time.

5.6. Analysis and Improvement of Services

The data may be used for:

• analyze website usage;
• measure the performance of the Services;
• detect errors;
• understand user interaction;
• improve functionality;
• optimize the user experience;
• evaluate recruitment campaigns and channels; and
• perform statistical and aggregate analyses.

5.7. Advertising and Campaign Measurement

When appropriate and where there is a valid legal basis, Renderface may use tools from Google, Meta, and TikTok to:

• measure advertising campaigns;
• attribute conversions;
• create or manage audiences;
• conduct remarketing;
• analyze ad performance; and
• Optimize campaigns.

Technologies that require consent will not be activated until the user has provided the appropriate consent.

5.8. Security and Fraud Prevention

The data may be processed for the following purposes:

• protect the platform;
• detect unauthorized access;
• prevent fraud;
• prevent abuse;
• detect unauthorized automated activities;
• investigate security incidents; and
• to protect the rights, systems, and legitimate interests of Renderface and third parties.

5.9. Compliance with Legal Obligations

Data may be processed when necessary to comply with legal, tax, accounting, administrative, or regulatory obligations.

5.10. Exercise and Protection of Rights

Data may be processed when necessary to establish, exercise, or defend claims, legal actions, or rights of Renderface, the user, or third parties.

Every processing of personal data carried out by Renderface will be based on one of the legal grounds provided for by applicable regulations.

6.1. Performance of a Contract

This legal basis may apply to processing that is necessary for:

• create and manage the account;
• provide the Services;
• manage the subscription;
• manage access to the platform;
• manage payments and renewals;
• provide support related to the Services; and
• fulfill the obligations arising from the contractual relationship.

6.2. Compliance with Legal Obligations

This legal basis will apply when processing is necessary to comply with tax, accounting, commercial, legal, or regulatory obligations.

6.3. Consent

Consent will serve as the legal basis when legally required, including certain processing activities related to:

• business communications;
• non-essential cookies;
• tracking technologies;
• personalized advertising;
• certain analytics tools; and
• other purposes for which the regulations require consent.

Consent must be given through an affirmative, specific, informed, and unambiguous act.

The user may withdraw consent at any time, without this affecting the lawfulness of the processing carried out prior to the withdrawal.

6.4. Legitimate Interest

Where applicable, and after conducting the appropriate balancing test, Renderface may base certain processing activities on legitimate interests related to:

• to ensure the security of the Services;
• prevent fraud and misuse;
• maintain and improve the platform;
• manage relationships with users;
• to defend legitimate rights and interests;
• send certain communications related to the Services when legally permissible; and
• maintain the company's operations and security.

When processing is based on a legitimate interest, Renderface will take into account the rights and freedoms of users and allow them to exercise their right to object when appropriate.

The provision of certain personal data will be necessary in order to provide certain Services or to comply with certain legal or contractual obligations.

For example, the information required to create an account will be necessary to manage that account and provide the associated Services.

The information required to process a subscription, manage payment, and issue or manage invoices is necessary to complete the contract and comply with the corresponding legal obligations.

When certain information is required, this will be indicated on the corresponding form or in the registration process.

Failure to provide the necessary information may prevent Renderface from providing the Service, processing the request, completing the contract, or fulfilling the corresponding purpose.

Data requested for purposes based exclusively on consent will not be required to contract for or use the Services when it is not essential for those functions.

Renderface may send commercial communications electronically in accordance with applicable law.

When regulations require prior consent, Renderface will request such consent separately from the acceptance of the Terms and Conditions and the general information on data protection.

When the law permits certain commercial communications to users who have already subscribed to similar services, Renderface may send such communications on the appropriate legal basis, while always providing a simple and free mechanism for users to opt out or unsubscribe.

Each commercial communication shall include, where required, a mechanism that allows the user to opt out of receiving such communications.

Withdrawal of consent or objection to commercial communications will not affect communications necessary for managing the account, subscription, payments, security, or the contracted Services.

Renderface You can use analytics, advertising, and measurement tools to analyze specific interactions with the website and measure the effectiveness of your campaigns.

Where applicable, this processing may involve the creation of advertising segments or audiences and certain forms of profiling for the purposes of measurement, advertising, or personalization.

Technologies used for these purposes that require consent will be subject to the consent management mechanism implemented on the website.

Renderface It will not use personal data to make decisions that produce legal effects or significantly affect the user based solely on automated processing, unless there is a legal basis that permits it and the safeguards established by applicable law are met.

Personal data may be disclosed to or made available to third parties when necessary for the purposes described in this Privacy Policy and in accordance with applicable law.

Recipients may include the following categories:

• infrastructure, hosting, and technology service providers;
• providers of account management, authentication, and platform operations;
• payment processing, subscription, and billing providers;
• email, communications, and customer service providers;
• providers of analytics, measurement, and advertising services;
• social media management and analytics providers;
• providers of professional, administrative, accounting, tax, or legal services;
• public authorities and agencies when there is a legal obligation; and
• courts, tribunals, or other third parties when necessary to exercise or defend rights.

When a supplier acts as a data processor, Renderface will implement the necessary safeguards and enter into the agreements required under applicable law.

When certain third parties act as independent data controllers, their processing activities will also be governed by their own privacy policies and by any applicable terms and conditions.

For certain functions necessary for the operation of the Services, we may use third-party providers that offer technology, infrastructure, hosting, account management, communications, payment, security, analytics, or other ancillary services.

When these providers need to access personal data to provide their services on behalf of Renderface, such access will be carried out in accordance with applicable data protection laws and, where applicable, through the agreements and safeguards required for data processors.

The service providers used may vary depending on the Services, features, and tools available and in use at any given time. The categories of recipients to whom personal data may be disclosed are detailed in Section 10 above, “Recipients of the Data.”

This section applies exclusively to the providers used for the operation and delivery of the Services and does not include external platforms that the user may subsequently use to generate images or other content using prompts created on Renderface.

Depending on the technology providers and services used by Renderface, certain processing of personal data may involve transfers of or access to data from countries outside the European Economic Area.

When a processing operation involves an international transfer of personal data, Renderface will apply the mechanisms and safeguards required by the applicable data protection regulations in each case.

These mechanisms may include, where applicable, adequacy decisions by the European Commission, Standard Contractual Clauses, Binding Corporate Rules, or other mechanisms recognized by applicable law.

Any international data transfers that may occur will depend on the providers and configurations actually used by Renderface at any given time.

In general, Renderface obtains data directly from the user.

However, certain data may come from:

• forms filled out by the user;
• newsletters or subscriptions;
• advertising campaigns;
• lead generation forms provided by advertising platforms;
• interactions with social media or communication tools;
• platforms used to contract the Services; and
• analytics, measurement, and advertising tools, provided their use has been legally authorized.

When personal data is not obtained directly from the user, Renderface will provide the information required by applicable regulations regarding the source of the data, the categories of data, and the corresponding processing, when legally required to do so.

The user must ensure that he or she has a valid legal basis when providing Renderface with personal data regarding third parties.

The user must not provide personal data about third parties without authorization or without another legal basis that legitimizes such processing when it is necessary.

Where applicable, the user is responsible for informing the individuals concerned about the processing of their data.

Personal data will be retained for as long as necessary to fulfill the purposes for which it was collected and, thereafter, for the periods required by law or necessary to address potential liabilities.

Specifically:

Account Information and Services: as long as the account remains active and, thereafter, for the period necessary to comply with legal obligations or address potential liabilities.

Contract, subscription, and billing data: for the periods required by applicable tax, accounting, and commercial regulations.

Support and contact information: for as long as necessary to handle the inquiry, request, or issue, and thereafter, for as long as necessary to address any potential liabilities.

Marketing communications data: for as long as there is a valid legal basis for retaining such communications and, where applicable, until the user withdraws consent or chooses to unsubscribe, without prejudice to the minimum retention period necessary to demonstrate compliance with legal obligations.

Analytics and advertising data: for the periods established by the relevant tools and in accordance with the implemented settings, user preferences, and applicable law.

Once the applicable periods have ended, the data will be deleted or, where appropriate, anonymized.

Renderface will implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk associated with the processing.

These measures are intended to protect personal data against loss, destruction, alteration, unauthorized access, disclosure, or any other unlawful processing.

Security measures shall be determined by taking into account, among other factors, the nature of the data, the existing risks, the state of the art, and the characteristics of the processing operations carried out.

In the event of a personal data breach, Renderface will act in accordance with the obligations set forth in applicable regulations.

Renderface uses Cloudflare Turnstile in Invisible mode, a security service provided by Cloudflare, Inc., which automatically performs verification in the background to protect the website and the Services from bots, automated traffic, abuse, and other malicious activities, without displaying any visual challenges to the user.

To provide this service, Cloudflare may process certain technical signals from the device and connection, including the IP address, TLS fingerprint, User-Agent header, SiteKey, and associated origin. These signals are used to distinguish legitimate users from automated traffic and to detect and block potential malicious activity. Cloudflare states that these signals are not collected for the purpose of identifying, profiling, or targeting users with advertising, but solely to detect and block bots.

With regard to the provision of Turnstile to protect the Renderface website and Services, Cloudflare acts as a data processor, processing such signals on behalf of Renderface and in accordance with its instructions. Furthermore, Cloudflare may act as a data controller with respect to certain signals when it uses them to improve its own bot detection and prevention capabilities.

The processing carried out by Renderface through Turnstile is based, where applicable, on our legitimate interest in ensuring the security of the website and the Services, preventing fraudulent or abusive use, and protecting our systems and services, in accordance with Article 6.1.f of Regulation (EU) 2016/679 (GDPR).

The signals processed by Turnstile are necessary for the security purposes described above. Cloudflare states that the signals collected by Turnstile are strictly necessary for detecting and blocking bots.

For additional information about data processing performed using Turnstile, please refer to Cloudflare's Turnstile Privacy Addendum and Cloudflare's Privacy Policy.

Users may exercise the following rights, where applicable:

• the right of access, to find out whether Renderface processes your data and to obtain a copy of it;
• the right to rectification, to correct inaccurate or incomplete data;
• the right to erasure, to request the deletion of your data when appropriate;
• the right to restrict processing, in the cases provided for by law;
• the right to object, under certain circumstances;
• the right to data portability, where applicable;
• the right to withdraw consent, when the processing is based on consent; and
• the right not to be subject to certain decisions based solely on automated processing, provided that the requirements established by applicable regulations are met.

The exercise of these rights will be free of charge, except in cases provided for by law. To exercise your rights, you may send a request to: hello@renderface.com

The request must specify the right you wish to exercise and may require additional information to verify the applicant's identity when necessary to protect personal data from fraudulent requests.

Renderface It will respond to requests within the time limits established by applicable regulations.

The user has the right to file a complaint with the competent supervisory authority if he or she believes that the processing of his or her personal data violates applicable regulations.

In Spain, the competent supervisory authority is the Spanish Data Protection Agency (AEPD).

The exercise of this right is without prejudice to any other administrative or judicial remedy to which the user may be entitled.

The website Renderface may use cookies, pixels, tags, identifiers, and other similar technologies.

These technologies may be used for:

• to ensure certain technical functionalities;
• to maintain security and prevent fraudulent use;
• analyze website usage;
• measure campaigns and attribute conversions;
• to customize or measure certain advertising activities; and
• to obtain statistical information about the use of the website.

Technologies that require consent will not be activated until the user has provided valid consent through the consent management mechanism implemented on the website.

Users may accept, reject, or configure the various categories of cookies and may subsequently withdraw or modify their consent through the preference management system available on the website.

Detailed information about the cookies and similar technologies used, their purposes, providers, duration, categories, and consent settings can be found at Política de Cookies.

Cloudflare Turnstile: Renderface uses Cloudflare Turnstile as a technical security measure to detect and block automated traffic and malicious activity. The signals used by Turnstile are strictly necessary for this security purpose. For more information about Cloudflare’s processing of this data, please see their Turnstile Privacy Addendum.

Renderface You may maintain profiles or use social media services and communication platforms.

User interactions with these services may be subject to the terms of use and privacy policies of the respective platforms.

When Renderface uses third-party tools to manage, schedule, automate, or analyze content and communications on social media, the data necessary for those purposes may be processed in accordance with the settings and features actually used.

The Renderface website may contain links, references, or features related to third-party services or platforms.

Access to or use of these services may involve the processing of personal data by their respective providers. Such processing will be governed by the terms of use, privacy policies, and settings applicable to each service.

In particular, prompts created through Renderface may be used by the user on external image or content generation platforms, such as Higgsfield, Magnific, ChatGPT, or other similar platforms that the user chooses to use. These platforms are independent of Renderface, and any processing of personal data carried out by them will be the responsibility of their respective providers and will be subject to their own privacy policies and terms of use.

Renderface It does not control the processing of personal data carried out by these platforms as part of their own services.

Renderface's Services are intended exclusively for individuals who are at least 18 years of age.

Therefore, you may not register for, subscribe to, or use the Services if you have not reached that age.

If Renderface becomes aware that a person under the age of 18 has provided personal information to register, subscribe to, or use its Services, it will take appropriate and reasonable measures, including, where applicable, the deletion of such information and the cancellation of the associated account.

Renderface may amend this Privacy Policy when necessary to reflect changes to the Services, the processing of personal data, the providers or tools used, applicable law, or any other relevant circumstances.

The updated version will be permanently available on the website Renderface.

When the changes are significant and required by applicable law, Renderface will notify the user through appropriate channels and, where applicable, will request the necessary consent.

For any questions regarding the processing of personal data, this Privacy Policy, or the exercise of rights, users may contact Renderface via:

Email: hello@renderface.com

You can also use the contact form available in the “Contact” section of the website.

In compliance with the regulations governing information society services and e-commerce, we hereby inform you that the owner of the website Renderface and the services offered through it is:

Headline: Aleix Gallego BusquetsTrade name: Renderface / Renderface AITax ID Number (NIF/CIF): 47912140NAddress: [DOMICILIO COMPLETO]Email: hello@renderface.comWebsite: www.renderface.com

If the owner is listed in a public registry, the legally required registry information shall also be provided.

The purpose of this Legal Notice is to establish the general terms and conditions governing access to and use of the website Renderface.

Renderface It is a Software-as-a-Service (SaaS) platform that provides a modular prompt builder designed to create, structure, and optimize instructions for use in third-party AI-powered image-generation tools and platforms.

The specific terms and conditions governing access to, subscription to, and use of the Services are set forth in the Terms and Conditions section.

Access to the website Renderface is generally free of charge, although certain Services or features may be subject to a subscription and payment in accordance with the applicable terms and conditions.

The user agrees to use the website lawfully, diligently, and in accordance with applicable law, this Legal Notice, and any other applicable terms and policies.

It is prohibited to use the website in any way that could damage, overload, impair, or interfere with its normal operation, or to gain unauthorized access to systems, accounts, data, or restricted areas.

The specific terms and conditions regarding user accounts, subscriptions, payments, use of the Services, prohibited activities, intellectual property, and other aspects of the relationship between Renderface and the user are set forth in the Terms and Conditions section.

The intellectual and industrial property rights to the website and its elements—including its design, structure, code, interface, text, graphics, logos, trade names, and other content—belong to Renderface or their respective owners.

Access to and use of the website do not imply the transfer, assignment, or granting of any intellectual or industrial property rights over such elements, except for the rights of use necessary for their ordinary use.

Unless expressly authorized or permitted by law, the reproduction, distribution, adaptation, public communication, extraction, reuse, or exploitation of these elements is prohibited.

Users' personal data will be processed in accordance with applicable data protection laws and the provisions of the Privacy Policy.

Information regarding the use of cookies and similar technologies is available in the Cookie Policy.

Both policies are available for review at any time on the website.

This Legal Notice shall be governed by and interpreted in accordance with Spanish law, without prejudice to any mandatory provisions that may apply to the user based on the user’s status and place of habitual residence.

For any questions or inquiries regarding the Renderface website, users may contact us via:

RenderfaceAddress: [DOMICILIO COMPLETO]Barcelona, SpainEmail: hello@renderface.comContact form: available in the “Contact” section of the Renderface website www.renderface.com/contacto