Legal
Privacy Policy
Effective October 25, 2026 · Last updated October 25, 2026
Introduction
Rends ("we", "us", or "our") operates the rends.ai platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. We are committed to protecting your privacy and handling your data with transparency. By using the Service, you agree to the collection and use of information in accordance with this policy.
Information we collect
We collect information you provide directly: account registration details (name, email, organization), billing information processed through Stripe, and communications you send us. We also collect information automatically: log data (IP address, browser type, pages visited), page-view and page-performance measurements through Cloudflare Web Analytics, which sets no cookies, and cookies necessary for authentication and preferences. When you connect AI agents to the platform, we process metadata about agent configurations, governance policies, and compliance artifacts. We do not access or store the content your agents process unless explicitly configured by you.
How we use your information
We use your information to: provide, maintain, and improve the Service; process transactions and send billing notifications; send security alerts and product updates; respond to support requests; enforce our Terms of Service; comply with legal obligations; and detect, prevent, and address fraud or abuse. We do not sell your personal information. We do not use your data to train machine learning models.
Data sharing and disclosure
We share information only with: service providers who assist in operating the platform (Stripe for payments; Anthropic and OpenAI for AI analysis powering compliance and product features, under data processing terms; Google Gemini is integrated but not currently active, and receives nothing while no credential is configured; infrastructure providers for hosting; Resend for email delivery; Slack for internal team messaging; Cloudflare for traffic delivery and cookieless web analytics); when required by law, regulation, or legal process; to protect the rights, property, or safety of Rends, our users, or the public; and with your consent. Authentication is handled by our own self-hosted identity service, not a third-party identity provider. All service providers are contractually obligated to protect your data and use it only for the purposes we specify.
AIUC-1 readiness check
The readiness check runs in your browser. We don’t save your answers on Rends’ servers. If you tick the consent box, we email your results to the address you give, from fed@rends.ai through Resend, and post your email address and answers in our team’s Slack so we can follow up. Those copies are kept by Resend and Slack under their own retention. If you don’t tick the box, nothing is sent. We also count how many times the check is started, completed and emailed, and how often the Reserve button is clicked. These are daily totals only; no answers, IP addresses or other identifiers are stored.
Data security
We implement industry-standard security measures including: encryption in transit (TLS 1.2+), separation of each organization’s data in application code, role-based access controls, encrypted off-box backups, and infrastructure hosted on enterprise-grade cloud providers. While no method of transmission or storage is 100% secure, we strive to use commercially acceptable means to protect your data.
Data retention
We retain your data for as long as your account is active or as needed to provide the Service. If you close your account, your data is retained so that you can reactivate; we do not automatically delete it on a fixed schedule. Contact privacy@rends.ai to request removal. Tamper-evident audit records are retained under our legitimate interest in preserving a verifiable compliance history, and some records are retained where required by law (e.g., billing records). Compliance artifacts and audit logs are retained according to the retention policies you configure in the platform.
Your rights
Depending on your jurisdiction, you may have the right to: access, correct, or delete your personal data; object to or restrict processing; data portability; and withdraw consent. To exercise these rights, contact us at privacy@rends.ai. We respond to requests within 30 days. If a request is complex, we may need more time where the law allows, and we will tell you why. EU/EEA residents have additional rights under GDPR; California residents have additional rights under CCPA. Records of data-subject requests are kept after an organisation is deleted; they hold a hashed identifier for the subject and a digest of what was sent, not the underlying personal data.
International data transfers
Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses where required.
Cookies
We use essential cookies for authentication and session management. We do not use analytics cookies: we measure page views and page performance with Cloudflare Web Analytics, which does not use cookies. You can control cookie preferences through your browser settings. The Service functions with only essential cookies enabled.
Children’s privacy
The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.
Changes to this policy
We may update this policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date. Continued use of the Service after changes constitutes acceptance of the revised policy.
Contact us
If you have questions about this Privacy Policy, contact us at privacy@rends.ai or by mail at Rends, Boca Raton, FL 33428.
Questions? Contact us or email privacy@rends.ai