Privacy Policy

1. What we collect

Account: your email address, and your name and picture as Google provides them when you sign in.

What you make: your prompts and settings, the files you upload, and the results, together with their prices and status.

Billing: records of your purchases and subscriptions. Payment details are handled by our payment partner; we never see your card.

Technical: your IP address and browser information, used to block automated sign-ups and abuse, and server logs kept for troubleshooting.

Use of the site: the pages you open, what you click, and a recording of how the pages looked and moved while you used them (a session replay), together with steps such as signing up, starting a generation and paying. Everything typed into a field is masked in the recording, and API keys are left out of it. We use this to find what gets in your way and to improve the site. Visitors in the EEA, the UK and Switzerland are not recorded.

2. How we use it

To run the service: to sign you in, make what you ask for, keep your files, charge and refund credits, and answer your questions. We do not sell your data, do not show advertising, and do not use your uploads or results to train AI models.

3. Who processes it for us

Vercel hosts the site. Neon stores the database. Cloudflare stores your files (R2) and checks for bots (Turnstile). fal.ai runs the AI models and passes your prompts and input files to the model you choose. OpenAI answers the agent’s free conversation. Google signs you in and, through Google Ads, measures whether our ads lead to sign-ups and purchases. Amplitude records how the site is used, including session replays, and counts sign-ups, generations and purchases by account. OpenAI also checks prompts and uploaded images against our Acceptable Use Policy. Our payment partner sells subscriptions and credits as the Merchant of Record and processes payments.

Each of them receives only what it needs for its part, under its own privacy terms. Some of them process data outside your country, including in the United States.

4. Cookies

We use one cookie of our own, which keeps you signed in, and a short-lived one that marks a new account for ad measurement. Our payment partner and Cloudflare Turnstile set their own cookies when you pay or when the bot check runs. Google Ads sets cookies that tell us whether one of our ads led to a sign-up or a purchase, with its amount; we do not share your email or files with it. Amplitude keeps an identifier of your browser and of your visit in a cookie and in the browser’s storage, so that one visit can be told from another. Visitors in the EEA, the UK and Switzerland get no advertising or analytics cookies.

5. How long we keep it

Your account data is kept while your account exists. Results of paid accounts are kept until you delete them; results of free accounts are deleted after 30 days. Billing records are kept as long as the law requires.

6. Your rights

You can see and delete your files in Assets. To get a copy of your data, to correct it, or to have your account and data deleted, write to team@getmegabrain.com from the email address of your account. Where the law gives you further rights, such as to object or to complain to a data protection authority, you can use them.

7. Children

RenderHour is not meant for anyone under 18, and we do not knowingly collect their data.

8. Changes and contact

We may update this policy; the date at the top shows the latest version. Questions: team@getmegabrain.com.