Legal

Privacy Policy

Last updated: July 15, 2026

Renditions (renditions.app) is operated by EDERA, a French limited liability company (SARL) registered with the Versailles Trade and Companies Register under number 932 318 132, with its registered office at 20 rue Basse, 78730 Saint-Arnoult-en-Yvelines, France (VAT: FR51932318132). EDERA is the data controller for the processing described here. You can reach us at thomas@renditions.app.

Your files

The HTML and ZIP files you upload are processed in an isolated headless browser for the sole purpose of converting them, and are deleted from our servers immediately after the conversion finishes, whether it succeeds or fails. We never read, index, share or train anything on the content of your files. The converted output is streamed back to you and not kept.

Data we collect

Account data: email address, display name and a hashed password, or your name and email from Google if you sign in with Google. Legal basis: performance of a contract.
Usage counters: a daily conversion counter keyed to your account id, or to your IP address when you are not signed in, used to enforce plan limits and prevent abuse. Legal basis: legitimate interest.
Conversion logs: technical metadata about each conversion (file name, size, duration, result, IP address, plan). Used for reliability, capacity planning and abuse prevention. Legal basis: legitimate interest.
Billing data: subscriptions are processed by Stripe. We store your subscription status and Stripe identifiers; your card number never reaches our servers. Legal basis: performance of a contract and legal obligations (invoices are kept for the durations required by French law).
API waitlist: the email address you submit to be notified about the API. Legal basis: consent; one email notification, no marketing list.
Analytics: aggregated audience measurement via Google Analytics 4.

Retention

Uploaded files: deleted immediately after conversion.
Conversion logs: up to 30 days in raw form, aggregated statistics thereafter.
Account data: until you delete your account or ask us to.
Invoicing records: 10 years, as required by French commercial law.

Processors and transfers

We rely on the following processors: Google Cloud (hosting, Belgium region), Neon (database, United States), Stripe (payments), Resend (transactional email) and Google Analytics. Where data is transferred outside the European Economic Area, it is protected by the EU Standard Contractual Clauses or an adequacy decision such as the EU-US Data Privacy Framework.

Cookies

We use a strictly necessary session cookie to keep you signed in, and Google Analytics cookies for audience measurement. We do not run advertising trackers.

Your rights

Under the GDPR you have rights of access, rectification, erasure, portability, restriction and objection over your personal data. Write to thomas@renditions.app and we will respond within one month. You can also lodge a complaint with the French supervisory authority, the CNIL (cnil.fr).

Changes

We will post any change to this policy on this page and update the date above. Material changes will be announced to account holders by email.