← Back to RenameAI

Privacy Policy

Last updated: May 7, 2026

📋 What Happens to Your Images?

Short answer: You upload them, we send them to third-party AI APIs for processing, you download the renamed files, and we delete your images shortly after.

We do not sell your data, train AI models on your images, or share your images with anyone except the AI providers necessary to process your request (NVIDIA, OpenAI, Google, OpenRouter).

1. Information We Collect

1.1 Information You Provide

  • Account Information: If you create an account, we collect your email address and a password (stored securely using industry-standard hashing).
  • Uploaded Images: The images you upload for renaming. These are processed in real-time and deleted shortly after.
  • Payment Information: If you purchase a paid plan, payment processing is handled by our third-party payment processor. We do not store full credit card numbers.

1.2 Information Collected Automatically

  • Usage Data: Number of images processed, naming styles selected, timestamps, and other anonymized usage metrics.
  • Technical Data: IP address, browser type, operating system, and referring URL (standard web analytics).
  • Cookies: We use essential cookies for authentication and session management. No third-party tracking cookies without your consent.

2. Third-Party AI Processing (Important)

🔍 How Your Images Are Processed

RenameAI is a middleware service. We do not operate our own AI vision models. When you upload an image and select a naming style, here is exactly what happens:

  1. Your image is uploaded to our servers temporarily.
  2. We transmit the image to one or more third-party AI APIs for content analysis (including NVIDIA NIM, OpenAI, Google AI, and/or OpenRouter).
  3. The AI provider analyzes the visual content and returns a descriptive filename suggestion.
  4. We present the generated filename to you for download.
  5. Your original image is deleted from our servers shortly after processing.

⚠️ Third-Party Data Handling

We do not control how third-party AI providers handle your images. Each provider has its own data handling policies, which may include:

  • Temporary storage of your images for processing
  • Use of your inputs for model improvement or training (opt-out may be available)
  • Retention of your data for compliance or abuse monitoring purposes
  • Transfer of data to servers located outside the EEA

We recommend reviewing the privacy policies of our AI providers:

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data under the following legal bases:

  • Contract Performance (Art. 6(1)(b) GDPR): We process your uploaded images and account information as necessary to provide the Service you requested.
  • Legitimate Interests (Art. 6(1)(f) GDPR): We may process usage analytics and technical data to improve our Service, prevent abuse, and ensure security.
  • Consent (Art. 6(1)(a) GDPR): If we use non-essential cookies or send marketing communications, we will obtain your explicit consent first.
  • Legal Obligation (Art. 6(1)(c) GDPR): We may process data to comply with applicable laws and regulations.

4. Data Retention

  • Uploaded Images: Deleted within minutes after processing is complete.
  • Account Information: Retained for the duration of your account. Deleted upon account deletion request.
  • Usage Analytics: Retained in anonymized form indefinitely for service improvement.
  • Payment Records: Retained as required by tax and financial regulations (typically 5-7 years).
  • Backup Copies: May persist in encrypted backups for up to 30 days before automatic deletion.

5. Your Rights (GDPR & Privacy Rights)

You have the following rights regarding your personal data:

Access

Request a copy of the personal data we hold about you.

Rectification

Correct inaccurate or incomplete data.

Erasure

Request deletion of your data ("right to be forgotten").

Restriction

Restrict processing of your data under certain conditions.

Portability

Receive your data in a structured, machine-readable format.

Objection

Object to processing based on legitimate interests.

Withdraw Consent

Withdraw consent at any time where processing is based on consent.

Lodge Complaint

File a complaint with your local data protection authority.

To exercise any of these rights, contact us at privacy@renameai.online. We will respond within 30 days as required by GDPR.

6. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States where many of our third-party AI providers are based.

For users in the EEA, UK, and Switzerland, we ensure appropriate safeguards are in place for such transfers, including:

  • Standard Contractual Clauses (SCCs) adopted by the European Commission, where applicable.
  • Transfer to countries with an Adequacy Decision from the European Commission.
  • Data Processing Agreements (DPAs) with our sub-processors where available.

7. Who We Share Your Data With

We share your data only with:

  • AI Providers: NVIDIA NIM, OpenAI, Google AI, OpenRouter — for image processing (as described in Section 2).
  • Payment Processor: For processing subscription payments (we do not store full card details).
  • Hosting Provider: Vercel Inc. — for hosting the application and storing account data.
  • Law Enforcement: If required by law, court order, or legal process.

We do not sell your personal data to third parties. We do not use your uploaded images for our own AI model training.

8. Security Measures

  • All data transmitted to and from our Service is encrypted using TLS 1.3.
  • Account passwords are hashed using bcrypt with a cost factor of 12.
  • Uploaded images are stored only in memory during processing and are not written to disk.
  • We regularly audit our security practices and dependencies.
  • Access to production systems is restricted and logged.

9. Cookies

We use minimal cookies necessary for the functioning of the Service:

  • Session Cookie: To keep you logged in during your session.
  • Authentication Cookie: To verify your identity for protected routes.

We do not use third-party tracking cookies or advertising cookies. We do not use Google Analytics or similar tracking services.

10. Contact & EU Representative

  • Email: privacy@renameai.online
  • Data Protection Inquiries: dpo@renameai.online
  • EU Representative: Available upon request at privacy@renameai.online

You also have the right to lodge a complaint with your local data protection supervisory authority.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. If we make material changes, we will notify you via email or through the Service.

Terms of Service →Back to Home