Cordelia Rendershop

Privacy Policy

Cordelia Works, Inc.

Effective date: March 31, 2026

Last updated: March 31, 2026

This Privacy Policy describes how Cordelia Works, Inc. ("Cordelia Works," "we," "us," or "our") collects, uses, and shares information when you use Rendershop and related services (collectively, the "Service"). By using the Service, you agree to the collection and use of information as described in this policy.

1. Information We Collect

1.1 Account Information

When you create an account or join a waitlist, we collect:

  • Email address
  • Name
  • Organization or practice name (if provided)
  • Authentication credentials managed by our identity provider

1.2 Content You Upload

When you use Rendershop, you upload and create content including:

  • Source images -- reference photographs, sketches, line drawings, and other visual material you provide as rendering inputs.
  • Project and scene metadata -- names, descriptions, and organizational structure you assign to your work.
  • Editing instructions -- material selections, surface specifications, lighting preferences, crop regions, style notes, and other design direction you provide through the editing interface.

1.3 Generated Content

The Service produces content on your behalf, including:

  • AI-generated architectural renders derived from your source images and editing instructions.
  • Automated image analysis results (surface detection, material classification, scene properties) used to power the guided editing workflow.

1.4 Usage and Operational Data

We automatically collect:

  • Render job records -- model used, generation parameters (seed, aspect ratio, image size), job status, and token consumption.
  • Edit events -- timestamped records of actions you take within scenes (uploads, renders, edits, deletions) for billing, debugging, and service improvement.
  • Billing events -- feature usage counts used to calculate charges under your plan.
  • Application events -- general interaction data (feature accessed, action type, outcome) for service reliability and product analytics.
  • Server logs -- IP address, browser type, request timestamps, and response codes generated in the normal course of operating the Service.

1.5 Cookies and Session Data

We use session cookies to maintain your authenticated state. We do not use third-party advertising or tracking cookies. We may use minimal analytics tooling to understand aggregate usage patterns.

2. How We Use Your Information

We use the information we collect to:

  • Provide the Service -- process your source images, generate renders, persist your projects and scenes, and deliver results to you.
  • Power AI features -- send your images and editing instructions to AI model providers to generate renders and perform image analysis (see Section 3).
  • Operate and improve -- monitor service health, diagnose errors, analyze usage patterns, and improve product quality.
  • Bill accurately -- track render usage and feature consumption to calculate charges.
  • Communicate with you -- send transactional messages (job completion, account changes) and, with your consent, product updates.
  • Enforce our terms -- detect abuse, enforce usage limits, and protect the security of the Service.

3. Third-Party AI Processing

Rendershop uses third-party AI model providers to generate renders and analyze images. Currently, we use Google Gemini via Google Cloud Vertex AI.

When you initiate a render or analysis job, the following data is transmitted to the AI provider:

  • Your source image (or a cropped region of it).
  • Structured editing instructions (material selections, lighting, surfaces).
  • Material reference swatches (small color/texture images).
  • Text prompts assembled from your editing choices.

What the AI provider returns: generated images and structured analysis data.

Important considerations:

  • We transmit only the minimum data necessary to fulfill your render or analysis request.
  • We do not send your name, email, account information, or project names to AI providers.
  • Google's handling of data sent through Vertex AI is governed by Google's own terms and privacy policies. We encourage you to review Google's current data processing terms for the most up-to-date information.
  • We log request metadata (model, parameters, timestamps, token usage) on our systems for debugging, billing, and quality assurance. Image data in logs is retained temporarily and purged on a rolling basis.

4. How We Store Your Information

  • Projects, scenes, and assets (source images, generated renders, thumbnails, metadata) are stored on our servers. Data is scoped to your authenticated user account and organization.
  • Authentication is managed through WorkOS, a third-party identity provider. WorkOS processes your email and session data under its own privacy policy.
  • We use reasonable technical and organizational measures to protect your data, including access controls, encrypted connections (TLS), and scoped authorization on all API endpoints.

5. Data Retention

  • Your content (projects, scenes, source images, renders) is retained for as long as your account is active or as needed to provide the Service. When you delete a scene, it is archived internally and may be purged after a retention period.
  • Operational logs (render jobs, edit events, billing records) are retained as long as reasonably necessary for billing, debugging, and compliance purposes.
  • Account data is retained until you request deletion of your account.

6. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

  • AI model providers -- as described in Section 3, to fulfill render and analysis requests.
  • Infrastructure and service providers -- hosting, authentication (WorkOS), and other vendors that process data on our behalf under contractual obligations to protect your information.
  • Legal requirements -- if required by law, regulation, legal process, or governmental request.
  • Business transfers -- in connection with a merger, acquisition, or sale of assets, in which case your information would be transferred subject to this policy.
  • With your consent -- in any other circumstance where you have given explicit consent.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

  • Access -- request a copy of the personal information we hold about you.
  • Correction -- request correction of inaccurate personal information.
  • Deletion -- request deletion of your personal information, subject to our retention obligations.
  • Data portability -- request your data in a structured, machine-readable format.
  • Opt out of sale -- we do not sell personal information, but you may contact us to confirm.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days (or sooner if required by applicable law).

California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information. We do not sell or share (as defined by the CCPA) your personal information. You have the right to request disclosure of the categories and specific pieces of personal information we have collected, and the right to request deletion. We will not discriminate against you for exercising your CCPA rights.

8. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 16, we will take steps to delete that information promptly.

9. International Data Transfers

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to such transfer.

10. Security

We implement reasonable administrative, technical, and physical safeguards to protect your information. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the revised policy on our website with an updated effective date. Your continued use of the Service after any changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

Cordelia Works, Inc.

Web: cordeliaworks.com

Email: [email protected]

General inquiries: [email protected]