1. Who controls your data
NEOLAB, the publisher of RenderPatch, is the data controller for the personal data described in this policy. You can contact us at contact@renderpatch.io or by post at 21 rue Anatole France, 94270 Le Kremlin-Bicêtre, France.
2. Your media stays local
RenderPatch processes the master files and patch media you select on your own computer. The web account and licensing services do not upload those media files to RenderPatch, Supabase, Stripe or Vercel.
Technical logs you deliberately send to support may contain file names, system information or excerpts you choose to share. Review them before sending if they concern confidential productions.
3. Data we process
| Purpose | Typical data | Legal basis |
|---|---|---|
| Account and authentication | Email, name, provider ID, session and security records | Contract and account security |
| Subscriptions and billing | Plan, Stripe customer/subscription IDs, invoices and status | Contract and legal obligations |
| Desktop licensing | Device label, machine identifier, activation and last-seen dates | Contract and fraud prevention |
| Support and security | Messages, diagnostics you provide, IP and request metadata | Contract and legitimate interests |
| Optional measurement | Page views, device/browser information and campaign events | Your consent |
We do not receive or store complete payment-card details. Stripe collects and processes those details directly during checkout.
4. Service providers
We use a limited set of providers to operate RenderPatch:
- Supabase for authentication, account data, licensing records and protected downloads.
- Stripe for checkout, subscriptions, invoices, payment status and customer billing tools.
- Vercel for website hosting, delivery and technical request logs.
- Google when you choose Google sign-in, and for analytics only after optional consent and configuration.
- Meta only if the optional advertising measurement integration is configured and you consent to marketing cookies.
Providers may process data outside the European Economic Area. Where required, we rely on contractual safeguards and the transfer mechanisms made available by the relevant provider.
5. Retention
- Account and license data is kept while the account is active and is then deleted or anonymized, subject to the limited records we must retain.
- Invoices and accounting evidence may be retained for up to ten years to meet French legal and tax obligations.
- Support messages and security records are retained only as long as needed to resolve the request, protect the service and establish legal claims.
- Optional analytics and marketing retention follows the settings of the relevant provider and your ability to withdraw consent.
6. Your rights
Depending on the processing and your location, you may request access, correction, deletion, restriction, objection or portability of your personal data, and withdraw consent at any time. You can delete your account from the dashboard or contact contact@renderpatch.io.
We may ask for information needed to verify the request. You may also submit a complaint to the CNIL, the French data-protection authority.
8. Security and changes
We use access controls, scoped credentials, encrypted transport and provider security features intended to protect account data. No system is completely risk-free; please use a unique password and report suspicious activity promptly.
We may update this policy as RenderPatch or its providers evolve. The date at the top identifies the current version. Material changes will be highlighted through the service when appropriate.