This Privacy Policy (the “Policy”) describes how YardRender, Inc. (“YardRender”, “we”, “us”) collects, uses, and discloses information when you access or use the YardRender website, application, and related services (the “Service”). It applies in addition to our Terms of Service. By using the Service, you acknowledge this Policy.
01
Who This Applies To
This Policy applies to visitors to our website, people who create a YardRender account, free-tier and paying customers, and people whose information you upload to the Service (for example, a homeowner whose backyard photo your team uploads).
If you use the Service on behalf of a business, that business is responsible for ensuring the information it uploads — including photos of identifiable people or private property — was collected and shared with us lawfully.
02
Data Controller
YardRender, Inc. is the controller of personal information processed through the Service. For data-protection inquiries contact us at privacy@yardrender.com.
03
What We Collect
Information you give us
- Account data: name, email address, and authentication credentials. If you sign in with Google, we receive the basic profile fields Google returns under our scope (name, email, profile picture, Google account ID).
- Billing data: if you subscribe, your payment is processed by Stripe. We receive a customer ID, the last four digits of your card, card brand, billing country, and invoice metadata. We do not receive or store full payment-card numbers.
- Content you upload: property photos, 3D models, scene settings, project metadata, and the renders the Service produces from them.
- Communications: the contents of messages you send to support, in-app feedback, and survey responses.
Information collected automatically
- Usage and device data: browser type, device type, operating system, language, approximate location derived from IP, pages viewed, features used, render counts, timestamps, and referrer URL.
- Log data: diagnostic logs (errors, request IDs, API timings) that help us run and secure the Service.
- Cookies and similar: see Section 13.
Information from third parties
We may receive limited information from our authentication provider (Google), our payments provider (Stripe), and our infrastructure providers, strictly to operate the corresponding feature.
Sensitive categories
We do not ask for, and you should not upload, special-category personal data (such as health, biometric, religious, or precise-location data). If a photo you upload happens to contain identifiable individuals, you confirm you have the consents required under applicable law.
04
How We Use Information
We use the information described above to:
- provide and operate the Service, including account creation, sign-in, and rendering;
- process payments and manage subscriptions;
- send you transactional and Service-related emails (sign-in confirmations, receipts, security alerts, and material changes to these documents);
- support you when you contact us;
- monitor, debug, secure, and improve the Service;
- protect the rights, safety, and property of YardRender, our customers, and the public;
- comply with our legal obligations and respond to lawful requests; and
- with your consent, send product updates and marketing communications. You can opt out at any time.
We do not train our own AI models on your photos. We do not sell personal information. We do not share personal information with third parties for their own advertising.
05
Legal Bases (EEA / UK)
If you are in the European Economic Area, the United Kingdom, or Switzerland, we process personal information on these legal bases under the GDPR / UK GDPR:
- Performance of a contract — to deliver the Service you signed up for.
- Legitimate interests — to secure, support, and improve the Service, where those interests are not overridden by your rights.
- Legal obligation — to comply with applicable law (for example, tax records).
- Consent — for optional marketing emails, non-essential cookies (where required), and any other processing for which consent is the appropriate basis. You may withdraw consent at any time.
06
How Photos Are Used by AI
Producing a render involves several AI-assisted steps:
- Scene understanding using third-party inference providers to estimate the camera, scene depth, and ground plane from your photo.
- 3D placement and rendering performed in your browser and on our infrastructure.
- Storage of uploaded photos, intermediate artifacts, and final renders in our cloud storage so you can revisit a project.
When we call an inference provider, the relevant image data is transmitted to that provider for the duration of the request. We choose providers whose terms prohibit using customer data to train their models by default, and we configure their APIs accordingly where the option is available. You should still review the providers' own policies (linked in Section 08).
YardRender does not use your photos or renders to train YardRender models. Renders are computed approximations and must not be used as engineering drawings, surveys, or measured plans.
08
Subprocessors
We rely on the following third-party services to operate the Service. Each links to its own privacy policy, which governs its handling of personal data on its side.
- Supabase— authentication, database, and file storage. supabase.com/privacy
- Vercel — web hosting and edge delivery. vercel.com/legal/privacy-policy
- Stripe— payment processing for subscriptions. stripe.com/privacy
- Google — OAuth sign-in. policies.google.com/privacy
- Replicate — hosted AI inference. replicate.com/privacy
- Hugging Face — hosted AI inference. huggingface.co/privacy
We may add or change subprocessors as the Service evolves. Material changes will be reflected in this Policy.
09
International Transfers
YardRender is based in the United States. Our subprocessors may process personal information in the United States and other countries. Where personal information is transferred out of the EEA, UK, or Switzerland to a country that is not subject to an adequacy decision, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and, where relevant, the UK International Data Transfer Addendum.
10
Retention
We keep personal information for as long as your account is active, as needed to provide the Service, and as required to comply with our legal and accounting obligations.
- Account data: retained for the life of the account and deleted within a reasonable period after account closure, subject to legal-retention requirements.
- Your Content (photos, models, renders): retained while it lives in your account; deleted when you delete it from your account, with backup copies aging out within a reasonable period.
- Billing records: retained as long as required by tax and accounting law (typically up to seven years).
- Logs and operational telemetry: typically retained for up to ninety (90) days, longer where needed for security investigations.
11
Your Rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you;
- correct inaccurate information;
- delete information (subject to legal exceptions);
- restrict or object to certain processing;
- receive a portable copy of information you provided to us;
- withdraw consent where processing relies on consent;
- lodge a complaint with your data-protection authority.
To exercise these rights, email privacy@yardrender.com. We will respond within the timeframe required by applicable law. We may need to verify your identity before acting on a request. We will not discriminate against you for exercising a right.
12
U.S. State Privacy Rights
If you are a resident of California, Colorado, Connecticut, Virginia, Utah, or another U.S. state with a comprehensive privacy law, you may have additional rights, including the right to know, delete, correct, and to opt out of sales of personal information and certain profiling.
We do not sell personal information and we do not share personal information for cross-context behavioral advertising. You can exercise your rights by emailing privacy@yardrender.com.
14
Security
We use industry-standard safeguards, including TLS in transit, encryption at rest for stored content, row-level security on our database, and least-privilege access controls. No system is perfectly secure; please use a strong, unique password and enable any available account-protection options.
If we ever experience a security incident that affects your personal information, we will notify you and the relevant regulators as required by law.
15
Children
The Service is not directed to children under 16 and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.
16
Third-Party Sites
The Service may link to third-party sites we do not operate. This Policy does not apply to those sites; please read their privacy policies before using them.
17
Do Not Track
Web browsers and some operating systems may transmit a Do Not Track signal. Because there is no industry consensus on how to respond to those signals, we do not currently change our practices in response. We do not track you across third-party sites for advertising.
18
Changes to This Policy
We may update this Policy from time to time. If we make a material change we will provide reasonable advance notice by email or by posting a notice on the Service. The “Effective” and “Last updated” dates at the top tell you when this Policy last changed. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.
19
Contact
If you have questions about this Policy, contact us: