Privacy Notice

This Privacy Notice explains how Rend handles personal data for the Rend website, hosted dashboard, public APIs, video upload and playback services, edge delivery network, analytics, player, SDKs, documentation, and related services that link to this notice. Rend is operated by Cap Software, Inc., a Delaware corporation. References to "Rend," "we," "us," and "our" mean Cap Software, Inc. acting for the Rend service.

This notice applies to site visitors, account users, customer admins, billing and security contacts, people who contact support or sales, and viewers or other end users who interact with videos, embeds, player experiences, or playback URLs powered by Rend.

Rend provides infrastructure to customers. In many cases, the customer decides what video, metadata, viewer data, and other personal data is submitted to Rend. In those cases, the customer is responsible for its own privacy notices and choices, and Rend processes the data to provide the service.

The personal data we process depends on how you interact with Rend and how a customer configures its use of the service. It may include:

• contact details, such as name, email address, company, role, and communication preferences;
• account details, such as workspace, user, admin, authentication, authorization, dashboard, API key, and session information;
• billing details, such as plan, invoice, subscription, tax, payment status, and payment processor identifiers;
• customer content and metadata, such as uploaded video, audio, captions, thumbnails, asset names, file details, manifests, playback artifacts, webhook payloads, and integration metadata;
• viewer and end-user data, such as IP address, request URL, playback URL, embed page context, browser, device, network, approximate region, timestamps, playback events, request counts, bytes, status codes, cache state, and diagnostic logs;
• support and communications data, such as emails, messages, tickets, feedback, bug reports, call notes, attachments, and related context you provide; and
• security and operational data, such as audit events, abuse signals, rate-limit events, error logs, performance telemetry, and records needed to protect Rend and its users.

Please do not submit protected health information, payment card data, classified information, biometric identifiers, data from children under 13, or other highly regulated data unless we have signed a separate written agreement that expressly allows that use.

We collect personal data directly from you when you visit the website, create an account, use the dashboard or APIs, upload content, configure playback, subscribe to a plan, contact us, or send support information.

We also receive personal data from customers and their applications, from viewers and end users who request or play Rend-powered videos, from service providers that help us operate Rend, and from systems that automatically generate logs, telemetry, analytics, security events, and billing records.

We use personal data to provide, maintain, secure, monitor, support, and improve Rend. This includes account management, authentication, video upload, encoding, packaging, storage, edge delivery, playback, analytics, dashboard features, API operation, customer support, billing, troubleshooting, abuse prevention, legal compliance, product planning, and service communications.

Where data protection laws require a lawful basis, we rely on performance of contract to provide Rend to customers and account users, legitimate interests in operating, securing, improving, and explaining our service, compliance with legal obligations, consent where we ask for it, and other lawful bases available under applicable law.

We do not sell customer content, use Customer Data for third-party advertising, or train general-purpose AI models on Customer Data unless the customer separately agrees. We may use aggregated or de-identified operational data for reporting, product analysis, security, performance measurement, and business planning.

Rend may use cookies, local storage, session tokens, pixels, SDK telemetry, logs, and similar technologies to keep you signed in, operate the dashboard, remember settings, measure site and product usage, diagnose performance, prevent abuse, and understand whether Rend is working as expected.

Customers that embed Rend-powered players or use Rend APIs are responsible for providing any cookie, tracking, consent, or device access notices required for their own websites, applications, and end users.

We disclose personal data only as needed for the purposes described in this notice, as directed by a customer, or as required or permitted by law. Recipient categories may include hosting, storage, networking, DNS, authentication, email, observability, analytics, billing, payment, customer support, security, professional adviser, and legal-compliance providers.

We may disclose personal data to customers and customer admins where the data relates to their workspace, users, assets, playback, logs, analytics, billing, support, or end-user activity. We may also disclose information in connection with a merger, acquisition, financing, reorganization, sale of assets, legal request, emergency, suspected abuse, rights enforcement, or protection of Rend, users, viewers, or third parties.

We may use aggregated or de-identified information for reporting, product analysis, security, performance measurement, and business planning.

Rend and its service providers may process personal data in the United States and other jurisdictions where we or our providers operate. Those jurisdictions may have data protection laws that differ from the laws where you live.

Where transfer safeguards are required by applicable law, we use appropriate measures such as contractual protections, data processing terms, the European Commission Standard Contractual Clauses, the UK international data transfer addendum or agreement, or other legally recognized transfer mechanisms as applicable.

We retain personal data for as long as needed to provide Rend, maintain accounts, deliver playback, support customers, bill for services, comply with legal and tax obligations, resolve disputes, enforce agreements, maintain security, prevent abuse, and support ordinary backup and archival processes.

Retention periods vary by data type. Customer content and playback artifacts may be retained while an account or asset remains active. Account, billing, tax, security, support, telemetry, and log records may be retained longer where needed for legitimate business, legal, compliance, security, or audit purposes. Backups and cached copies may persist for a limited period after deletion from active systems.

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or review of certain automated decisions. You may also have the right to complain to a data protection authority.

To make a request, contact us at hello@rend.so. We may ask for information needed to verify your identity, locate the relevant account or data, understand the request, and confirm whether Rend is acting as controller, processor, service provider, or contractor for the data at issue.

If your request relates to data controlled by a Rend customer, we may direct you to that customer or assist the customer with the request as required by applicable law and our agreement with the customer.

If you are in California or another U.S. state with similar privacy rights, you may have the right to know or access categories and specific pieces of personal information, correct inaccurate personal information, delete personal information, obtain a portable copy, opt out of certain sales or sharing, limit certain uses of sensitive personal information, and be free from discrimination for exercising privacy rights.

Based on our current practices, Rend does not sell personal information and does not share personal information for cross-context behavioral advertising, including personal information about website visitors, account users, customer admins, viewers, end users, support contacts, Customer Data, logs, telemetry, or cookies. We also do not use sensitive personal information for purposes that require a right to limit use under California law. If our practices change in a way that requires an opt-out mechanism, Global Privacy Control handling, or another consumer choice, we will provide it as required by law.

You or an authorized agent may submit a privacy request by emailing hello@rend.so. We may need to verify the request and the agent's authority before acting on it.

Rend acts as a controller for personal data we process for our own business purposes, such as website operation, account administration, customer communications, billing, security, legal compliance, and service improvement.

Rend acts as a processor, service provider, or contractor when we process personal data in customer content, customer applications, playback activity, viewer events, logs, or related operational data on behalf of a customer and under the customer's instructions.

Customers are responsible for determining whether they may submit personal data to Rend, providing notices and obtaining consents where required, responding to end-user requests, and ensuring their use of Rend complies with applicable privacy, cookie, recording, surveillance, retention, and transfer laws.

We use technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, and disclosure. These measures vary based on the nature of the data and the risks involved.

No online service can guarantee perfect security. You are responsible for protecting account credentials, API keys, playback credentials, integration secrets, and access to the systems you connect to Rend. Please contact us promptly if you believe your account or data has been compromised.

Rend is intended for developers and businesses. It is not directed to children under 13, and we do not knowingly collect personal data from children under 13 through our website or account services.

Customers may not use Rend for child-directed services or to process data from children as defined by applicable law unless we have signed a separate written agreement that expressly allows that use and the customer has all required rights, age-gating, parental consent, school or educational terms, notices, and deletion procedures.

We may update this Privacy Notice from time to time by posting a revised version on this page or otherwise notifying you. The updated notice becomes effective when posted unless it says otherwise.

If a change is material to active paid services, privacy rights, or how we process personal data, we will use reasonable efforts to provide advance notice through the website, dashboard, email, or other account contact information before the change takes effect, unless the change is needed sooner for legal, security, or abuse-prevention reasons.

You can contact Rend about this Privacy Notice or privacy requests at hello@rend.so.

Please include enough context for us to understand your request, such as the relevant account, workspace, asset, playback URL, support thread, or customer relationship. Do not send sensitive personal data unless it is needed for the request.