Privacy Policy

1. Introduction

RAW Future s.r.o. ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Render Past ("Service").

Please read this Privacy Policy carefully. By using the Service, you consent to the collection and use of your information as described in this policy.

2. Data Controller

3. Information We Collect

3.1 Personal Information

When you register for an account, we collect:

• Email address
• Password (encrypted)
• Account creation date

3.2 Usage Data

We automatically collect certain information when you use our Service:

• Search queries and locations explored
• Generated images and associated metadata
• Credit balance and transaction history
• IP address and browser information
• Device type and operating system

3.3 Payment Information

Payment processing is handled by Stripe. We do not store your credit card details. We only receive transaction confirmations and purchase amounts.

4. How We Use Your Information

We use the collected information for:

• Providing and maintaining the Service
• Processing your transactions and managing your account
• Improving and personalizing user experience
• Communicating with you about updates and changes
• Detecting and preventing fraud or abuse
• Complying with legal obligations
• Analyzing usage patterns to improve our Service

5. Legal Basis for Processing (GDPR)

Under the GDPR, we process your data based on:

• Contract: To provide the Service you've requested
• Consent: For marketing communications and optional cookies
• Legitimate Interests: For security, fraud prevention, and service improvement
• Legal Obligation: To comply with applicable laws

6. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third parties that help us operate (Stripe for payments, Google for AI services)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with mergers or acquisitions

We do not sell your personal information to third parties.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Upon account deletion, we will delete or anonymize your data within 30 days, except where required by law to retain it longer.

• Account data: Until account deletion + 30 days
• Generated images: Until deletion by user or account deletion
• Transaction records: 7 years (legal requirement)
• Server logs: 90 days

8. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Revoke previously given consent

To exercise these rights, contact us at privacy@rawfuture.cz

9. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing (bcrypt)
• Regular security audits
• Access controls and authentication
• Secure cloud infrastructure

10. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area. We ensure appropriate safeguards are in place through Standard Contractual Clauses or adequacy decisions.

11. Children's Privacy

Our Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your residence, place of work, or place of the alleged infringement.