Privacy Policy

Effective date: 10/01/2025

Controller: [Medoy Labs], [Address, France, contact: info@renameit.tools]

Overview

Renameit processes images entirely in the user’s browser; files are not uploaded to servers and are not stored by us at any time. This policy explains what limited information is collected, why it is collected, how it is used, and the rights available to you.

What we do not collect

• No copies of your images or converted outputs.
• No content of files, filenames, or EXIF data transmitted to our servers.
• No keystrokes or clipboard contents.

Information we may collect

• Anonymous identifiers: a randomized user ID for session management and conversion history if you opt in.
• Usage events: timestamps, selected output format, quality level, conversion success or error codes, and basic device/browser diagnostics.
• Authentication data: if you sign in (anonymous or email), we receive the auth identifier and account state.
• Payments (future pro tier): transaction metadata from a payment processor, never full card details.
• Consent signals: your choices for cookies, analytics, and ads when applicable.

How and why we use data

• Provide and improve the service: measure reliability, fix bugs, protect against abuse.
• Account features: show your conversion history across sessions when signed in.
• Legal compliance and security: detect misuse, comply with lawful requests.
• Monetization (future): serve ads or subscriptions only after consent where required.

Legal bases (GDPR)

• Consent: analytics, cookies, ads, and optional email sign‑in.
• Contract: deliver the conversion service you request.
• Legitimate interests: security, fraud prevention, and essential diagnostics that do not override your rights.

Cookies and local storage

• Essential: store UI preferences, queued files in memory, and your consent choices.
• Analytics/ads (optional): set only after opt‑in and can be changed at any time via the “Privacy Settings” link in the footer.

Data retention

• Anonymous usage logs: retained for up to [90 days] for reliability and abuse prevention.
• Account data: retained while your account is active; delete on request or after [12 months] of inactivity.
• Payment records (future): retained as required by tax and accounting laws.

Sharing and subprocessors

• Infrastructure and auth: Firebase services for authentication, database, and hosting.
• Analytics (optional): privacy‑respecting analytics or Google Analytics with IP anonymization enabled.
• Payments (future): Stripe or equivalent for transactions.

We do not sell or share personal information for cross‑context behavioral advertising.

International transfers

Service data may be processed in the regions where our providers operate. When transferring outside the EU/EEA, appropriate safeguards such as Standard Contractual Clauses are applied. You can request the current data‑hosting region by contacting us.

Security

• End‑to‑end TLS for all network requests.
• Files processed in browser memory only; no server upload pipeline exists.
• Principle of least privilege for service accounts and database rules.

Your rights

• Access, rectification, deletion, restriction, and portability of personal data.
• Withdraw consent at any time for optional processing.
• Object to processing based on legitimate interests.
• EU/EEA residents: complain to your local supervisory authority.

Request actions by emailing info@renameit.tools from the address associated with your account.

Children’s privacy

The service is not directed to children under 13 (or the age of digital consent in your country). Accounts identified as belonging to minors are restricted from optional tracking and ads.

Third‑party links

External sites linked from Renameit have their own policies; review them separately.

Changes to this policy

Material changes will be announced on this page and, when appropriate, via in‑app notice. Continued use after the effective date constitutes acceptance of the updated policy.

Contact

For privacy questions, data requests, or complaints, contact: [Medoy Labs], [Address], [info@renameit.tools]. If required, an EU representative or Data Protection Officer contact will be provided upon request.