Privacy policy
What data RendR keeps, why, for how long, and what you can demand about it.
Last updated: September 9, 2026
The publisher's legal identity has not been filled in yet. This text is a working draft: it must be completed and reviewed by a lawyer before any commercial launch.
We sell no data and run no targeted advertising.
Your investor password is stored encrypted and is never sent back to the browser.
You may request access to, correction of, or erasure of your data at any time.
The data we keep
At sign-up: your email address, your name, and the password you choose, stored encrypted and never readable by us.
For cashback: the public identifiers of your trading accounts, the broker and server names, and the detail of the operations the broker sends us, namely instrument, volume, dates and result.
For withdrawals: the bank details or wallet address you give us, and any supporting documents requested.
Technically: your IP address and error logs, kept to detect abuse and fix outages.
The investor password
To read your volumes, we use your trading account's investor password, which grants read-only access and allows no operation.
It is stored encrypted and is never sent back to the browser. The database read grants explicitly exclude that column, including for your own account.
Why we keep it
To perform the contract between us: run your account, calculate your cashback, process your withdrawals, and operate copytrading if you use it.
To meet our legal, accounting and tax obligations.
For our legitimate interest in preventing fraud and keeping the service working.
We sell no data and run no targeted advertising.
Who else has access
Supabase, which hosts the database and handles authentication, on servers located in the European Union.
Vercel, which hosts and serves the application.
Sentry, which receives technical error reports when that tool is enabled.
Your partner brokers, who send us the volumes matching your accounts and to whom we confirm your affiliation.
Each one accesses only what its function requires, and remains bound by a processing agreement.
For how long
Account data is kept as long as your account exists, then twelve months after closure.
Payment-related data is kept ten years, as accounting regulation requires.
Technical logs are kept twelve months at most.
Your rights
You may request access to your data, its correction, its erasure, a restriction of its processing, and its portability in a machine-readable format. You may also object to processing based on our legitimate interest.
A request sent to the contact address at the bottom of this page receives an answer within one month.
Some data cannot be erased before the statutory accounting retention periods expire. We say so explicitly rather than refusing without a reason.
Cookies
Strictly necessary cookies, needed to run the service (keeping your session, remembering your chosen language), are set as soon as you arrive: they do not require your consent.
A banner is shown on your first visit for any analytics and marketing cookies. None of these are set before you give your consent, category by category.
You can review or withdraw your consent at any time via the "Cookie settings" link in the footer.
Complaints
If an answer does not satisfy you, you may lodge a complaint with the Commission nationale de l'informatique et des libertés, the French supervisory authority, or with the authority of your country of residence.