Privacy Policy
Effective: July 2, 2026
This policy describes how Whack, Inc. (d/b/a Renza) handles personal data when you use renza.io, our API, CLI, and related services. The short version: we collect what's needed to run a document-hosting product, we don't sell personal data, and we don't run ad tracking.
What we collect
- Account data — name and email, via our sign-in provider (WorkOS). If you comment as a guest, an optional display name you choose.
- Your content — the documents you import and the comments you write. Your documents are yours; we host and serve them per your sharing settings.
- Usage data — product analytics (pages, features used, API client and version) via PostHog, hosted in the EU. We use this to understand and improve the product, not to advertise.
- Logs — standard server logs (IP address, user agent, timestamps) for security, abuse prevention, and debugging.
- Billing data — handled by Stripe; we never see or store full card details.
Cookies and local storage
We use cookies for sign-in sessions and to remember your active workspace, and local storage for things like an anonymous reviewer identity you can rename. No advertising cookies, no cross-site tracking.
How your content is shared
Content is private to you and the people you grant access — unless you create a share link, in which case anyone with the link can view it. Documents published anonymously ("try" links) expire automatically, currently after 7 days, unless claimed into an account.
Viewer analytics respect our isolation boundary: we don't fingerprint or identify anonymous viewers of shared documents.
Subprocessors
We use a small set of providers to run the Service:
| Provider | Purpose |
|---|---|
| Vercel | Application hosting and content delivery |
| Neon | Database (metadata, comments, permissions) |
| Cloudflare | Realtime presence, content serving infrastructure |
| WorkOS | Authentication and sign-in |
| Stripe | Payments and billing |
| Resend | Transactional email (invites, notifications) |
| PostHog (EU) | Product analytics |
Data retention and deletion
Account content is retained while your account is active. Delete a document and it's removed from serving immediately and from storage within a commercially reasonable period. To delete your account and its data, email hello@renza.io — we'll complete the deletion within 30 days, except where law requires retention.
Your rights
Depending on where you live (including under GDPR and CCPA), you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Email hello@renza.io and we'll honour these requests.
Children
Renza is not directed at children under 16, and we don't knowingly collect their data.
Changes
We'll update this policy as the product evolves; material changes get notice before they take effect. The effective date above always reflects the current version.
Contact
Whack, Inc. (d/b/a Renza) 9450 Southwest Gemini Drive, Beaverton, OR 97008, USA hello@renza.io