01 / Overview & Entity
Who we are and our role.
This Privacy Policy applies to the services, websites, REST APIs, Anycast SMTP relays, SDK libraries, and developer tools provided by Render25, operated by Kingdom Corporation and founded by Ren Lysea.
When you create an account, register API keys, or manage billing, Render25 serves as the Data Controller. When you submit transactional email messages and recipient addresses through our APIs or SMTP relays for transmission, we act strictly as a Data Processor (or Service Provider under the California Consumer Privacy Act).
02 / Data Collection
Information we collect.
We minimize data collection to what is strictly necessary to authenticate your workspace, route emails reliably, and satisfy legal obligations:
Account & Organization
Name, work email, organization name, and cryptographically salted password hashes.
Billing Details
Payment methods are tokenized via our PCI-DSS Level 1 payment processor (Stripe). Render25 never stores raw credit card numbers.
Developer Credentials & Telemetry
Scoped API tokens, IP allowlists, request rates, origin IP addresses, and DNS verification records (SPF, DKIM, MX).
When your applications send emails, your requests contain recipient addresses, sender identities, subject lines, and message bodies. We treat this data with the highest level of confidentiality.
03 / Processing & AI
How we process your emails.
Render25 processes email payloads strictly to fulfill your outbound transmission instructions, perform cryptographic DKIM signing, route packets through Anycast relays, and generate delivery events (Delivered, Bounced, Opened, Clicked).
Your email payloads, attachments, customer contact lists, and metadata are strictly excluded from any machine learning, large language model (LLM), or AI training pipelines. We do not inspect, parse, or monetize the contents of your messages for commercial intelligence.
Automated security filters inspect outbound mail streams solely to detect compromised accounts, phishing campaigns, credential harvesting, and ransomware distribution in order to preserve global IP reputation for all customers.
04 / Retention
Data retention and automated deletion.
We do not hoard your data. Our infrastructure enforces automated rolling retention policies:
- →Message Payloads (Ephemeral):Email bodies reside in memory buffers only during queuing and transmission, and are purged within 72 hours of successful handoff.
- →Delivery Event Logs:Transmission metadata (timestamp, recipient, status, SMTP response code) is retained for 7 days on the Hobby tier, and up to 30 days on Launch plans for debugging and observability.
- →Account & Project Purge:You can delete projects, domains, or your entire account at any time. When an account is terminated, all DKIM private keys, verified records, and log history are permanently deleted within 14 calendar days.
05 / Security
Encryption and security standards.
Render25 employs defense-in-depth security engineering to protect transactional communications:
Transport Security (TLS 1.3)
All inbound API requests enforce TLS 1.3/1.2. Outbound mail transmissions negotiate opportunistic or enforced TLS with recipient MTAs.
At-Rest Cryptography (AES-256-GCM)
Database stores, encrypted token vaults, and backups use AES-256-GCM. API keys are salted and hashed with Argon2id.
Cryptographic Isolation
Each customer domain utilizes dedicated 2048-bit DKIM keys isolated from other tenants across all edge relay nodes.
06 / Rights & Compliance
Your rights (GDPR, CCPA & Global).
Whether you operate in the European Union, the United Kingdom, Switzerland, or the United States, you have statutory rights regarding your personal data:
- Access & Export: Request a portable copy of your account information and logs.
- Correction: Update inaccurate profile or organizational information via the dashboard.
- Erasure: Permanently delete your personal profile, sending domains, and logs.
- Non-Discrimination: We never sell your personal information, and we do not discriminate against anyone exercising privacy rights.
To exercise your rights or request a signed Data Processing Addendum (DPA), email our privacy team directly at [email protected].
07 / Contact
Contact our legal team.
If you have questions about this Privacy Policy or our security infrastructure, contact us directly:
Entity: Render25 / Kingdom Corporation
Founder & CEO: Ren Lysea
Privacy Inquiries: [email protected]
Security Disclosures: [email protected]