Privacy Notice

RAMAH STUDIO INTERNATIONAL (“Ramah Studio International”, “we”, “us”), formerly known as Renvia, provides an online studio for turning architectural drawings and photos into rendered images. We are the data controller for the personal data described here. For anything about your data, contact us at [email protected].

• Account details: your email address and whether it has been verified, and your name and profile picture if you sign in with Google. Passwords are held by our sign-in provider, never by us.
• Your work: the images you upload, the prompts and settings you use, the projects you create, and the images we generate for you.
• Credits, plans and payments: your plan, your credit balance and its history, and records of purchases and refunds. Card and mobile-money details are entered with our payment providers; we never receive or store them.
• Usage and technical data: when you were last active, error reports from the Studio, and request logs kept by our hosting provider.
• Fraud-prevention signals (see section 4): a random identifier our Studio keeps in your browser, and the network your connection comes from (only the first part of your IP address). We store both only in a scrambled, one-way form.
• Beta testing: if you join a beta programme, the feedback, screenshots and annotations you send us.
• Messages: anything you send us by email or through support.

• To provide the Studio, run your renders and keep your projects: necessary to perform our contract with you.
• To bill you and keep accurate credit records: necessary for the contract, and to meet our accounting and tax obligations.
• To keep the service secure and prevent abuse, including people creating many accounts to collect free credits: our legitimate interest in protecting the service and keeping free credits available to genuine users.
• To fix problems and improve the Studio from error reports and usage: our legitimate interest in a reliable product.
• To contact you about your account, beta programmes you join, or important changes: the contract, or your consent where the law requires it.

We do not sell your personal data, and we do not use it for advertising.

Free-plan accounts receive a monthly allowance of credits. To keep that allowance for genuine users, we may check whether an account is eligible before granting it. The checks look at:

• whether your email address is verified;
• whether the same mailbox (ignoring dots and “+” labels) already received free credits on another account;
• whether the email comes from a disposable-inbox service;
• whether the same browser was used by other accounts that received free credits;
• whether an unusual number of new accounts appeared from the same network in a short time.

The browser identifier is a random value our Studio creates and keeps in your browser's local storage; it says nothing about you or your device. For the network, we use only the first part of your IP address (for example 41.90.12.x). Both are converted with a secret key into a code that cannot be turned back into the original, and only that code is stored.

What the checks can do. An account the checks flag is asked to complete a quick human check (Cloudflare Turnstile) or waits for a person on our team to review it. The checks never refuse free credits by themselves: only a staff member can deny them, and only after reviewing the account. A decision affects only the Free plan's monthly credits. It never removes credits you already have, credits you bought, a paid plan or your work, and it never stops you using the account. Shared networks such as offices, universities and mobile operators are normal, so network evidence alone never sends an account to review.

Your say. If you think a decision about your free credits is wrong, email [email protected]. A person will review it and can reverse it.

We use service providers who process data on our behalf, only to run the service:

• Clerk: sign-in and account security.
• Vercel: hosting of our website, Studio and servers.
• Neon: our database.
• Cloudflare: storage of your images (R2) and the human check (Turnstile).
• fal.ai: the AI models that generate renders. Your images and prompts are sent to it to produce your results.
• PayPal and Paystack: payments, when you buy a plan or credits.

We may also disclose data where the law requires it, or to protect our rights, our users or the public.

Our providers store and process data outside Kenya, including in the United States and the European Union. We use providers that commit to protecting personal data, and we transfer only what each needs to provide its service.

• Account, projects and images: for as long as your account is open. Uploads that nothing uses any more are deleted after a few days, and images you remove from your history are deleted after about a week.
• Browser and network codes: network codes are deleted 30 days, and browser codes 180 days, after we last saw them, and straight away when you delete your account.
• Credit and payment records: kept as long as needed for accounting, tax and dispute purposes.
• Free-credit eligibility records and your email history: kept after you delete your account, so that free credits can't be claimed again simply by re-registering. You can ask us to review this.
• Beta feedback: screenshots are deleted after the programme's housekeeping period; written feedback is kept to improve the product.

Under the Data Protection Act, 2019, you have the right to:

• be told how your personal data is used (this notice);
• access the personal data we hold about you;
• object to our use of it, including for fraud prevention;
• have inaccurate or misleading data corrected;
• have data deleted where we no longer have a reason to keep it;
• not be subject to a decision based solely on automated processing that significantly affects you.

To use any of these rights, email [email protected]. We will reply within a reasonable time and may ask you to confirm your identity. If you are not satisfied, you can complain to the Office of the Data Protection Commissioner (ODPC) at odpc.go.ke.

We use cookies and similar storage that the service needs: our sign-in provider's session cookies, which keep you signed in; the random browser identifier described in section 4; and small settings the Studio remembers, such as layout preferences. The human check is provided by Cloudflare Turnstile, which may use its own storage to tell people from bots. We do not use advertising or tracking cookies.

Connections to our services are encrypted. Images are stored privately and shared only through links that expire. Staff access to accounts is limited by role, and every change staff make is recorded. No system is perfectly secure, but we work to protect your data and will tell you and the authorities about a breach where the law requires it.

Our services are for professionals and are not directed at children under 18. We do not knowingly collect data from children.

We will update this notice when our practices change and show the date at the top; for significant changes we will also tell you in the Studio or by email. Questions or requests: [email protected].