Studio / Policies

Privacy & data

How drafts and optional analytics work, and the remaining policy details to confirm before accepting payments.

Pre-launch policy draft. Review with the legal operator and confirm support details, merchant identity, jurisdiction, and actual provider retention practices before accepting customers or payments.

Local drafts

Device drafts stay in this browser. Only an explicit Save account copy uploads a brief and up to four image references to your private account. Copies are limited to 25 and 4 MB per account. Image metadata is removed. Account copies are stored in the dedicated Tokyo database; copying one to a device requires a separate choice. Clearing browser storage removes device drafts.

Optional AI planning

Document preview reads supported PDF, Word and text files on your device. If AI planning is enabled and you confirm its credit cost, the reviewed text and included reference images are sent to OpenRouter and its model provider. Original document files are not uploaded by this flow. The app requests routing that disallows provider data collection and requires zero-data-retention endpoints; if no matching endpoint is available, the request fails. The resulting storyboard and accounting receipt are stored in your private account; source text and reference image bytes are not retained in that job record. Brand kits and music references stay on this device unless an image is explicitly included in an account draft copy. Music references are excluded from account copies.

Submitted renders

Signed-in render requests may include product images and prompts sent to the selected generation provider. Provider retention and processing terms must be reviewed before activation.

Analytics

PostHog analytics are off until you allow them. Consented events contain only fixed page and studio-step names, supported model names, result codes and basic error notices. Prompts, images, account details, full URLs, messages and raw stack traces are excluded. Session recordings and automatic interaction capture are off. Events use a temporary anonymous ID held in page memory, not your account ID. The project is hosted in the EU with IP capture and location enrichment disabled. The network service still receives connection information when a consented request is sent.

Optional error reports

When available, error reports have a separate choice in Privacy settings, off by default. They contain a fixed error type, restricted application file labels and runtime line positions. Messages, function names, causes, drafts, account identity, request contents and full URLs are excluded. Your choice also permits reports for errors during selected page requests, using a preference cookie with no account identifier. Authentication, upload, payment and webhook requests and background jobs are excluded. Turning this choice off stops future reports; reports already received cannot be recalled.

Analytics choices

Open Privacy settings using the shield in the header or the footer link. Turning analytics off stops future usage collection, cancels pending browser requests and resets the temporary ID. Error reports have their own separate choice. Your choices are saved in this browser; blocking browser storage keeps collection off. Previously received events follow the project's current retention policy, up to one year on its Free plan.

Your choices

Workspace provides an account download and deletion request. Deletion has a 30-day recovery period. After it ends, operator maintenance removes account drafts, references, generated history and profile data and revokes sign-in access. Remaining credits or unsettled jobs require support review first. Necessary accounting records are kept separately for up to 7 years, subject to applicable legal requirements. Device drafts and previous anonymous monitoring records are separate; delete browser storage or contact support@ragnorx.com for assistance. Service-managed backup expiry may delay removal from backups; we do not promise immediate backup erasure.