Legal
Privacy Policy
Effective date: 30 September 2026
Last updated: 15 October 2026
1. Who we are
Rezend AI, LLC ("Rezend AI", "we", "our", "us") operates LabWorker at labworker.ai (also reachable at rezend.ai), a desktop for building, revising, hosting and sharing AI-powered applications.
2. Scope
This Policy applies to labworker.ai and rezend.ai and their sub-domains, LabWorker, and our other web apps, APIs and clients (together, the "Services").
3. What we collect
| Category | Examples | Why it's needed |
|---|---|---|
| Account data | Name, email address and profile picture from the sign-in provider you choose (such as Google, GitHub, Microsoft, Discord or Apple), or the email address you sign in with by code; if you add a passkey, its public key (never the private key, which stays on your device); optional details you add, such as company or role | Create and secure your account; keep you signed in; respond to requests |
| Your content | Prompts, files and messages you send; the apps you build, their revisions and outputs; apps you choose to share | Build, revise, host and share your apps as you request |
| Gmail send permission (optional) | An access token that lets the Services send an email from your Gmail account, only if you grant it | Send emails you ask the Services to send on your behalf |
| Connected AI accounts (optional) | The access needed to use an AI provider account you choose to connect, such as Claude, ChatGPT or OpenRouter. An OpenRouter key is stored encrypted and shown to you only by its last four characters | Run models on your own account at your request |
| Usage and device data | IP address, browser and operating system, timestamps, basic event logs, sign-in session cookie | Operate the Services, detect abuse, keep them secure, and count visits |
| Payment data | Billing details, if you purchase a paid plan. Card details are handled by Stripe; we do not store your full card number | Process transactions and meet tax obligations |
| AI credit usage | For work paid with AI credits: when it ran, which model, the tokens used and what it cost | Charge AI credits correctly and show you your balance |
We do not intentionally collect sensitive personal information, and we do not knowingly collect information from children under 13.
4. How we use your information
We use personal data only to:
- provide the Services, including building, running, hosting and sharing your apps;
- send your prompts and content to the AI model you choose so it can respond (see section 6);
- send email from your Gmail account when you ask us to, if you have granted that permission;
- secure, troubleshoot and improve the reliability of the Services;
- respond to support requests; and
- meet legal obligations or defend legal claims.
We do not sell or rent your personal information, and we do not use it for advertising.
5. Google user data
When you sign in with Google, we receive your name, email address and profile picture (the openid, email and profile scopes) and use them only to create your account and sign you in.
Some features can send email for you. If you choose to enable them, we ask separately for permission to send email through your Gmail account (the gmail.send scope). With it we can only send messages you initiate; we cannot read, search or delete your email. The access token is stored encrypted, and you can revoke it at any time at myaccount.google.com/permissions.
Rezend AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, we do not use it to train AI models, and people at Rezend AI do not read it except with your permission, for security, or where the law requires.
6. Service providers
We use a small number of providers to run the Services. They process data only to provide their service to us.
| Provider | Purpose |
|---|---|
| DigitalOcean | Hosting and data storage (United States) |
| Sign-in and, if you grant it, sending email from your Gmail account | |
| GitHub | Sign-in, if you choose it |
| Discord | Sign-in, if you choose it |
| Apple | Sign-in, if you choose it. If you use Hide My Email, the emails we send reach you through Apple’s relay |
| Microsoft | Sign-in, if you choose it; delivering the emails we send you, such as sign-in codes and account notices (Azure, United States) |
| OpenAI | AI model responses, when you choose an OpenAI model |
| Anthropic | AI model responses, when you choose an Anthropic model |
| Open-source LLM providers | AI model responses, when you choose an open-source model |
| OpenRouter | Passing requests to model providers for Lab AI Models, whether you pay with AI credits or your own OpenRouter account; images and narration, where you use them |
| Novita | Images and narration, for some accounts |
| Stripe | Payments for paid plans and AI credits |
When you choose a model, your prompt and the content needed to answer it are sent to that model's provider. Apps and content you choose to share are visible to the people you share them with, or to anyone if you share them publicly.
7. Retention
- Your apps, projects and revisions are kept until you delete them or close your account. Shared apps stay available until you stop sharing or delete them.
- Account data is kept for the life of your account, plus up to 30 days in backups.
- The Gmail send token is kept until you revoke it or close your account.
- A connected OpenRouter key is kept, encrypted, until you disconnect it or close your account.
- Financial records are kept for as long as tax law requires, typically 7 years.
Deleting your account. You can delete your account from Account in LabWorker, or by following the steps at labworker.ai/delete-account. We email a code to confirm it’s you, then schedule the deletion for 30 days later; signing in before then lets you keep your account. On that date we delete your account, your projects and revisions, your files, app data and published pages, and your sign-in methods, and we email you to confirm. Projects you shared are deleted too; the people you shared them with are told in advance and can keep their own copy. Any paid plan is cancelled when your account is deleted; the payment records our payment processor must keep stay with it.
After deletion we keep only: records of administrative actions (such as role changes), with your identity replaced by a placeholder that can’t be traced back to you; file contents that are also part of other people’s projects, with no link to you; financial records as described above; and backups, which expire within 30 days.
8. Your privacy rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict how it is used. These include rights under the California Consumer Privacy Act (CCPA/CPRA) and, in the EU, EEA and UK, the GDPR.
Email [email protected] with your request. We will verify your identity and respond within 30 days.
9. Security
- Encryption in transit (TLS) for all connections to the Services.
- Encrypted storage for sensitive credentials, such as sign-in tokens.
- Access to production data limited to the people who need it to run the Services.
10. Cookies
We use a strictly necessary cookie to keep you signed in. We do not use advertising, cross-site or behavioural-tracking cookies. If you block cookies you will not be able to sign in.
11. Children
The Services are not directed at children under 13, and we do not knowingly collect their data. A parent who believes we hold data about a child may contact us to have it deleted.
12. Changes to this Policy
We will post updates here and revise the "Last updated" date. We will announce material changes at least 14 days before they take effect.
13. Contact us
Rezend AI, LLC
Stockton, California, USA
Privacy: [email protected]
Support: [email protected]