Privacy Policy
Last updated: June 2026
Purpose and identity of the controller
This policy describes how STROBE STUDIO (a limited liability company with share capital of 7,500 euros, RCS Paris 803 743 657, registered office at 61 rue de Lyon, 75012 Paris, France), publisher of the Renkko service, processes personal data when providing its service. Renkko is an online software platform (SaaS) that provides audiovisual equipment rental companies with an embeddable conversational assistant and an administration area to qualify visitors, check equipment availability and generate quotes. It applies in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act of 6 January 1978 as amended.
Roles: controller and processor
Two situations must be distinguished. For the data of rental companies that register for and use the service (Renkko's clients), STROBE STUDIO acts as data controller and determines the purposes and means of processing. For the data of visitors who interact with the assistant installed on a rental company's website (that company's prospects), the rental company is the controller, since it collects such data for its own commercial purposes; STROBE STUDIO then acts as a processor within the meaning of Article 28 of the GDPR, processing the data on behalf of and on the instructions of the rental company, under a data processing agreement.
Data relating to rental companies (service clients)
To create and manage a rental company account, STROBE STUDIO collects: first and last name, email address, password (never stored in plain text) or, where Google sign-in is used, the authentication identifiers provided by that service; profile picture, interface language and role within the organisation; company information (business sector, team size); and information about the subscribed plan and subscription. This data is necessary to provide the service and manage the contractual relationship.
Data relating to assistant visitors
When a visitor interacts with the assistant installed on a rental company's website, the following may be collected: name, email address, telephone number and company name, customer type (individual or business), SIRET number where applicable, a technical session identifier, the content of the conversations and messages exchanged, and the quotes generated. This data is processed on behalf of the rental company acting as controller, for the purposes of commercial connection, qualification of the request and preparation of a quote.
Purposes and legal bases
Processing relies on several legal bases. Performance of the contract and pre-contractual measures form the basis for account creation and management, the operation of the assistant and the generation of quotes; for visitors, processing relies on the interest in entering into or performing a contract (connecting them and preparing a quote), without any blocking prior consent, clear information being provided to the visitor. The legitimate interest of the company and of the rental companies covers security, the prevention of fraud and abuse, and service improvement. Legal obligation covers accounting and invoicing. No sensitive data within the meaning of Article 9 of the GDPR is deliberately collected.
Recipients and sub-processors
To provide the service, STROBE STUDIO uses technical providers acting as sub-processors, selected for their compliance guarantees: Anthropic (the Claude conversational artificial intelligence model, for processing conversations), Voyage AI (text vectorisation for semantic search), Google (optional authentication), Resend (sending of emails, within the European Union), Booqable or Rentman depending on the rental company (rental management system, for catalogue, availability and quotes, within the European Union), PostHog (analytics, hosted within the European Union) and Inngest (running of automated tasks). These providers access data only to the strict extent necessary for their services.
Transfers outside the European Union
Some sub-processors, in particular Anthropic, Voyage AI and Google, are established in the United States and may process data outside the European Union. These transfers are framed by appropriate safeguards within the meaning of Chapter V of the GDPR, namely the Standard Contractual Clauses adopted by the European Commission, supplemented where appropriate by additional measures. You may obtain a copy of these safeguards by writing to [email protected].
Retention periods
Rental company account data is retained for the duration of the contractual relationship, then archived for the applicable legal periods, in particular ten years for accounting records. Conversations and prospect data are retained according to a retention period that the rental company sets in its administration area, and are deleted beyond that period. Deletion of the account, possible at any time from the settings under the right to erasure, results in the cascading deletion of the data attached to the account, subject to legal retention obligations.
Your rights
In accordance with applicable regulations, you have the rights of access, rectification, erasure, restriction, objection and portability of your data, as well as the right to give directives regarding its fate after your death. Rental companies that are clients of the service exercise these rights with STROBE STUDIO at [email protected]. For visitors, as the rental company operating the assistant is the controller, requests must be addressed directly to it; STROBE STUDIO, as processor, merely relays the request to the rental company and assists it. You may also lodge a complaint with the French Data Protection Authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07.
Data security
STROBE STUDIO implements technical and organisational measures intended to ensure the security and confidentiality of data: passwords are stored in hashed form and never in plain text, the access credentials to rental management systems are encrypted, hosting is provided by Hostinger within the European Union, and the service is protected against abuse (request rate limiting) and against server-side request forgery (SSRF).
Cookies and trackers
The assistant uses a session identifier stored in the browser's local storage, strictly necessary for its operation and the continuity of conversations; as such, it does not require prior consent under Article 82 of the French Data Protection Act. The service also uses the PostHog analytics tool, hosted within the European Union. Where a tracker is not strictly necessary, its placement is subject, where applicable, to your consent, which you may withdraw at any time.
Changes and contact
This policy may be updated to reflect legal, regulatory or technical developments; the applicable version is the one published on renkko.com at the date of your consultation. For any question relating to the protection of your data or to exercise your rights, write to STROBE STUDIO at [email protected].