Legal

Who you’re contracting with, and how to reach each desk.

The contracting entity, registered address, jurisdiction, and the four branded inboxes a customer or auditor could plausibly need. Pick the inbox that matches your question — the right team replies.

Business identity

Who you’re contracting with

The contracting entity for RentaraAI is Steadwright LLC, an Indiana limited liability company, with its registered office at 2120 W Washington St, Suite 200, Indianapolis, IN 46222, United States. The entity governs itself under the laws of the State of Indiana, United States.

Data controller

Steadwright LLC (the entity above) decides why and how your personal data is processed when you use RentaraAI.

Contact channels

  • support@rentaraai.com

    General questions, demos, partnerships, media.

    Acknowledgement: within one business day

    Delivered to the Steadwright inbox via Polsia email proxy; the visible sender identity matches the address you wrote to.

  • billing@rentaraai.com

    Refunds, invoices, subscription changes, terms disputes.

    Acknowledgement: within one business day

    Delivered to the Steadwright billing desk via Polsia email proxy; one business-day acknowledgement window.

  • privacy@rentaraai.com

    Privacy questions and complaints.

    General privacy questions and complaints:

    Response within one business day.

    Formal access, deletion, export, portability, or correction requests:

    Acknowledgement and identity verification within two business days.

    Fulfilment within 30 days. See /rights.

    Delivered to the Steadwright privacy desk via Polsia email proxy; rights requests are tracked from receipt to fulfilment.

  • security@rentaraai.com

    Security disclosures, vulnerability reports, incident coordination.

    Acknowledgement: within two business days

    Delivered to the Steadwright security desk via Polsia email proxy; see /security-incidents for the disclosure timeline.

Third-party subprocessors: OpenAI — API, Polsia, Inc. — R2 object storage, Polsia, Inc. — Email proxy, Stripe, Inc., Render (hosting) + Cloudflare (edge).

Internal components (not shared with any third party): better-auth (local Postgres account store). Full table — categories, locations, retention, links — on /subprocessors.

Linked pages

The full disclosures

The /legal hub is the entry point — these pages have the specifics.

  • Subprocessors

    Every third-party processor we share data with, what we share, how long we keep it, and where it lives.

    Open
  • Data Processing Addendum

    How to request a current copy of the DPA — we sign and send within five business days.

    Open
  • Data-subject rights

    How we handle access, deletion, and portability requests — verification in two business days, fulfilment within 30.

    Open
  • Security incidents

    When we notify you, what we send, what we will not do, and how to report a vulnerability.

    Open

Direct addresses

Write to the right desk

No triage bot, no shared inbox — each branded address routes to a named handler. The envelope is delivered via Polsia’s email proxy; the visible sender matches the address you wrote to.

Contracting entity: Steadwright LLC. Governing law: State of Indiana, United States.

Effective: 2026-09-11 · v2026-08-06