Privacy
Policy

We collect information you provide directly when you create an account, use the Service, or contact us. This includes:

• Account data — name, email address, company name, and password
• Billing data — payment method details processed securely via our payment provider
• Content data — files, workflows, plans, and other content you create or upload
• Communications — messages you send to us through support or feedback channels

We also collect information automatically when you use the Service, including usage data, device information, IP address, browser type, and interaction logs used to improve performance and security.

We use your information to:

• Provide, operate, and improve the Service
• Process transactions and send related communications
• Respond to comments, questions, and requests
• Send product updates, security alerts, and support messages
• Monitor and analyse usage patterns to improve user experience
• Detect, investigate, and prevent fraudulent or unauthorised activity
• Comply with legal obligations

We do not sell your personal data. We do not use your content to train AI models without your explicit consent.

We do not share your personal information with third parties except in the following circumstances:

• Service providers — We work with trusted vendors (hosting, payments, analytics) who process data on our behalf under strict agreements
• Legal requirements — We may disclose information if required by law or to protect the rights, safety, or property of Genera or others
• Business transfers — In the event of a merger or acquisition, your data may be transferred as part of that transaction with prior notice
• With your consent — We will share information for any other purpose only with your explicit permission

All third-party service providers are contractually bound to handle your data securely and only for the purposes we specify.

We take the security of your data seriously and implement industry-standard measures including:

• 256-bit TLS encryption for all data in transit
• AES-256 encryption for data at rest
• Role-based access controls and audit logging
• Regular security assessments and penetration testing
• SOC 2 Type II compliance framework

Despite these measures, no security system is impenetrable. If you become aware of a security vulnerability, please report it to security@genera.sh.

We retain your personal data for as long as your account is active or as needed to provide the Service. You can request deletion of your account and associated data at any time from your account settings.

Upon account deletion, your personal data is removed within 30 days, except where we are required to retain certain records to comply with legal obligations or resolve disputes. Anonymised, aggregated data may be retained indefinitely for analytics purposes.

Depending on your location, you may have the following rights regarding your personal data:

To exercise any of these rights, contact us at privacy@genera.sh. We will respond within 30 days.

We use cookies and similar tracking technologies to maintain sessions, remember preferences, and analyse usage. We use the following types:

• Essential cookies — Required for the Service to function. Cannot be disabled.
• Analytics cookies — Help us understand how users interact with the Service (anonymised).
• Preference cookies — Remember your settings and personalisation choices.

You can control non-essential cookies through your browser settings or our cookie preference centre in the Service. Disabling analytics cookies does not affect your access to the Service.

Your data may be processed in countries other than where you reside. When we transfer personal data internationally, we use appropriate safeguards including Standard Contractual Clauses approved by relevant data protection authorities.

For users in the European Economic Area, the United Kingdom, or Switzerland, we comply with applicable data protection regulations including GDPR. Our Data Processing Agreement is available upon request.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to our privacy team:

• Email: privacy@genera.sh
• Security issues: security@genera.sh
• General enquiries: hello@genera.sh

We may update this policy from time to time. We will notify you of significant changes via email or a prominent notice within the Service at least 14 days before they take effect.