Who we are
Genesize is an unincorporated business operating genesize.io. In this policy, “we,” “us” and “our” refer to the operator of Genesize. This policy covers our website, account services, AI product tools and support.
For privacy questions or requests, contact the operator responsible for privacy at andrew@genesize.io or use our contact form. The terms and conditions describe the rules for using the service.
Information we handle
- Account information: your email, account identifier, profile details and sign-in records. Our authentication provider manages passwords securely; we do not store plaintext passwords. If you use a supported third-party sign-in option, we receive the profile information needed to create and authenticate your account.
- Your workspace: creator or business details, intended audience, goals, expertise notes, interview answers, source excerpts, product briefs, prompts, generated drafts, conversations, designs and saved project settings. An operator may supply information about a creator or client they represent.
- Imports and images: imported document text and associated source details, and cover images you upload or generate. Document extraction takes place in your browser; text you save becomes part of your cloud workspace even if you have not approved it for AI use. Original document files are not uploaded by this import workflow. Images may be stored separately for use in your projects.
- Affiliate information: partner account details, public display names, account contacts, any retained earlier application details, terms acceptance, consented referral identifiers, commission calculations and payout records. We use these to operate the program, attribute eligible subscriptions, calculate earnings and prevent abuse. Partners see anonymous referral identifiers and earnings, not customer emails or private workspace content.
- Billing information: if you buy a paid plan, subscription status, customer identifiers, payment status and billing periods. Payment details are collected by the payment processor; we do not receive or store full card numbers or card security codes.
- Support information: your name, email, subject, message and subsequent correspondence when you contact us.
- Creator stores and funnels: when you request a resource or buy a creator’s product, we store your email, optional name, order and access records, and the funnel that led to the request. These details are available to that creator to deliver and support your purchase or resource. Permission for optional creator email updates is recorded separately; requesting a resource does not automatically subscribe you. Funnel measurement records page views, clicks and verified order totals without placing contact details in analytics events.
- Technical information: request and security records, IP-related identifiers, browser or device information, errors and usage counts needed to operate the website, apply plan limits and detect abuse.
Only submit information you are entitled to share. Do not include another person’s private messages, confidential client records, passwords, payment credentials or sensitive personal information unless necessary and you have appropriate authority and consent.
Why we use information
We use information to sign you in, save and retrieve your work, generate requested content, create exports, administer subscriptions, answer support requests, troubleshoot faults and protect the service. We may also use relevant records to meet legal obligations, investigate misuse and resolve disputes.
We rely on consent where required and on applicable legal permissions for these purposes. Where a law requires a separate legal basis, processing may be necessary to provide the service you request, meet a legal obligation, or pursue legitimate interests in operating and securing the service, subject to your rights. Optional marketing requires any consent required by law; creating an account or contacting support does not automatically subscribe you to promotional emails.
We do not use your private workspace to serve targeted advertisements. With your permission, we use limited public-page visit information to understand and improve the website. We do not publish your drafts or contact third parties on your behalf just because you generate content.
Cookies and browser storage
With your website analytics choice enabled, public creator storefront, product and funnel pages use a random first-party tab identifier that expires after 30 minutes to estimate visits and conversions. We record bounded campaign labels and referring website names, rather than full referring URLs, to report traffic sources. Measurement respects Global Privacy Control and Do Not Track signals and excludes private previews. It does not add advertising pixels to funnel pages, checkout, or product access pages. Purchase access uses a separate secure cookie so you can open your purchased content.
Cookies and browser storage keep you signed in, remember appearance preferences. Signed-in workspace changes are sent to the server; changes that have not finished saving can be lost if you leave the page. Demo content and preferences may remain after signing out. Signing out is not the same as deleting all site data.
You can remove cookies and local data through your browser’s site settings. Doing so can sign you out and remove unsaved work; it does not by itself delete your cloud account. Export important work first. Referral links offer a separate choice before storing an optional first-party affiliate cookie for up to 90 days. This remembers the last partner referral you accepted. You can continue without it or remove it from the affiliate program page. If you create an account with an eligible referral, its account association is retained for subscription renewals; clearing a browser cookie does not remove that financial attribution. Contact support for privacy requests.
Genesize no longer uses the Meta advertising pixel or sends its page-view and trial-start events. Updated pages remove the pixel’s old first-party identifiers, _fbp and _fbc, where the browser permits. This does not recall information previously sent to Meta, which remains subject to Meta’s policies and your rights. We do not add visitor fingerprinting.
Google Analytics is optional and is controlled by the analytics preference popup. An earlier advertising-only acceptance does not enable it. When allowed, Google receives visits to public marketing, blog and policy pages, browser/device information and first-party identifiers such as _ga and _ga_39WFT88K8B. Public-page interactions such as scrolling and outbound links may also be measured. We use this to understand website traffic. Our manual page-view events exclude query strings and fragments. We do not load Analytics on account, OAuth, contact-form, private workspace, creator checkout, purchased-content or preview pages, and do not send workspace content, visitor email addresses or account identifiers. Google advertising features remain disabled. These analytics cookies and the browser choice last up to 180 days. You can decline below to stop future measurement and remove these first-party analytics identifiers. We respect Global Privacy Control and Do Not Track. Information already sent is subject to Google’s privacy policyand your rights.
Retention and security
We keep account and workspace information while needed to provide your account and requested services. On a verified deletion request, we remove or de-identify information no longer needed, subject to records reasonably required for legal, tax, security or dispute purposes (including affiliate commission and payout records) and the lifecycle of provider backups. Removing a source does not remove excerpts already saved in a product draft; those drafts must be edited or deleted separately. Browser copies and files you download are under your control.
Support messages remain in our support and email systems for responding to and following up on your inquiry, and for related legal or security needs. Contact-form rate limits use keyed identifiers rather than raw email addresses or IP addresses in the counter table; records older than 24 hours are cleaned up when later submissions are processed. This cleanup does not delete the email correspondence itself.
We use HTTPS, authenticated access controls, restricted database permissions and private storage for account content. No online system is risk-free. Keep your sign-in credentials private and contact us promptly if you suspect unauthorized access. We will address security incidents and provide notices when required by law.
Your choices and rights
You can edit available profile information and export supported products inside Genesize. For access to personal information, correction, account closure, deletion or a portable copy, email andrew@genesize.io. These requests are handled through support; there is currently no self-service account-deletion button. We may verify your identity and clarify the request before acting.
Depending on the law that applies to you, you may also request restrictions, object to certain processing, or withdraw consent. Withdrawing consent does not make earlier lawful processing unlawful, and we will explain if it prevents us from providing a feature. We respond within applicable legal time limits and explain any lawful restriction on a request.
You may raise a concern with us or with the privacy regulator that has jurisdiction. You do not have to waive your right to complain to contact support.
Children and policy updates
Genesize is intended for adults aged 18 or older. We do not knowingly seek personal information from children. If you believe a child has provided information, please contact us so we can investigate and take appropriate action.
We will post changes on this page and update the date above. For material changes, we will provide a reasonable notice through the service or email and seek fresh consent where required. A policy update alone does not authorize an unrelated new use of your information.
YouTube connection review
The initial YouTube source preview in Audience Intelligence is limited to authorized release reviewers while public access is being prepared. With your explicit Google authorization, it uses YouTube API Services to read your own channel, its recent uploads and a bounded preview of public published comments. It does not post, edit or delete YouTube content. Using this optional connection is also subject to the YouTube terms of service and Google privacy policy.
The review does not save imported comments in your workspace or our database, send YouTube data to AI providers, generate AI audience profiles, or use it to train models. Preview data is held temporarily to display the requested review and cleared when the page is left or the session expires. No background sync or offline access is enabled. The Google access token is encrypted in a secure, HttpOnly session cookie bound to the signed-in user and their own workspace, valid for no more than 30 minutes or the token’s remaining lifetime. We do not retain refresh tokens. Google authorization codes and tokens are not included in analytics or application error logs; infrastructure security records may record request metadata.
Use “Disconnect and clear” on the review page to clear local access and the preview and request revocation of Google access. If Google cannot confirm revocation, the page explains how to revoke it in your Google account connections. You can also contact andrew@genesize.io for deletion or privacy assistance. The current review does not retain a saved YouTube dataset to delete. Any future persistent connection or AI use will require its applicable approvals, disclosures and consent before activation. Google API data will not be sold or used for advertising or generalized model training.
GENESIZE’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. We use nonreversible request-limit identifiers to protect API access; these do not contain the content of your channel, videos or comments.
Instagram Audience Intelligence
Instagram is an optional connection for eligible Professional Creator and Business accounts. When enabled for your account, you authorize it through Instagram. We request basic account access, access to read permitted comments and replies, and access to available media insights. We do not request access to direct messages or content publishing, and do not post, reply to or moderate comments.
We store your professional account identifier, username, account type, connection status, encrypted access token and its expiry. A bounded sync reads up to 20 recent media items from the past 90 days and up to 500 comments and replies. We save media references, dates, available metrics and comment text as research in your workspace. We do not download the original media or retain commenter profiles. Comment text itself can contain personal information; only connect data you are entitled to use.
Comments enter the existing Audience Intelligence system to find aggregate questions, problems and product opportunities. Minimized comment text is processed by OpenAI for the analysis you request; your Instagram access token and commenter profile identifiers are not sent to the AI provider. We do not sell this imported data or use it for advertising. Results are research interpretations, not individual profiling or verified purchasing demand.
In Audience Intelligence, open Instagram → Manage to delete imported data or disconnect. Deleting imported data clears the Instagram research and invalidates derived analysis while leaving the account connected. Disconnect removes stored credentials, stops future syncs and clears imported Instagram data. Generated Genesize products, unrelated sources, sales and customers are preserved. Detected revoked or expired authorization also stops syncing and clears protected Instagram data.
To remove authorization at Instagram, remove GENESIZE in Instagram Settings → Website permissions → Apps and websites. Meta can send a verified deauthorization or data-deletion request to us; it clears the matching connection and imported research. You can also request help at andrew@genesize.io. Security backups may persist according to the retention safeguards above.