PRIVACY POLICY

1. Introduction

GeniMate Inc. ("GeniMate," "we," "us," or "our") operates the GeniMate platform at genimate.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

2. Information We Collect

Information you provide directly:

• Account registration data: name, email address, and password (stored as a bcrypt hash).
• Payment information: processed and stored by Stripe. We receive only a billing token and last-4 card digits.
• Prompts and content you submit to generate motion graphics.
• Images and brand assets you upload.
• Brand kit information: colors, fonts, logo, tagline.

Information collected automatically:

• Log data: IP address, browser type, pages visited, timestamps, referring URL.
• Device information: operating system, screen resolution, language.
• Usage data: features accessed, render count, session duration.
• Cookies and similar technologies (see Section 8).

3. How We Use Your Information

• Provide, operate, and maintain the Service.
• Process transactions and send billing-related communications.
• Send transactional emails (email verification, password reset).
• Improve and personalise the Service based on your usage patterns.
• Detect, prevent, and address fraud, abuse, and security incidents.
• Comply with legal obligations.
• Respond to support requests.

We do not sell your personal data to third parties.

4. Sharing of Information

We share your information only in the following circumstances:

• Service providers: Supabase (database and file storage), Stripe (payments), Anthropic/OpenAI (AI generation), Resend (transactional email), Upstash (Redis caching). Each is bound by data processing agreements.
• Legal requirements: When required by law, court order, or governmental authority.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with advance notice to you.
• With your consent: For any other purpose with your explicit consent.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Rendered video files are stored for 12 months after generation; uploaded images are stored for 90 days after upload. You may request deletion of your account and associated data at any time by contacting privacy@genimate.com.

6. Data Security

We implement industry-standard security measures including TLS in transit, bcrypt password hashing, JWT authentication with short-lived tokens, rate limiting, and regular security reviews. No method of transmission or storage is 100% secure. We will notify affected users of a data breach as required by applicable law.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to processing.
• Data portability (receive your data in a machine-readable format).
• Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact privacy@genimate.com. We will respond within 30 days.

8. Cookies

We use essential session cookies required for authentication and security. We also use analytics cookies to understand usage patterns. You can control cookie preferences via your browser settings or our Cookie Policy.

9. Children's Privacy

The Service is not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us so we can delete it.

10. International Transfers

Your data may be processed in the United States and other countries where our service providers operate. By using the Service, you consent to such transfers. Where required, we rely on Standard Contractual Clauses approved by the European Commission.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice in the Service at least 14 days before the change takes effect. Your continued use after the effective date constitutes acceptance.

12. Contact

For privacy-related inquiries: