Privacy Policy

Geniora Solutions is the parent brand for a family of software products. This policy is the umbrella that explains how we handle personal data across geniorasolutions.com and every product we operate under that name. We are the data controller for that data. Where a product processes data in a way this policy does not cover, it publishes its own notice, and that notice sits on top of this one rather than replacing it.

1. Data we collect

• Account data: your name, email address, password hash, and where relevant your company name and country.
• Billing data: your plan, billing country, transaction history and invoices. Card and bank details are collected and stored by the payment provider for that product, never by us. We do not see or store full payment card numbers.
• Content and usage data: the material you submit to a product, along with the settings, files or prompts needed to deliver the feature you asked for.
• Technical data: IP address, browser and device type, pages viewed, timestamps, and diagnostic logs.
• Communications: messages you send us through the contact form, email or support, and our replies.

2. Why we use it, and our legal basis

• To provide the Services and perform our contract with you: account data, billing data, and the content you submit.
• To take payment, prevent fraud and meet tax and accounting obligations: billing data, on the basis of contract and legal obligation.
• To keep the Services secure, debug faults and prevent abuse: technical data, on the basis of our legitimate interest in a service that works and is not misused.
• To provide support and answer your questions: communications, on the basis of contract and legitimate interest.
• To send product and marketing email, where you have asked for it: on the basis of your consent, which you can withdraw at any time.

3. Artificial intelligence processing

Some features send the content you submit to third-party AI model providers so the feature can produce a result. We use providers that offer business or API terms under which submitted content is not used to train their public models. Even so, please do not submit special category data, credentials, or anything you are not permitted to share with an external processor. Where a product processes data differently, its own privacy notice will say so.

4. Who we share data with

We do not sell personal data. We share it only with providers who help us run the Services, and only as far as they need it:

• Payment providers, for payments, invoicing, sales tax and fraud screening. The provider differs per product and is named at checkout.
• Hosting and infrastructure providers that run the Services and store data.
• Email delivery providers, for transactional messages such as receipts, access codes and support replies.
• AI model providers, for features that generate output, as described above.
• Analytics providers, where used, to understand aggregate usage.
• Professional advisers, or authorities, where we are legally required to disclose something.

5. International transfers

We are based in the United Arab Emirates and our providers operate in several countries, so your data may be processed outside the country you live in. Where data protected by UK or EU law is transferred, we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.

6. How long we keep it

• Account and content data: for as long as your account is active, then deleted or anonymised within 90 days of closure, unless you ask us to remove it sooner.
• Billing records: retained for as long as tax and accounting law requires, which is generally five years in the United Arab Emirates.
• Technical logs: typically retained for up to 12 months.
• Support correspondence: retained for up to 24 months so we have context if you come back to us.

7. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected, to have it deleted, to receive a portable copy, to object to or restrict certain processing, and to withdraw consent you previously gave. You also have the right to complain to your local data protection authority.

To exercise any of these, email [email protected]. We will respond within 30 days, and we will not charge you or treat you differently for asking.

8. Security

We use encryption in transit, hashed credentials, access controls and least-privilege practices to protect data. No system is perfectly secure, but if a breach affects your personal data and creates a real risk to you, we will notify you and the relevant authority as the law requires.

9. Cookies

We use cookies and similar storage that are strictly necessary to run the site and keep you signed in. Where we use analytics or any non-essential cookie, we ask for your consent first and you can withdraw it at any time through your browser settings.

10. Children

The Services are not intended for anyone under 18, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes to this policy

We will update this policy as the Services or the law change, and we will post the new version here with a fresh date. If a change materially affects your rights, we will tell you by email or in the product.

12. Contact

For any privacy question, request or complaint, write to [email protected] and we will reply within one business day.