Privacy Policy.

At Geneso, we respect your privacy and are committed to protecting your personal information. This policy describes how we collect, use, and protect your data when you use our platform.

We collect information you provide directly, such as your name, email, and payment details when creating an account. We also automatically collect technical information like your IP address, browser type, and platform usage data. Additionally, we store the prompts you use and the content you generate to improve our services.

We use your information to: provide and improve our services; process payments and manage your account; send you important communications about the service; personalize your experience; comply with legal obligations; and detect and prevent fraud or abuse.

You can connect your Geneso account to ChatGPT through the Geneso plugin. When you sign in, ChatGPT sends the sign-in request to us and we receive only what is needed to link the accounts, such as your Geneso account identifier and email address. Prompts you write in ChatGPT and the images you choose to send are forwarded to Geneso so we can generate the requested results. We store generated results in your Geneso library so they are available to you in Geneso as well. We return tool results to ChatGPT, such as links to generated media and your credit balance and library items, and ChatGPT receives that information under OpenAI's own privacy policy, which governs how OpenAI handles data inside ChatGPT. We do not receive your ChatGPT conversation history.

Prompts and images you send to us through the Geneso plugin for ChatGPT are checked by an automated AI safety classifier before we generate, which we run through the OpenRouter service. The classifier evaluates the content for unsafe categories and, when it flags a hazard, we refuse the request instead of generating. The safety classification is a single automated decision and we do not use it to build a profile of you.

We do not sell your personal information. We may share data with: service providers who help us operate the platform (payment processors, hosting services); legal authorities when required by law; and third parties with your explicit consent. Our service providers act as processors on our behalf and include Polar for payment processing, Cloudflare for hosting and content delivery, Runware for image generation, Google for account sign-in, Resend for transactional email, and PostHog for product analytics. We also use OpenRouter to run AI models on our behalf, and in doing so we share your prompts and, for the features described below, your images with it: prompts you ask us to enhance; images you submit to the Image to Prompt tool so they can be captioned; and prompts and images used to generate automatic tags for your creations. Each of them processes data only to provide their service to us and is not permitted to use it for its own purposes.

We implement technical and organizational security measures to protect your information, including encryption of data in transit and at rest, restricted access to personal data, and continuous monitoring of our systems.

You have the right to: access your personal data; rectify incorrect information; request deletion of your data; object to processing of your data; and port your data to another service. You can also remove individual images from your library at any time, and you can disconnect the Geneso plugin from ChatGPT at any time from your ChatGPT settings, which stops further prompts from being sent to us. You can delete your Geneso account and the data associated with it at any time from your account page; an active plan ends immediately, without a refund. To exercise any other right, contact us using the information at the end of this policy.

We keep personal data only as long as we need it for the purposes in this policy, or longer when the law requires it. The periods for each kind of data are:

Your data may be transferred and processed on servers located outside your country of residence. We ensure such transfers comply with applicable data protection laws through the use of standard contractual clauses or other approved mechanisms.

We may update this policy periodically. We will notify you of significant changes by email or through a visible notice on our platform. The last update date is indicated at the beginning of this document.