Privacy Policy

Your account

• Email address and name.
• A password, stored only as a bcrypt hash — if you sign in with Google or an email link, there is no password.
• Your language and a few interface preferences.

Your business and what you make

• The business details you enter for each project: brand profile, brand card, logo and colours.
• Your requests to our tools, and the text, designs and videos they produce.
• Files and links you add: logos, product photos, reference videos, documents, and the pages and videos you pin to a Content Board.
• Chat messages in Genix Chat, the Content Board and other tools.

Payments and credits

Payments are handled by Paddle, our reseller and merchant of record. We receive a customer and subscription reference, your plan, the amount and the payment status — never your card number. We keep a ledger of the credits you receive and spend.

Technical data

• IP address and approximate location (country or city).
• Browser, device and operating system.
• Pages visited and errors encountered.

Accounts you connect — Facebook, Instagram and Google — are covered in the next section.

Connecting a platform is always your choice, made separately for each business in your account. We ask only for the permissions a feature needs, and you can disconnect at any time.

Facebook and Instagram (Meta)

When you connect Meta through Facebook Login, we can access:

• Your name and Meta user ID.
• The ad accounts you manage — their campaigns, ad sets, ads, creatives and results (permissions: ads_read, ads_management, business_management).
• The Facebook Pages you manage (pages_show_list, pages_read_engagement).
• If you allow publishing: posting to those Pages (pages_manage_posts) and to the Instagram professional accounts linked to them (instagram_basic, instagram_content_publish).

We use this access only to:

• Show your ad results, and check your ad account for wasted spend.
• Make a change you approve — pausing or resuming an ad, ad set or campaign, changing a daily budget, excluding placements, or launching a campaign you reviewed. Each change is made only after you confirm it, and we keep a record so you can undo it.
• Publish or schedule the posts you send from Genix, and cancel a scheduled post you take back.

We never change your ads or post anything without your action. We store an encrypted access token, the IDs and names of the accounts, Pages and Instagram accounts you chose, your audit results, a log of changes made through Genix (with the values before and after), the campaigns you launched, and the posts you published or scheduled (caption, media, status and link). We don’t sell Meta data, use it for advertising, or share it with anyone except the processors in section 5 that help run Genix.

Google Search Console

Read-only access (webmasters.readonly) to the search performance of the sites you choose — searches, pages, clicks, impressions and positions — and Google’s inspection results for pages you check. We store an encrypted token and the site you selected.

Genix’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting

Disconnect from Integrationsin your dashboard while your plan is active: the token is deleted at once and, for Meta, we revoke Genix’s access once no other business in your account uses that login. With or without a plan, you can remove Genix in your Facebook settings (Settings & privacy → Settings → Business integrations) or your Google Account (Security → Third-party connections). See Deleting your data to remove everything we hold.

• Run the tools you use and keep your work in My Work.
• Write and design in your brand, using your brand details and recent work.
• Carry out the actions you take on connected accounts (section 2).
• Process payments, grant and track credits.
• Keep accounts secure: sign-in, rate limits and fraud prevention.
• Send sign-in links and account emails, and product news you can opt out of.
• Find and fix errors, and improve the product from usage patterns.
• Measure our own advertising and see how the site is used (section 6).
• Meet legal obligations.

We don’t use your data to train AI models, and we don’t make automated decisions with legal or similarly significant effects about you.

To produce a result, the parts of your data a task needs are sent to the AI model provider doing the work: your request, your brand details and, for the Ads Agent, the ad data being explained. AI output can be wrong — review it before you publish or spend money on it.

We don’t sell, rent or trade your personal data. These providers process it on our behalf, only to run Genix:

Some of them process data outside your country, including in the United States and the European Union. We may also disclose data when the law, a court or a government authority requires it, or to protect the safety of our users or the public.

• Essential cookies keep you signed in, protect forms against forgery and remember your language. Blocking them stops the app from working.
• Advertising measurement: the Meta Pixel and the Google Ads tag set their own cookies to measure visits and purchases that come from our ads, and Meta's Conversions API reports the same events from our server.
• Usage analytics: Microsoft Clarity records how pages are used — clicks, scrolls and page views — to show us where the product is hard to use.

These run across genixbundle.com, including the app. You can block or clear cookies in your browser, and manage the ads you see in your Facebook and Google ad settings. More detail is in our Cookie Policy.

• Your account, projects and what you make — while your account exists.
• Connected-account tokens — until you disconnect or delete your account.
• Ad audits, the change log, launched campaigns and post records — while your account exists, so you can review and undo; deleted with it or on request.
• Saved tool conversations — 90 days after the last message, then deleted automatically.
• Payment records — up to 7 years, for tax and accounting law.
• Technical and error logs — up to 90 days.

When you delete your account we remove your personal data within 30 days, except records the law requires us to keep.

• Access — a copy of the personal data we hold about you.
• Correction — fix data that is wrong or incomplete.
• Deletion — delete your account and data, or only what came from a connected account.
• Portability — your data in a machine-readable format.
• Objection — object to uses such as analytics, and opt out of marketing emails at any time.

Email hi@genixbundle.com from the address on your account. We reply within 30 days. Step-by-step instructions are on Deleting your data.

• Everything travels over HTTPS.
• Passwords are hashed with bcrypt; tokens for connected accounts are encrypted at rest (AES-256-GCM).
• Database access is restricted, and actions on connected accounts are tied to the business that made them.
• Payment details never touch our servers.
• Sessions use short-lived, secure, HttpOnly cookies.

No system is perfectly secure. If you think your account has been compromised, email hi@genixbundle.com right away.

Genix Ai is for people aged 18 and over. We don’t knowingly collect data from children; if we learn we have, we delete it.

When this policy changes we update the date at the top, and we email you about significant changes. Using Genix after a change means you accept the updated policy.

Questions or requests about your privacy: Genix Ai — hi@genixbundle.com