GenX Privacy Policy

GenX is operated by GenX Technologies Ltd. ("GenX", "we", "us", "our"), [Registered business address]. We are the controller of the personal data described in this policy. You can reach us at privacy@your-genx-domain.com.

This policy covers our website, web app and mobile apps (together, the "Service"). It does not cover the social platforms you connect, which have their own privacy policies.

Information you give us

• Account details: email address and, if you sign in with Google, your name and profile picture. We send one-time login codes to your email; we do not use passwords.
• Business and app details: the product or app you market, its store listing link, target audience, brand voice, goals and other onboarding answers. We may fetch the public information on your app's store listing (such as its name, icon, description and screenshots).
• Content you upload: images, videos, logos, text, scripts, voice or avatar choices, and prompts you write.
• Campaigns and schedules: content plans, captions, hashtags, scheduled posts and notes.
• Support and feedback: messages, survey answers and feedback you send us.

Information from services you connect

• Social accounts (TikTok, YouTube, Instagram, Bluesky): access tokens, account ID, username or handle, display name, profile picture, and, where you grant it, data about the posts we publish for you and their performance (for example views, likes and comments). Details per platform are in Connected social platforms.
• Payments: our payment processor, Chargebee (with its payment gateways), handles your card details. We receive your plan, billing status, invoices, country and the last four digits of your card, never the full card number.

Information collected automatically

• Usage data: pages and features used, buttons clicked, generations started, errors, and timestamps.
• Device and log data: IP address, browser and device type, operating system, language, and approximate location derived from your IP address.
• Cookies and similar technologies: see Cookies and analytics.

We do not knowingly collect sensitive data (such as health, biometric identifiers, religion or precise location). Please do not upload it.

We use your information to:

• create and secure your account and log you in;
• generate marketing plans, captions, images and videos you request;
• publish and schedule content to the accounts you connect, only as you instruct;
• show you analytics for the content we published for you;
• process payments, manage subscriptions and track your TokToken balance;
• provide support and send service messages (login codes, receipts, failed-post alerts, policy changes);
• send product news if you have not opted out (every marketing email has an unsubscribe link);
• keep the Service safe, prevent fraud and abuse, and enforce our Terms of Service;
• understand how the Service is used so we can fix bugs and improve it; and
• comply with the law.

Legal bases (EEA/UK users): we rely on contract (to provide the Service you signed up for), legitimate interests (security, analytics, product improvement and limited direct marketing, balanced against your rights), consent (non-essential cookies, connecting social accounts, and certain marketing, which you can withdraw at any time), and legal obligation (tax and accounting records).

We do not use your content or connected account data to build advertising profiles, and we do not sell it.

GenX uses artificial intelligence to create content. When you request a generation, we send the information needed for that request (for example your prompt, brand and app details, and any images or video you supplied) to the AI providers listed below. They process it to return the result to us.

• Google (Gemini API), OpenAI and Anthropic: text, planning and image generation.
• Runway and fal.ai (and the models they host): image and video generation.

We use these providers' business or API services. Under their terms they act as our service providers and, by default, OpenAI, Anthropic, Runway and fal.ai do not use data sent through their APIs to train their models. While we use the free tier of the Google Gemini API, Google may use the prompts and responses sent to it to provide and improve its products, as described in the Gemini API Additional Terms. We do not send payment details or your connected social account tokens to any AI provider. We do not use your private content to train AI models of our own.

By starting a generation, you ask us to share the content of that request with these providers. If you do not want that, do not use the AI generation features; you can still use other parts of the Service.

You choose which accounts to connect. We access only the permissions shown on each platform's consent screen, and use them only to provide features you use. You can disconnect any account at any time from Accounts in the app or from the platform itself (links below). When you disconnect, we delete that account's access tokens. Other data we stored from it is deleted within 30 days unless you reconnect it.

YouTube (Google)

GenX uses the YouTube API Services to upload and schedule videos to your channel, read your channel's basic details, and show statistics for videos we published. By connecting YouTube, you agree to the YouTube Terms of Service, and Google's use of data is governed by the Google Privacy Policy. You can revoke our access at any time from your Google Account permissions page.

GenX's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, do not let humans read it except with your permission, for security, or to comply with the law, and do not use it to train generalized AI models.

TikTok

We use TikTok Login Kit and the Content Posting API to read your basic profile (such as display name and avatar), publish or upload the videos and photos you approve, and show statistics for those posts. TikTok's handling of your data is governed by the TikTok Privacy Policy. You can revoke access in the TikTok app under Settings and privacy > Security > Manage app permissions.

Instagram (Meta)

With your permission we access your Instagram professional account's basic profile, publish the posts, reels and carousels you schedule, and read insights for that content. Meta's handling of your data is governed by the Instagram/Meta Privacy Policy. You can revoke access in Instagram under Settings > Website permissions > Apps and websites, or in Facebook under Settings > Business integrations. To delete data we received from Meta, follow How to delete your account and data.

Bluesky

We use your Bluesky handle and the credentials or app password you provide to post on your behalf and read engagement on those posts. You can revoke access by disconnecting in GenX or deleting the app password in your Bluesky settings.

We do not sell or rent your personal information. We share it only:

• With service providers that process it on our behalf under contract: cloud hosting, storage and email (Amazon Web Services), database hosting (MongoDB), payments (Chargebee and its payment gateways), AI providers (see AI processing), and analytics (Google Analytics, Google Tag Manager, PostHog).
• With the social platforms you connect, when you tell us to publish content there.
• When required by law or to respond to valid legal requests.
• To protect the rights, safety and property of our users, the public or us, and to prevent fraud or abuse.
• In a business transfer such as a merger or acquisition, in which case this policy continues to apply to your data.
• With your consent, for any other purpose.

Content you publish to a social platform becomes public according to that platform's settings and is then also governed by its policies.

• Essential cookies keep you signed in and protect against fraud. The Service cannot work without them.
• Analytics (Google Analytics, Google Tag Manager and PostHog) help us understand how the Service is used. Where the law requires it, we set these only with your consent.

You can block or delete cookies in your browser settings, and opt out of Google Analytics with the Google Analytics opt-out add-on. We do not respond to "Do Not Track" signals; we do honour Global Privacy Control signals where the law requires it.

• Account and content: while your account is active. After you delete your account, we delete it within 30 days, and remove it from backups within 90 days.
• Social access tokens: until you disconnect the account or delete your account.
• Login codes: they expire after 10 minutes.
• Billing and tax records: as long as tax and accounting law requires (usually up to 7 years).
• Logs and analytics: up to 26 months, usually in aggregated or pseudonymised form.

We encrypt data in transit (HTTPS/TLS), restrict access to people who need it, store access tokens securely, and use reputable infrastructure providers. No online service is perfectly secure, so we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the authorities as the law requires.

We and our service providers may process data in countries other than yours, including the United States. When we transfer personal data out of the EEA, UK or Switzerland, we use safeguards recognised by law, such as the European Commission's Standard Contractual Clauses and the UK Addendum.

Depending on where you live, you may have the right to:

• access, and get a copy of, the personal data we hold about you;
• correct inaccurate data;
• delete your data;
• object to or restrict certain processing, including direct marketing;
• receive your data in a portable format;
• withdraw consent at any time (this does not affect earlier processing); and
• complain to your data protection authority.

US state residents (including California, Colorado, Connecticut, Virginia, Texas and others) have the right to know, access, correct and delete personal information and to opt out of its sale, sharing for targeted advertising, and profiling. We do not sell personal information or share it for cross-context behavioural advertising. We will not discriminate against you for using these rights. If we deny your request, you can appeal by replying to our decision.

To use any right, email privacy@your-genx-domain.com from the address on your account. We may need to verify your identity. You may use an authorised agent. We respond within 30 days (45 days where US state law allows).

You can delete your GenX account and its data at any time, on the web or in the mobile app:

1. Sign in to GenX.
2. Go to Account Settings.
3. Choose Delete account data and confirm.

If you cannot sign in, email privacy@your-genx-domain.com from your account email with the subject "Delete my account". We will confirm when it is done.

What is deleted: your profile, onboarding and app details, connected social account tokens, uploaded and generated content, campaigns, scheduled posts, analytics we stored and notifications. Any active subscription is cancelled. What is kept: billing and tax records we must keep by law, and limited security logs, for the periods in How long we keep data.

Deleting your GenX account does not delete posts already published to TikTok, YouTube, Instagram or Bluesky. Delete those on each platform.

GenX is a business tool for people aged 18 or older. It is not directed to children, and we do not knowingly collect data from anyone under 18 (or under 13 in any case). If you believe a child has given us personal data, contact privacy@your-genx-domain.com and we will delete it.

Our mobile apps ask only for permissions needed for features you use, such as photo library or camera access to upload media, and notifications to tell you when a post is published or fails. You can change these at any time in your device settings. We do not collect your contacts, precise location or advertising ID.

We may update this policy. We will change the date at the top and, for material changes, notify you by email or in the app before the change takes effect.

GenX Technologies Ltd.
[Registered business address]
Privacy questions and requests: privacy@your-genx-domain.com
General support: support@your-genx-domain.com