Privacy Policy

Genalot is the operator of the Service and the controller responsible for your personal information. If you have any questions or wish to exercise your rights, contact us at privacy@genalot.com.

• Account information — your name, email address, password (stored only as a secure hash), and profile details you provide.
• Content you create and upload — the prompts, reference images, and other Inputs you submit, and the images, videos, and other Outputs you generate and store.
• Billing information — plan and purchase history, and transaction references. Card and payment details are collected and processed by our payment provider; we do not store full card numbers.
• Connected social accounts — where you choose to connect a social channel for scheduling or auto-posting, the authorisation tokens and account identifiers needed to publish on your behalf, handled through our distribution partner.
• Usage and device data — log data, generation activity, credit usage, IP address, browser and device information, and similar technical data, collected to operate and secure the Service.
• Cookies and similar technologies — used for authentication, preferences, and essential functionality (see Section 9).

• To provide, operate, and maintain the Service, including generating content in response to your Inputs.
• To process purchases, manage subscriptions and credits, and prevent fraud.
• To publish or schedule content to channels you connect, at your direction.
• To secure the Service, enforce our Terms, and detect and prevent abuse and prohibited content.
• To communicate with you about your Account, transactions, security, and service updates.
• To provide support and respond to your requests.
• To understand and improve how the Service is used, in aggregated or de-identified form.
• To comply with legal obligations and enforce our legal rights.

We do not sell your personal information, and we do not use your private Inputs or Outputs to train our own foundational models.

Where the GDPR or similar laws apply, we rely on the following legal bases:

• Contract — to provide the Service you have signed up for and process your purchases.
• Legitimate interests — to secure, maintain, and improve the Service and prevent abuse, balanced against your rights.
• Consent — where you connect a social account or opt in to optional communications; you may withdraw consent at any time.
• Legal obligation — to comply with laws that apply to us.

To deliver the Service we share the minimum data necessary with trusted third-party providers who process it on our behalf under contractual and security obligations. These include, by category:

• AI model providers that generate your Outputs from your Inputs (for image, video, and text generation).
• Cloud hosting and database/storage providers that run the Service and store your Account and content.
• A payment provider that processes purchases and subscriptions.
• An email provider that sends transactional messages such as confirmations and password resets.
• A social-media distribution provider that publishes content to the channels you connect.

When you submit an Input for generation, it is transmitted to the relevant AI provider to produce your Output. These providers process the data to perform the generation and under their own terms; we select providers that offer appropriate protections. A current list of named sub-processors is available on request at privacy@genalot.com.

We share personal information only as described in this policy, including:

• With the sub-processors described above, to operate the Service.
• With social platforms you connect, to publish the content you direct us to publish.
• To comply with law, legal process, or enforceable governmental requests.
• To protect the rights, safety, and property of Genalot, our users, or the public, and to enforce our Terms.
• In connection with a merger, acquisition, financing, or sale of assets, subject to this policy continuing to protect your information.

We retain personal information for as long as your Account is active and as needed to provide the Service, and thereafter as required to comply with our legal obligations, resolve disputes, and enforce our agreements. You can delete your User Content at any time, and you may request deletion of your Account. Residual copies may persist in secure backups for a limited period before being overwritten.

We use technical and organisational measures designed to protect personal information, including encryption in transit, access controls, and secure infrastructure provided by our hosting partners. Passwords are stored only as salted hashes. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential.

We use strictly necessary cookies and similar technologies to keep you signed in, remember your preferences, and operate core features. We do not use these technologies to sell your data. You can control cookies through your browser settings, though disabling essential cookies may prevent parts of the Service from working.

Genalot operates online and uses providers located in various countries. Your information may be processed in, and transferred to, countries other than the one in which you reside, which may have different data-protection laws. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for such transfers.

Depending on where you live, you may have rights over your personal information, including the right to:

• Access the personal information we hold about you and request a copy.
• Correct inaccurate or incomplete information.
• Delete your information, subject to legal retention requirements.
• Object to or restrict certain processing, and withdraw consent where processing is based on consent.
• Data portability, where applicable.
• Lodge a complaint with your local data-protection authority (in South Africa, the Information Regulator).

To exercise any of these rights, contact privacy@genalot.com. We will respond within the timeframes required by applicable law and may need to verify your identity first.

The Service is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will take appropriate steps to delete it.

The Service may contain links to third-party websites or services that we do not operate. This policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review their policies.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date and, for material changes, provide additional notice where appropriate. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

For any privacy question or request, contact privacy@genalot.com. See also our Terms of Service and Refund Policy.