Privacy Policy

This policy describes how GenViz AI LLC ("GenViz", "we", "us") collects, uses, stores, and shares personal data when you use genviz.app and the GenViz Studio product (the "Service"). By using the Service you agree to the practices described here.

1. Data we collect

Account data

When you sign up, our authentication provider (Clerk) stores your email address, optional name, and a hashed credential. We receive your user ID and profile metadata from Clerk but do not store your password.

Usage and billing data

We record credit balances, plan tier, generation counts, and billing events so we can run the product and bill correctly. Payment card details are handled by Stripe — GenViz never sees or stores your card number.

Content you generate

Prompts, brand inputs, and generated images/text are stored against your account so you can retrieve them later. You can delete them at any time from the Studio.

Diagnostic data

We collect error reports and performance metrics through Sentry to keep the product stable. These records may contain URLs, browser version, and truncated stack traces.

2. How we use data

• To provide, operate, and improve the Service.
• To authenticate you and enforce plan limits.
• To process payments and send transactional email (via Resend).
• To detect abuse and protect the platform.
• To comply with legal obligations in the UAE and any other jurisdiction we operate in.

We do not sell your personal data. We do not train shared foundation models on your prompts or outputs.

3. Sub-processors

We use the following processors to deliver the Service. Each is contractually bound to appropriate security and confidentiality terms:

• Vercel — hosting and edge delivery.
• Supabase — primary database (Postgres).
• Clerk — authentication.
• Stripe — payments.
• FAL — image generation inference.
• Anthropic — text generation inference.
• Sentry — error reporting.
• Resend — transactional email.

4. Data retention

Account and generation history are kept while your account is active. If you delete your account, we remove personal data within 30 days, except where we must retain records to meet legal or financial obligations (for example, invoice records required under UAE law).

5. Your rights

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and comparable regimes, you may request access to, correction of, or deletion of your personal data. You may also withdraw consent or object to certain processing. To exercise any of these rights, email privacy@genviz.app.

6. Security

We use TLS in transit, encryption at rest through our infrastructure providers, and least-privilege access controls. No system is perfectly secure; if you believe your account has been compromised, email us immediately.

7. International transfers

Some of our processors operate outside the UAE. Where this happens, we rely on the processor's standard safeguards (including standard contractual clauses where applicable) to protect your data.

8. Children

The Service is not directed to anyone under 18. We do not knowingly collect personal data from minors.

9. Changes to this policy

We may update this policy as the product evolves. Material changes will be announced in-app or by email. The "Last updated" date above always reflects the current version.

10. Contact

GenViz AI LLC — privacy@genviz.app.