Privacy Policy

1.Overview

This policy applies to the GenDocX website and application. GenDocX is the controller of the personal information described here.

It does not apply to third-party services you may access through GenDocX, which have their own privacy policies.

2.Information We Collect

Account information: your email address and authentication details when you register.

Content: the files you upload, the documents you generate or edit, and the messages you send to the AI agent.

Usage data: log information, device and browser details, IP address, and how you interact with the service.

Cookies and similar technologies: see our Cookie Policy.

3.How We Use Your Information

We use your information to provide, operate, and maintain the service; to authenticate you and keep your account secure; to respond to support requests; and to understand and improve how GenDocX performs.

We may also use it to send service-related notices, such as changes to features or policies.

4.AI Training

Your proprietary document content will not be used to train foundation AI models. Your uploads and generated documents are processed only to deliver the service to you.

5.Legal Bases

Where data-protection law requires a legal basis, we process your information based on: performance of a contract (providing the service to you), legitimate interests (securing and improving the service), and consent (where applicable, such as optional cookies).

6.Storage and Security

Your data is stored in Supabase with tenant-level logical isolation, so different customers' business data is separated and each account can only access its own data.

Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access within our systems is limited to what is needed to operate the service.

7.Sharing

We share information only with service providers who process it on our behalf — such as hosting, authentication, and AI model inference providers — under contracts that limit their use of your data.

We do not sell your personal information. We may disclose information if required by law or to protect the rights, safety, and property of GenDocX, our users, or the public.

8.Retention and Deletion

We keep your information for as long as your account is active or as needed to provide the service. You can delete your documents at any time, and account deletion removes your personal data from active systems.

Backups are purged on a rolling schedule, and we may retain limited records where required by law.

9.Your Rights

Depending on your location, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing.

To exercise these rights, contact us at [email protected].

10.International Transfers

Our providers may process information in countries other than your own. Where required, we use appropriate safeguards for such transfers.

11.Children

GenDocX is not directed at children under 13, and we do not knowingly collect personal information from them.

12.Changes and Contact

We may update this policy from time to time. Material changes will be announced through the service or by email.

Questions about this policy? Email us at [email protected].