Privacy Policy

1. Data Controller

The data controller responsible for your personal information is Global Trade Rhino LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States. You can reach us at help@genxisai.com.

2. Information We Collect

2.1 You provide to us

• Account data: name, email, password (hashed), profile photo, language preference, country.
• Billing data: billing name, billing address, plan, transaction history. Card details are processed directly by our payment processor; we do not store full card numbers.
• User content: prompts, uploads, generated and edited images, chat messages and any other content you submit.
• Support communications: messages and attachments you send to our support team.

2.2 Collected automatically

• Device & log data: IP address, browser, OS, device identifiers, referring URL, pages viewed, timestamps.
• Usage data: features used, generations performed, error events.
• Cookies & similar technologies: see our Cookie Policy.

2.3 From third parties

• OAuth providers (e.g. Google) when you sign in: name, email and a stable identifier.
• Payment processor: transaction status, fraud signals and limited card metadata (last 4 digits, brand, expiry).

3. How We Use Information

• Provide, operate, secure and improve the Service;
• Process AI generations and store the resulting content in your account;
• Authenticate users and prevent fraud, abuse and unauthorized access;
• Process payments, manage subscriptions and allowances, and issue receipts;
• Provide customer support and respond to enquiries;
• Send service announcements, security alerts and, with your consent, marketing messages;
• Comply with legal obligations and enforce our Terms.

4. Legal Bases (EEA / UK Users)

• Performance of a contract — to provide the Service you requested.
• Legitimate interests — to secure the Service, prevent abuse, analyze usage and improve features. You may object at any time.
• Consent — for non-essential cookies and direct marketing. You may withdraw consent at any time.
• Legal obligation — for accounting, tax and compliance.

5. AI Processing

Prompts and User Content you submit to AI features are transmitted to third-party AI model providers (including Google and OpenAI) for the sole purpose of generating the Output you request. We do not use your User Content to train our or any third party's foundation models. The Output is returned to your account.

6. Sharing of Information

We share personal information only with the following categories of recipients, under appropriate safeguards:

• Service providers / sub-processors: cloud hosting, AI providers (Google, OpenAI), payment processors (e.g. Stripe / Paddle), email delivery, analytics and customer support tools.
• Professional advisors: lawyers, auditors and insurers, where necessary.
• Authorities: when required by law, court order or to protect rights, safety and property.
• Business transfers: in connection with a merger, acquisition, financing or sale of assets, subject to confidentiality.

We do not sell your personal information for money. We do not engage in "sharing" of personal information for cross-context behavioral advertising as defined under CCPA/CPRA.

7. International Transfers

We are based in the United States and our processors may operate globally. When we transfer personal data out of the EEA, UK or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or equivalent mechanisms.

8. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Service, comply with legal obligations (e.g. tax: typically 7 years), resolve disputes and enforce our agreements. When no longer needed, data is deleted or anonymized. You can request deletion at any time (see Section 10).

9. Security

We implement technical and organizational measures designed to protect personal information, including encryption in transit (TLS), encryption at rest, access controls, row-level security, audit logging and least-privilege practices. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

10. Your Rights

Depending on your jurisdiction, you may have the right to: access, correct, delete or port your personal information; restrict or object to processing; withdraw consent; lodge a complaint with a supervisory authority; and, for U.S. residents, opt out of "sale" or "sharing" (we do not engage in either). Exercise your rights by emailing help@genxisai.com. We will respond within the timeframes required by law (typically 30–45 days). We may need to verify your identity.

11. Children

The Service is not directed to children under 16 and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us so we can delete it.

12. Automated Decision-Making

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

13. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or in-app notice and will become effective on the date stated at the top of the document.

14. Contact

Privacy questions or requests: help@genxisai.com · Global Trade Rhino LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States.