Privacy Policy

1. Introduction

We are committed to protecting your privacy and handling personal data responsibly. This policy describes the categories of information we process, why we process it, the sub-processors we rely on, and the rights available to you. By using the Service, you consent to the practices described here.

2. Information We Collect

We collect the following categories of information:

• Account information. Your name, email address, password (stored in hashed form), and workspace membership details when you register or are invited.
• Workspace configuration. The brands, prompts, competitors, target markets, and other monitoring settings you enter to configure the Service.
• Usage data. Log data about how you interact with the Service, including IP address, browser and device information, pages viewed, and timestamps.
• Billing information. Limited details necessary to manage your subscription. Full payment card details are handled directly by our payments provider and are not stored on our systems.
• Cookies and similar technologies. Identifiers used to keep you signed in and to operate and improve the Service (see the Cookies section below).

3. How We Use Information

We use the information we collect to:

• provide, operate, maintain, and secure the Service;
• run the monitoring you configure and generate reports, metrics, and competitive insights;
• authenticate users and manage workspaces and subscriptions;
• communicate with you about your account, transactions, and service-related notices;
• analyze usage to understand, troubleshoot, and improve the Service;
• detect, prevent, and address fraud, abuse, and security incidents; and
• comply with legal obligations and enforce our Terms.

4. How Monitoring Works & Data Sources

To capture how AI assistants answer buyer-intent prompts, Gensiv runs its own managed browser sessions against publicly accessible AI platforms. We submit the prompts you configure, record the answers and citations that are returned, and apply geo-targeting so results reflect the markets you care about.

You do not provide, and we do not ask for, your personal ChatGPT, Perplexity, or other AI-assistant account credentials. Monitoring is performed with infrastructure that we operate, observing publicly generated answers. The answers and citations we capture are derived from third-party platforms whose outputs we do not control.

5. Sub-processors

We rely on the following third-party sub-processors to deliver the Service. Each processes data only as needed to perform its function and under contractual data-protection obligations:

• Stripe: subscription billing and payment processing. Receives your name, email, subscription details, and payment-card data, which Stripe processes directly; we do not store full payment-card numbers on our own systems.
• OpenAI: analysis and structuring of captured AI answers, and generation of suggested competitors and prompts during onboarding. Receives brand and prompt text you configure.
• Browserbase: managed, hosted browser used to run the monitoring sessions that submit your configured prompts to AI assistants.
• Resend: delivery of transactional email (such as email verification, password resets, and workspace invitations). Receives recipient email and name.
• Google: optional single-sign-on. If you choose to sign in with Google, we receive your basic profile (name, email, and avatar).
• Cloud hosting infrastructure: our hosting provider stores your account and workspace data in managed PostgreSQL and Redis databases.

We may update this list as our infrastructure evolves and will reflect material changes here.

6. Cookies & Analytics

We use strictly necessary cookies to authenticate you and keep you signed in, and we may use limited analytics to understand aggregate usage of the Service. Where required by law, we will request your consent for non-essential cookies. You can control cookies through your browser settings, though disabling essential cookies may prevent parts of the Service from functioning.

7. Data Retention

We retain personal data for as long as your account is active or as needed to provide the Service, and thereafter as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Captured monitoring data and reports are retained to provide historical trends within your workspace. When data is no longer required, we delete or anonymize it.

8. Your Rights

Depending on where you live, you may have rights under laws such as India’s Digital Personal Data Protection Act, 2023 (DPDP Act), the EU/UK General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA/CPRA), including the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of your data;
• receive a copy of your data in a portable format (data portability);
• object to or restrict certain processing, and opt out of the sale or sharing of personal data (we do not sell personal data); and
• withdraw consent where processing is based on consent, without affecting prior processing.

To exercise any of these rights, contact us at support@gensiv.com. We will respond within the timeframes required by applicable law. You also have the right to lodge a complaint with your local data protection authority. For residents of India, you may raise a grievance with our grievance contact at the same email or by phone at +91 70165 99930.

9. International Transfers

We and our sub-processors may process and store information in countries other than the one in which you reside. Where we transfer personal data across borders, we implement appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, to ensure your data receives an adequate level of protection.

10. Children’s Privacy

The Service is not directed to children under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

11. Security

We implement technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, and destruction, including encryption in transit, access controls, and scoped credentials for our sub-processors. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will indicate changes by updating the “Last updated” date above and, for material changes, by providing additional notice where appropriate. We encourage you to review this policy periodically.

13. Contact

If you have questions or requests regarding this Privacy Policy or your personal data, contact us at support@gensiv.com, by phone at +91 70165 99930, or by mail to Zerokai Solutions at B-303, Alexa, Jagatpur, Ahmedabad 382481, Gujarat, India.