Privacy Policy
Last updated: March 2026
1. Who We Are
Genju AI is a SaaS platform operated from Malta. We are the data controller for personal data processed through our platform. Contact: hello@genju.ai
2. Data We Collect
- Account data: name, email address, phone number, business name, business address.
- Business data: contacts, invoices, bookings, messages, proposals, and other content you create.
- Usage data: pages visited, features used, device info, browser type, IP address.
- Payment data: processed securely by Stripe. We never store card details.
- Cookies: essential cookies for authentication and session management.
3. Why We Collect It
- To provide, maintain, and improve our services.
- To process payments and manage subscriptions.
- To send transactional communications.
- To provide AI-powered features.
- To analyse usage patterns and improve the platform.
- To comply with legal and regulatory obligations.
4. Legal Basis (GDPR Article 6)
- Contract: processing necessary to deliver the services.
- Legitimate Interest: analytics, fraud prevention.
- Consent: marketing emails, optional cookies.
- Legal Obligation: tax compliance.
5. Data Retention
- Active accounts: data retained for the duration of your account.
- Deleted accounts: personal data deleted within 30 days.
- Payment records: retained for 7 years per Malta tax law.
- Usage logs: anonymised after 12 months.
6. Who We Share With
We do not sell your personal data. We share data only with processors under strict DPAs:
- Stripe — payment processing
- Supabase — database hosting (EU)
- Resend — transactional email
- Twilio — SMS and WhatsApp
- AI model providers — content generation
7. Your Rights
Under the GDPR, you have the right to:
- Access a copy of your personal data
- Rectify inaccurate or incomplete data
- Request erasure ("right to be forgotten")
- Data portability (JSON or CSV)
- Restrict or object to processing
Email hello@genju.ai. We respond within 30 days.
8. Cookies
We use essential cookies only. No advertising or tracking cookies.
9. International Transfers
Primary infrastructure is EU-hosted. Where data transfers outside the EU, we use EU Standard Contractual Clauses.
10. Contact / Data Protection Officer
Email: hello@genju.ai
Address: Genju AI, Malta
11. Updates to This Policy
Material changes communicated via email at least 30 days before taking effect.