Privacy Policy

Last Updated: December 5, 2025

At Gennai ("we", "us", or "our"), accessible from https://gennai.io, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and safeguard your data when you use our invoice management service.

1. Information We Collect

We collect the following types of information to provide and improve our services:

• Account Information: Your name, email address, and profile information when you create an account or sign in with Google.
• Payment Information: Billing details processed securely through Stripe. We do not store your complete credit card information on our servers.
• Email Data (Gmail): We access your Gmail account solely to scan for emails containing invoice attachments (PDF files). We only read email metadata and attachments identified as invoices.
• Invoice Data: Information extracted from your invoices including supplier names, amounts, dates, and other relevant billing details.
• Google Drive Data: We create and organize folders in your Google Drive to store your extracted invoices.
• Usage Data: Information about how you interact with our service, including log data and analytics.

2. How We Use Google User Data

Gennai's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we use Google user data as follows:

• Gmail Access: We scan your inbox to identify emails with PDF attachments that contain invoices. We use AI to extract relevant data from these invoices. We do not read, store, or process the content of your personal emails.
• Google Drive Access: We create organized folders (by year and month) in your Google Drive and upload your extracted invoices for easy access and backup.
• Limited Use: We only use Google user data for the purposes described in this policy. We do not use this data for advertising, and we do not sell or share it with third parties except as required to provide our service.

3. Data Usage for AI/ML Models

Gennai does not use any user data, including data obtained through Google Workspace APIs, to develop, improve, or train generalized AI and/or ML models. Your data is used solely for providing the Gennai invoice extraction and organization services as described in this Privacy Policy.

4. Purpose of Data Collection

We collect and process your data for the following purposes:

• To provide our core invoice extraction and organization service
• To display your invoices and spending analytics in your dashboard
• To enable sharing and collaboration with your accountant or team members
• To process payments and manage your subscription
• To communicate with you about service updates and support
• To improve and optimize our service

5. Data Sharing

We do not sell your personal data. We only share your data in the following circumstances:

• Service Providers: We use trusted third-party services to operate our platform, including Stripe (payments), Clerk (authentication), and cloud infrastructure providers. These providers only access data necessary to perform their services.
• With Your Consent: When you choose to share invoice access with your accountant or team members.
• Legal Requirements: When required by law or to protect our legal rights.

6. Data Protection and Security

We implement industry-standard security measures to protect your data:

• All data transmission is encrypted using TLS/SSL
• Data at rest is encrypted using AES-256 encryption
• We use secure OAuth 2.0 for Google authentication
• Access controls and authentication protect your account
• Regular security audits and monitoring

7. Data Retention and Deletion

We retain your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Active Accounts: Your data is retained while your account is active and you maintain a subscription.
• Account Cancellation: Upon cancellation, your data will be deleted within 30 days, except where we are required to retain it for legal or compliance purposes.
• Data Deletion Requests: You may request deletion of your personal data at any time by contacting us at privacy@gennai.io. We will process your request within 30 days.
• Google Data: Google user data will be deleted when you disconnect your Gmail account or cancel your subscription.

8. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Request your data in a portable format
• Revoke Access: Disconnect your Google account at any time through your dashboard settings or through Google's security settings

9. Cookies and Tracking

We use essential cookies to maintain your session and preferences. We may use analytics cookies to understand how users interact with our service. You can control cookie preferences through your browser settings.

10. Children's Privacy

Our services are not intended for individuals under the age of 13. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. International Data Transfers

Your data may be processed in countries outside your country of residence. We ensure appropriate safeguards are in place for any international data transfers in compliance with applicable data protection laws.

12. Updates to This Policy

We may update this Privacy Policy from time to time. Any significant changes will be communicated via email to registered users. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Email: privacy@gennai.io
Website: https://gennai.io