Privacy Policy

1. Data We Collect

1.1 Account Information

• Email address — to create and manage your account.
• Name (optional) — for personalisation.
• Password — stored as a secure hash. We never store your plaintext password.

1.2 Content You Create

• Prompts — text inputs processed by our AI pipeline to generate your video.
• Generated Videos — stored in your dashboard for up to 90 days, then automatically deleted.

1.3 Billing Information

• Subscription plan and billing status.
• Payment processed by Stripe. We never receive or store your card number or bank details.

1.4 Usage Data

• IP address and approximate geolocation (country/region).
• Browser type, device type, and operating system.
• Pages visited, features used, time spent in the app.
• Error logs and performance data to diagnose issues.

1.5 Cookies

• Essential cookies — authentication and security. Cannot be disabled.
• Analytics cookies — Google Analytics (GA4). Opt out via cookie banner or Google's opt-out tool.
• Preference cookies — remember your settings between sessions.

2. How We Use Your Data

• To provide the Service — process prompts, generate and serve videos.
• To manage billing — handle subscriptions, access control, and plan changes.
• To improve the product — analyse usage patterns. We do not use your Prompts or videos to train AI models without your explicit consent.
• To communicate — transactional emails (receipts, password resets). Marketing only if opted in.
• To prevent fraud — detect and block activity that violates our Terms.
• Legal compliance — retain billing records as required by Portuguese tax law.

We do not sell your data. Ever.

3. Legal Basis for Processing (GDPR)

• Contract — generating videos and billing.
• Legitimate interests — security, fraud prevention, analytics.
• Consent — marketing and non-essential cookies. Withdraw at any time.
• Legal obligation — financial records under Portuguese accounting law.

4. Third-Party Services

We use trusted providers who handle your data only as needed to perform their function:

AI language model and TTS providers process your Prompts temporarily. They operate under agreements that prohibit using your data for model training.

5. TikTok, Instagram & YouTube

Geeny generates video files for you to download and upload manually. We do not connect to your TikTok, Instagram, or YouTube accounts and we do not post on your behalf. If we ever offer direct publishing, we will request explicit consent and update this policy.

6. Data Retention

• Account data — retained for the life of your account. Deleted within 30 days of closure.
• Prompts and videos — automatically purged after 90 days.
• Billing records — retained 7 years as required by Portuguese tax law.
• Analytics data — up to 26 months (Google Analytics default).

7. Security

• TLS/HTTPS encryption in transit for all data.
• Encryption at rest for stored videos and sensitive data.
• Access controls limiting internal team access to user data.
• Regular security reviews and dependency audits.

8. Your Rights (GDPR)

• Access — request a copy of your personal data.
• Rectification — correct inaccurate data.
• Erasure — request deletion (subject to legal retention obligations).
• Restriction — limit how we process your data.
• Portability — receive your data in a machine-readable format.
• Object — object to processing based on legitimate interests.
• Withdraw consent — at any time, without affecting prior processing.

Email support@geeny.app with subject "Privacy Request". We respond within 30 days. You may also lodge a complaint with your national data protection authority.

9. California Privacy (CCPA)

California residents may request to know what data we hold, request deletion, and opt out of data "sales". We do not sell personal data. Contact support@geeny.app.

10. Children's Privacy

Geeny is not directed at children under 13 (or 16 in the EU). If you believe a child has provided us with data, contact us immediately and we will delete it.

11. International Transfers

Where data is processed by providers outside the EU, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

12. Contact