Privacy Policy
Effective Date: June 30, 2025
Last Updated: June 27, 2025
Introduction
GenerIO GmbH ("GENERIO," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect your personal data when you visit our website (generio.ai) or use our appsuite (apps.generio.ai, including products such as the Sketchurizer and Automizer).
Data Controller & Contact
Data Controller:
GenerIO GmbH
Königgrätzstr. 23
45138 Essen, Germany
contact@generio.ai
If you have any questions about this policy or our data practices, please contact us at the address above.
Data We Collect
- PERSONAL DATA
Collected email address and password for account credentials. - USER ASSETS
All data or assets you upload or create when using our services. Examples include: prompts, sketches, images, 3D models and other files or media you provide. - TECHNICAL & USAGE DATA
IP address, browser type, operating system, device identifiers, date, time, and duration of your visits; pages viewed; features used. - TRACKING & ANALYTICS DATA
Google Analytics 4 and Microsoft Clarity (only after your explicit consent). - PAYMENT DATA
When you purchase a paid plan, Stripe Payments Europe Ltd. processes on our behalf billing name, billing address, payment card details, transaction records, and, where applicable, tax identifiers.
How We Use Your Data
We process your personal data for the following purposes, each with its lawful basis under the EU General Data Protection Regulation (GDPR):
- PROVISION OF SERVICES & LICENSE MANAGEMENT
To perform our contract with you (Art. 6 (1)(b) GDPR): creating and maintaining your account, issuing licenses, and providing customer support. - SERVICE OPERATION, MAINTENANCE & IMPROVEMENT
To pursue our legitimate interests (Art. 6 (1)(f) GDPR) in enhancing, troubleshooting, and optimizing our products, including model training and performance analysis. - PERSONALIZATION & CONTENT DELIVERY
To tailor user interfaces, recommend relevant features, and deliver personalized content based on usage patterns (Art. 6 (1)(f) GDPR). - TRACKING & ANALYTICS
To collect insights on feature usage and user behavior only after you have given your explicit consent (Art. 6 (1)(a) GDPR), helping us improve usability and inform development priorities. - PAYMENT PROCESSING
To fulfill our contract with you (Art. 6 (1)(b) GDPR) by facilitating secure transactions and billing via Stripe Payments Europe Ltd. - LEGAL COMPLIANCE & REGULATORY OBLIGATIONS
To comply with legal requirements, such as tax, accounting, and anti-fraud obligations (Art. 6 (1)(c) GDPR), including responding to lawful requests from authorities.
Cookies & Tracking
- We use Google Analytics 4 and Microsoft Clarity only after your explicit consent.
- No non-essential cookies are set without your approval.
- You may withdraw or manage your consent at any time via our Cookie Settings or through your browser's controls.
Data Sharing & Disclosure
We may share your data with:
- SERVICE PROVIDERS
Hosting (e.g., Strato), analytics (e.g., Google Analytics, Microsoft Clarity), email delivery (e.g., Regfish), and payment processors (e.g., Stripe Payments Europe Ltd.). - LEGAL AUTHORITIES
When required to comply with laws or to protect our rights, safety, or property. - SUCCESSORS
In connection with a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity under similar privacy obligations.
Data Retention, Security & Deletion
- RETENTION PERIOD
Account Data & User Assets: Retained as long as your account is active and thereafter until statutory deletion deadlines expire. Technical & Usage Data: Up to 25 months (standard GA4 retention) or until you withdraw consent. Payment Data (Stripe): Retained for up to 10 years to satisfy tax and accounting laws. - SECURITY MEASURES
We implement industry-standard technical and organizational safeguards — such as encryption, access controls, and secure development practices — to protect your data against unauthorized access, alteration, or destruction. - DELETION & ANONYMIZATION
Upon your request or after retention periods lapse, we will delete or irreversibly anonymize your personal data in accordance with applicable law.
Your Rights & Communication Preferences
Under the GDPR, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Request erasure ("right to be forgotten").
- Restrict or object to processing.
- Receive your data in a structured, machine-readable format ("data portability").
- Withdraw consent for any processing based on consent.
- Lodge a complaint with a supervisory authority.
You may also manage your newsletter and other communication preferences via your Account Settings. For all requests, please contact contact@generio.ai.
Newsletter Subscription
By default, new users are subscribed to our newsletter. You may unsubscribe at any time via the link in our emails or your Account Settings.
Changes to This Privacy Policy
We will notify you at least 30 days before making material changes via email or in-app notification. Continued use of our services after the change date constitutes acceptance of the updated policy.
Dispute Resolution
If you are a consumer with a complaint about our privacy practices, you may lodge it with our lead supervisory authority:
State Commissioner for Data Protection North Rhine-Westphalia
Kavalleriestraße 2-4, 40213 Düsseldorf, Germany
https://www.ldi.nrw.de