Privacy Policy

1. Who we are

GeniusLux AI Studio ("GeniusLux", "we", "us") operates the geniusluxai.app web application. We are the data controller for the personal data described in this policy. You can reach us at hello@geniusluxai.app.

2. Data we collect

• Account data. Your email address and basic profile fields (name, avatar) received from Google when you sign in with Google.
• Generated media. Prompts you submit and the images, videos, audio, ebooks, travel guides and other assets you generate. These are stored so you can access them later from your dashboard.
• Payment data. When you buy credits or a subscription, Stripe processes your card details. We only receive limited billing metadata (amount, currency, last 4 digits, country, customer ID). We never see or store your full card number.
• Usage data. Basic analytics (pages visited, features used, credit balance changes) to improve the product and detect abuse.
• Technical data. IP address, browser, device type and cookies strictly necessary to run the app and keep you signed in.

3. Why we use it (legal bases)

• To provide the service (Art. 6(1)(b) GDPR — contract): creating your account, running generations, storing your creations, delivering support.
• To take payment (Art. 6(1)(b) GDPR — contract): charging you in euros via Stripe and issuing receipts.
• To improve and secure the service (Art. 6(1)(f) GDPR — legitimate interest): analytics, fraud prevention, abuse detection.
• To comply with law (Art. 6(1)(c) GDPR): tax, accounting, and responding to lawful requests.

4. Storage and hosting

Account data, generated media and metadata are stored in encrypted managed infrastructure inside the European Union. Files are held in private object storage and served through short-lived signed URLs. We retain your data for as long as your account exists, plus a short backup window after deletion.

5. Processors we rely on

We share the minimum data needed with the following processors:

• Google — sign-in (OAuth). Google receives that you authenticated with GeniusLux; we receive your email and basic profile.
• Stripe Payments Europe, Ltd. — processes card payments in EUR and stores billing history. Stripe acts as an independent controller for anti-fraud.
• Model providers — prompts and reference images are sent to the AI model you select in order to produce your generation.
• Cloud hosting and email — for running the app and sending transactional emails.

Where a processor is outside the EEA, transfers rely on the EU Standard Contractual Clauses.

6. Your rights under GDPR

You have the right to:

• access a copy of your personal data;
• rectify inaccurate data;
• erase your account and generated media;
• restrict or object to processing;
• data portability (export your creations);
• withdraw consent where processing is based on consent;
• lodge a complaint with your local supervisory authority.

To exercise any of these, email hello@geniusluxai.app. We answer within 30 days.

7. Cookies

We use only cookies strictly necessary for authentication and session continuity, plus a light first-party analytics cookie. We do not run advertising trackers.

8. Changes

We may update this policy as the product evolves. Material changes will be highlighted in-app or by email before they take effect.