Privacy Policy — GenHorizon

1. Introduction

GenHorizon ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service at genhorizon.ai. Please read this policy carefully. By using the Service, you consent to the practices described here.

2. Information We Collect

2.1 Information You Provide

OAuth account information (name, email address, profile picture) from Google or GitHub when you sign in
Text prompts and images you submit for AI generation or editing
Payment information (processed and stored by Paddle — we do not store payment card details)

2.2 Information Collected Automatically

Usage data: features used, tokens consumed, generation history
Log data: IP address, browser type, pages visited, timestamps
Device information: operating system, browser version
Cookies and similar tracking technologies for session management and analytics

3. How We Use Your Information

To provide, maintain, and improve the Service
To process your AI generation requests
To manage your account, tokens, and subscription
To process payments through our payment provider Paddle
To send transactional communications (receipts, service updates)
To detect and prevent fraud, abuse, or violations of our Terms
To analyze usage patterns and improve our models and features
To comply with legal obligations

4. Information Sharing and Disclosure

We do not sell your personal data. We share your information only in these circumstances:

Paddle: Our Merchant of Record for payment processing. Paddle processes subscription and payment data under their own privacy policy.
Supabase: Our database and authentication provider, which stores your account data and generation history.
WaveSpeed AI: The underlying AI model provider that processes your generation prompts and inputs.
Vercel: Our hosting provider that may process request data.
Legal requirements: We may disclose your information if required by law, regulation, or valid legal process.

5. Cookies

We use essential cookies to maintain your authentication session and preferences. We may also use analytics cookies to understand how users interact with the Service. You can control cookie settings through your browser, though disabling certain cookies may affect functionality.

6. Data Retention

We retain your account information for as long as your account is active. Generated content is retained according to your subscription plan (30 days for Standard, unlimited for Pro and Max). Token transaction history is retained for 2 years for billing and dispute resolution purposes. You may request deletion of your account and associated data by contacting us.

7. Data Security

We implement industry-standard security measures including encrypted data transmission (HTTPS/TLS), secure authentication via OAuth, Row Level Security (RLS) on our database, and access controls limiting data access to authorized personnel. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States, where our service providers operate. By using the Service, you consent to such transfers. We ensure that appropriate safeguards are in place in accordance with applicable data protection laws.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate data
Deletion: Request deletion of your personal data ("right to be forgotten")
Portability: Request your data in a machine-readable format
Objection: Object to certain processing activities
Withdrawal of consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at support@genhorizon.ai

10. Children's Privacy

The Service is not intended for individuals under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a new effective date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: support@genhorizon.ai