Last updated: 4 April 2026
This Privacy Policy explains how Genirize ("we", "us", "our") collects, uses, stores, shares, and protects your personal information when you use the Genirize platform, website, and related services (collectively, the "Service"). By using the Service, you agree to the collection and use of information as described in this policy.
When you create an account, we collect:
You may voluntarily provide business information to personalise your proposals:
When you create a proposal job, we collect:
When you use the "Analyse Website" feature, we temporarily fetch and process the publicly available HTML content of the URL you provide. This content is sent to a large language model (LLM) for structured extraction and is not stored after processing is complete.
We automatically collect:
We do not use third-party analytics, tracking pixels, or advertising cookies. We do not use cookies for tracking purposes. Authentication tokens are stored exclusively in your browser's local storage.
| Data | Purpose | Legal Basis (GDPR) |
|---|---|---|
| Email and name | Account creation, authentication, and communication | Contract performance |
| Company profile | Personalising generated proposals with your brand, services, and pricing | Contract performance |
| Job and proposal data | Generating, storing, and delivering proposals you request | Contract performance |
| Uploaded files | Providing context to the AI for proposal generation | Contract performance |
| Website HTML (analyse feature) | Extracting prospect company information to pre-fill job briefs | Consent (you initiate the action) |
| Technical/API logs | Service reliability, debugging, and security monitoring | Legitimate interest |
| Credit balance and usage | Tracking your account balance and billing for proposal generation | Contract performance |
All data is hosted on Amazon Web Services (AWS) in the us-east-1 (N. Virginia) region. We use the following AWS services:
Genirize uses large language models (specifically, Anthropic's Claude models via AWS Bedrock) to:
Your data is never used to train AI models. We access AI models through AWS Bedrock, which does not use customer inputs or outputs to train or improve foundation models. Your proposals, company data, and uploaded files remain yours and are never fed into any model training pipeline.
Proposals generated by the Service are AI-assisted outputs. While we apply quality checks and writing rules to maintain accuracy, you are responsible for reviewing all generated content before sending it to your clients. We do not guarantee the factual accuracy of AI-generated text.
We do not sell, rent, or trade your personal information or business data to any third party. We do not share your data with advertisers.
We use the following third-party service providers to operate the Service. These providers process data on our behalf and are bound by their own privacy and security commitments:
We may disclose your information if required to do so by law, regulation, legal process, or enforceable governmental request. We will notify you of such requests where legally permitted.
Depending on your jurisdiction, you may have the following rights regarding your personal data:
Under the GDPR and UK GDPR, you additionally have the right to:
Under the Australian Privacy Act 1988 and the New Zealand Privacy Act 2020, you have the right to access and correct your personal information. If you believe we have breached an Australian Privacy Principle (APP) or New Zealand Information Privacy Principle (IPP), you may lodge a complaint with us or with the relevant privacy commissioner.
Under the California Consumer Privacy Act and California Privacy Rights Act, you have the right to:
Under the Personal Information Protection and Electronic Documents Act, you have the right to access and challenge the accuracy of your personal information held by us.
Our infrastructure is located in the United States (AWS us-east-1). If you are accessing the Service from outside the United States, your data will be transferred to and processed in the United States. We rely on AWS's compliance frameworks (including SOC 2, ISO 27001, and participation in data transfer mechanisms) to safeguard international transfers.
For EEA and UK users, transfers are made in compliance with applicable data protection laws, including through Standard Contractual Clauses (SCCs) where required.
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. For significant changes, we may also notify you by email. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:
We will respond to all data rights requests within 30 days.