Privacy Policy

This policy explains how GENLYTICS AI LTD (company number 17512913, “Genlytics”, “we”, “us”) handles personal data when you visit genlytics.ai or use the Genlytics service. We are the controller of that data under the UK GDPR and the Data Protection Act 2018.

Who we are

GENLYTICS AI LTD, company number 17512913, registered office 20 Wenlock Road, London, England, N1 7GU. You can reach us about anything in this policy at contact@genlytics.ai.

What we collect

• Account data: your name, email address and organisation, collected when you sign up.
• Workspace data: the domains, brand and competitor names, topics and prompts you configure, and the AI engine answers and analysis we generate for you.
• Access tokens: the personal access tokens you create to connect AI tools over MCP.
• Usage data: aggregate, cookieless page analytics and technical logs (such as IP address and browser type) that keep the service secure and working.
• Correspondence: anything you send us by email.

How we use it, and our lawful basis

• To provide the service you signed up for: running your prompts, producing reports and sending run notifications (contract).
• To secure, maintain and improve the service and understand how it is used (legitimate interests).
• To send product news, only where you have opted in, and you can unsubscribe at any time (consent).
• To meet our legal, tax and accounting obligations (legal obligation).

We do not sell personal data, and we do not use your workspace data to train AI models.

Who we share it with

We use the following service providers, each bound by a data processing agreement and acting only on our instructions:

• Clerk: sign-in and account management
• Vercel: application hosting and cookieless web analytics
• Neon: database hosting
• Railway and Browserbase: running AI engine queries in a browser
• Resend: transactional and product email
• OpenAI, Anthropic, Google and Perplexity: the AI engines we query. Only the prompts and brand context needed to run your tracking are sent, through their business APIs or public web experiences.

We may also disclose data if required by law, or as part of a merger or acquisition, in which case this policy will continue to apply.

International transfers

Some of these providers process data outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.

How long we keep it

We keep account and workspace data for as long as your account is active. When you close your account we delete it within 90 days, except where we must keep records for legal or accounting reasons.

Cookies

We only use cookies that are strictly necessary to sign you in and keep your session secure. Our analytics do not use cookies.

Your rights

You can ask to access, correct, delete, restrict or port your personal data, and object to processing based on legitimate interests. Email contact@genlytics.aiand we will respond within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.

Security

Data is encrypted in transit, access is limited to people who need it, and we review our providers' security practices before using them.

Children

Genlytics is a business service and is not intended for children.

Changes

We will post any changes here and update the date above. If a change is significant we will also tell account holders by email.