Privacy Policy
Effective date: 2026-09-08 · Contact: support@geneziz.app
Overview
Geneziz is a desktop application that archives content from your own accounts and feeds (X.com bookmarks, GitHub stars, YouTube saves, Instagram saves, Reddit saves, Hacker News, RSS feeds, and pages you save from your browser) into a structured, searchable knowledge base. This policy explains what data we collect, why, and your rights.
Key point: Your archived content (bookmarks, stars, notes, AI output) is stored locally on your computer. A central server (api.geneziz.app) holds only what is necessary to operate your license, AI credits, and anti-abuse device checks — see "Server-side data" below.
What Data We Collect
| Data | Purpose |
|---|---|
| Platform credentials you choose to provide (e.g., a GitHub token, or X.com session credentials you paste in yourself) | Connect to official platform APIs under your own account |
| Tweet/bookmark content | Build your knowledge base |
| License key | Activate product and AI credits |
| License key hash (SHA-256) | Track credit balance on proxy server |
| Credit balance | Track AI credit usage |
| AI-processed output | Categorize and enrich bookmarks |
| Installation ID (UUID v4) | Identify unique installs for support; detect license abuse |
| Email address (optional) | License updates & support communications |
What we do NOT collect: The Geneziz desktop app does not collect analytics, telemetry, or tracking cookies; your bookmarks, stars, and AI output stay on your machine. Our website uses privacy-friendly, cookie-less analytics for aggregate page views. The server briefly logs your IP address for the device-activation anti-abuse check and rate-limiting, and hashes it for page-view stats; it is not used for tracking or sold. We never collect names, location data, or personal information beyond what you explicitly provide. Email is optional (used only for license delivery and support).
Third-Party Data Sharing
We share data with third parties only when you choose to use AI features:
| Provider | What Data |
|---|---|
| Google Gemini (via Geneziz Cloud proxy) | Bookmark text for enrichment |
| Anthropic (if you provide your own key) | Bookmark text for enrichment |
| OpenAI/OpenRouter (if you provide your own key) | Bookmark text for enrichment |
Proxy server (Geneziz Cloud): Our proxy server forwards your data to the AI provider and immediately discards it. We do not log, store, or retain your bookmark content, prompts, or AI responses. Only your credit balance (an integer linked to your license hash) is persisted.
When you bring your own API key (BYOK): Your data goes directly from your computer to the AI provider. Geneziz servers are not involved.
International Data Transfers
If you use Geneziz Cloud (proxy mode), your bookmark text is sent to Google Gemini in the United States. This transfer is covered by the EU-US Data Privacy Framework, which Google is certified under.
For users in Brazil (LGPD): By using the AI features, you provide explicit consent for your data to be processed in the United States, in accordance with LGPD Art. 33. You may withdraw this consent at any time by switching to BYOK mode.
Data Storage and Retention
- All user data is stored locally on your computer in markdown, YAML, and JSON files
- not have access to your data. It never leaves your machine unless you explicitly use AI features.
- Retention: You control retention. Data is stored until you delete it.
- Proxy server: No user data is retained beyond the immediate request (forwarded and discarded).
Server-side data on our infrastructure (licenses, orders, credits) includes: your email (license delivery + support), your order record containing the license key you were issued (stored so it can be re-sent if lost — never returned via API), a SHA-256 hash of the key for validation, your installation ID + a brief IP-address log for the device-activation anti-abuse gate, credit balance, and email-send logs. It is retained for the duration of your license and deleted on request via support@geneziz.app.
Your Rights
Under GDPR, LGPD, and UK GDPR, you have the following rights:
Access: See all your data
Open the files in your data directory (markdown, YAML, JSON)
Rectification: Correct your data
Edit any file directly with a text editor
Erasure: Delete your data
Run <code>geneziz reset</code> or manually delete your data directory
Portability: Export your data
Run <code>geneziz export</code> to create a zip backup
Object: Stop processing
Uninstall the application. Delete your data directory.
Withdraw consent: Remove platform access
Disconnect the source (or remove an account) in Settings → Connections, or delete the credentials from your config file
<strong>Response time:</strong> Since all data is local, you can exercise these rights immediately without contacting us. If you need assistance, email support@geneziz.app.
Data Security
- Credentials are stored in a local config file (
geneziz.config.json). Protect this file as you would any credentials file. - On the server, license keys are validated as SHA-256 hashes. The plaintext key you were issued is also stored (in your order record) so it can be re-emailed to you if you lose it; it is never returned by any API response.
- AI API calls use HTTPS encryption in transit.
- Our proxy server has rate limiting and input validation.
Children's Privacy
Geneziz is not intended for use by individuals under the age of 13. We do not knowingly collect data from children. If you are under 13, do not use this product.
Data Controller and Encarregado (LGPD)
Data controller: William Finger
Encarregado (DPO) for LGPD purposes: William Finger, support@geneziz.app
Address: Available upon request
Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Continued use of Geneziz after changes constitutes acceptance of the updated policy.