Privacy Policy for Geniu

Effective Date: May 29, 2026

1. Introduction

Geniu AI LLC ("Geniu", "we", "us", or "our") provides software tools for businesses, including: (a) Geniu Social Publisher, a tool to schedule and publish content to Facebook and Instagram; and (b) Geniu CRM, a customer-relationship platform that connects a business's WhatsApp Business and Facebook Messenger accounts to manage conversations and send automated, AI-assisted replies to that business's own customers. This Privacy Policy explains how we collect, use, disclose, and protect information across all of our services.

2. Information We Collect

2.1 Account Information

• Email address and password (encrypted)
• Business profile details you provide (business name, industry, contact details, services, business hours)

2.2 Social Publishing Data (Geniu Social Publisher)

• Facebook Page and Instagram Business account names, IDs, profile pictures, and usernames
• Access tokens used to publish content on your behalf
• Content you create (captions, images, videos) and post scheduling information

2.3 WhatsApp Business Data (Geniu CRM)

When you connect a WhatsApp Business account through Meta's Embedded Signup, we collect and process:

• Your WhatsApp Business Account ID (WABA), business phone number ID, and display phone number
• Access tokens used to send and receive WhatsApp messages on your behalf
• Customer data: the phone number, profile name, and message content of customers who message your business on WhatsApp

2.4 Facebook Messenger Data (Geniu CRM)

When you connect a Facebook Page, we collect and process:

• Facebook Page ID, page name, and page access token
• Customer data: the page-scoped ID (PSID), profile name (where available), and message content of customers who message your Page on Messenger

2.5 Conversation and CRM Data

• Message history between your business and its customers
• Lead records, lead scoring, status, and analytics derived from conversations

3. How We Use Your Information

• Provide and operate the Social Publisher and CRM services
• Schedule and publish content to your connected Facebook/Instagram accounts
• Receive customer messages from WhatsApp and Messenger and route them to the correct business account
• Generate automated, AI-assisted replies to your customers on your behalf
• Maintain conversation history, leads, and analytics in your dashboard
• Communicate with you about your account and comply with legal obligations

4. AI Processing of Messages

To generate automated replies, the content of customer messages is sent to our AI provider, OpenAI, solely to produce a response that is then delivered back to the customer through WhatsApp or Messenger. We instruct our AI provider not to use this data to train their models. Message content is processed only to provide the automated-reply feature you have enabled.

5. Data Storage and Security

• Data is stored securely using Supabase with encryption at rest and in transit
• Access tokens are stored securely and used only to operate the services you connect
• We use HTTPS/SSL encryption for all data transmission
• Access to your data is restricted to authorized personnel only

6. Data Sharing and Third Parties

We do not sell, trade, or rent your personal information. We share data only with the service providers necessary to operate our platform:

• Meta Platforms: to publish content and to send/receive WhatsApp and Messenger messages through Meta's official APIs
• OpenAI: to generate automated replies from message content
• Supabase: to securely store account, conversation, and CRM data
• Cloudinary: to store and optimize media for publishing
• Vercel: to host and operate our platform
• Legal Requirements: when required by law, court order, or government regulation

7. Your Rights and Choices

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your data (see our Data Deletion Instructions)
• Disconnect: disconnect any WhatsApp, Messenger, Facebook, or Instagram account at any time
• Revoke Access: revoke our access through your Meta Business or Facebook settings

8. Data Retention

• Account data: retained while your account is active
• Conversation and lead data: retained while your account is active or until you delete it
• Published post records: up to 90 days for reference

Upon account deletion, we remove all personal data within 30 days, except where retention is required by law.

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page, update the "Effective Date", and notify you by email of significant changes. Continued use of our services after changes indicates acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

This privacy policy was last updated on May 29, 2026.