Privacy Policy

1. Scope

This Privacy Policy explains how Genify, an individually operated service based in China, handles personal data when you visit genify.chat, create an account, use AI creation tools, make a purchase, or contact support. In this policy, "Genify," "we," "us," and "our" refer to the operator responsible for the Service. Privacy contact: contact@genify.chat.

2. Information we collect

We may collect:

Account information: name, email address, profile image, login provider, and account identifiers.
Creation information: prompts, uploaded images or other inputs, model and task settings, generated outputs, task identifiers, and technical processing records.
Usage and device information: pages and features used, timestamps, IP address, browser, operating system, referring page, diagnostics, and security events.
Billing information: customer and order identifiers, purchased product, amount, currency, tax and payment status, subscription status, invoice links, and refund records. Genify does not directly store complete payment-card details.
Support information: your contact details, messages, and any account, task, order, or diagnostic information you include in a support request.
Cookie and consent information: language, sign-in state, cookie preferences, and analytics data when you consent to analytics. See our Cookie Policy.

3. How we use information

We use this information to:

create and secure accounts;
validate inputs, submit generation tasks, deliver outputs, and manage Works storage;
calculate, deduct, return, and audit credits;
process orders, subscriptions, plan changes, cancellations, invoices, refunds, and fraud checks;
provide support and investigate account, billing, safety, and technical issues;
maintain, diagnose, measure, and improve the Service;
enforce our Terms of Service and Acceptable Use Policy; and
comply with legal, tax, accounting, security, and regulatory obligations.

Depending on your location and the activity, we process data to perform our contract with you, comply with law, protect legitimate interests such as security and fraud prevention, or act on your consent.

4. AI generation providers

To provide a generation, Genify sends the prompt, selected settings, and required input files to the applicable AI model provider. Providers may independently evaluate inputs and outputs under their own safety policies.

Do not submit confidential information, biometric identifiers, personal data you are not authorized to use, or material you do not have permission to process.

Safety processing is separate from generation through fal.ai:

Prompts first pass Genify rules, then Waffo Prompt Sift. Generation starts only after explicit approval. If review is needed or the checker is unavailable, the request stops; brief outages may receive limited retries. Check references support investigation and appeals, not an official human queue or a promise of automatic generation later.
Generated image content is sent to OpenAI's content moderation service. For video, Cloudflare Media processes the source to extract one midpoint frame; only that frame, not the full video or audio, is sent to OpenAI.
OpenAI describes API data as not used for training by default unless sharing is explicitly enabled. Processing and any applicable retention remain subject to its API data controls; we do not promise zero retention or claim approval for special retention controls. Providers may process data internationally.
Genify's authorized operator may inspect held original outputs and video frames for output review. Moderation logs contain task/material digests, rule and model versions, structured scores/categories, request references, sampling times, technical retry plans and operator decisions. They do not store media bytes, secret keys or copies of prompt text. Prompts remain separately stored as creation information in task history; this is not a claim that prompts are never retained.
Known or suspected child-sexual-abuse material is not forwarded to OpenAI Moderation. Contact support without attaching prohibited material.

Automated checks do not establish comprehensive rights, consent or identity clearance, and a single sampled frame does not cover a whole video or its audio. See our AUP.

5. Payments

When Waffo Pancake is identified at checkout, Waffo acts as the online reseller, legal seller, and Merchant of Record for that transaction and processes payment-card, checkout, tax, transaction-document, fraud-prevention, dispute, chargeback, and refund information under its own Privacy Policy. Transactions through another checkout provider are processed under that provider's privacy terms. Genify receives the transaction and subscription details needed to activate products, maintain your account, provide support, and reconcile payments. Genify does not directly receive or store complete payment-card details.

6. Other service providers and disclosures

We use service providers for authentication, cloud hosting and storage, AI generation, payments, email delivery, analytics, and customer support. They receive only the data reasonably needed to perform their services and may process it in other countries.

We may also disclose information when required by law; to protect users, Genify, or the public; to investigate fraud, abuse, or security incidents; or as part of a merger, financing, acquisition, or transfer of assets, subject to appropriate safeguards.

We do not sell personal data or use it to build cross-site advertising profiles.

7. Retention

Generated works are normally available in Works for up to 60 days and may be removed sooner if the account exceeds its storage allowance.
Generation inputs are transport data and are scheduled for deletion on a shorter cycle, normally within one day.
Held output references are accessible to authorized reviewers for up to 7 days from task submission, or until a final rejection clears them sooner. The task is not exposed to users while held. Scheduled cleanup closes expired, undelivered held tasks with eligible credit return; tasks already being delivered may finish closing later. We do not keep a permanent rejected-works library.
Temporary sampled frames are processed in memory, not stored as R2 works. Admin-browser preview object URLs are revoked when the preview is closed or unmounted. Final rejected output references are removed from our task record, not deleted from independent providers' systems; their policies govern their own copies.
Input, output and operator moderation audit records are normally scheduled for deletion after 180 days. Records connected to unresolved tasks or pending credit returns are protected until those states settle. Credit and payment ledgers are separate accounting records and are not deleted by this moderation cleanup.
Cleanup runs in bounded scheduled batches. Maintenance, faults or a backlog can delay physical deletion; expiration of held-media access is enforced even before cleanup catches up. Independent provider availability can also end earlier than our review window.
Account data is kept while the account is active and for a reasonable period afterward when needed for security, dispute resolution, or legal compliance.
Billing, tax, fraud, security, support, and audit records may be retained longer where needed for legal obligations and legitimate business records.

Deleting an account starts the applicable cleanup process, but it does not require us or an independent payment provider to delete records that must be retained by law or for fraud, security, accounting, or dispute purposes.

8. Security

Content reports and safety appeals submitted through Contact are private support records. They include the supplied name, email, content or task reference, message, operator decisions and reply evidence. Closed cases are normally scheduled for deletion 180 days after their latest action; open cases and pending credit settlements are protected until resolved. Do not include prohibited media or credentials. Rule-review records are normally retained for 180 days. These records are not published in the Prompt Library.

We use technical and organizational safeguards designed to protect personal data, including access controls, authenticated delivery, and restricted storage. No online service can guarantee absolute security. Protect your password and contact us promptly if you suspect unauthorized account activity.

9. Your choices and rights

You can update account information, manage cookie consent, delete eligible works, and request account deletion through available product controls. Depending on applicable law, you may also request access, correction, deletion, restriction, portability, or objection to certain processing, or withdraw consent where processing relies on consent.

To make a privacy request, email contact@genify.chat from the address associated with your account. We may verify your identity before acting. You may also have the right to complain to a local data-protection authority.