Privacy Policy

• Account details: name, business name, email address and password (stored securely, never in plain text).
• Business profile information you choose to provide, such as services, regions, rates and goals.
• Content you create or upload, including documents, notes, bids and conversations with Genie.
• Membership and payment records, including billing dates and the payment provider's reference. We do not store full card details.
• Records of the legal documents you accepted, including the date, time and version.
• Technical data such as log data, device and browser information, and cookie data.

• To provide the platform and your member features.
• To personalise Genie's guidance using your business profile.
• To take payment and manage your membership.
• To keep the platform secure and investigate misuse or account sharing.
• To improve the service and fix problems.
• To meet legal and accounting obligations.
• To send service messages, and marketing only where you have agreed to it.

• Contract: providing the membership you have paid for.
• Legitimate interests: securing the platform, preventing misuse and improving the service.
• Consent: non-essential cookies and marketing messages, which you may withdraw at any time.
• Legal obligation: tax, accounting and record-keeping requirements.

Your messages and relevant business profile information are sent to our AI providers so that Genie can generate a response. We ask providers to process this data only to deliver the service.

Please do not enter personal data about other people that is not necessary for the task, and avoid uploading special category data unless you need to and are lawfully able to.

We do not sell your personal data.

• Hosting, database and infrastructure providers.
• AI model providers used to generate responses.
• Payment providers who process your membership payments.
• Email and support tooling.
• Professional advisers and authorities where legally required.

We keep account and content data while your membership is active. After cancellation we retain data for a reasonable period so you can rejoin or request a copy, and we retain financial and legal records for as long as the law requires.

You may request deletion of eligible personal data at any time. Some records must be retained where legally required or necessary for legitimate business purposes.

To exercise a right, contact [DATA PROTECTION CONTACT].

• Access a copy of your personal data.
• Correct inaccurate data.
• Request erasure of eligible data.
• Restrict or object to certain processing.
• Request portability of data you provided.
• Withdraw consent where processing relies on it.
• Complain to the Information Commissioner's Office.

Some providers may process data outside the UK. Where that happens we rely on appropriate safeguards such as UK adequacy regulations or International Data Transfer Agreements.

We use encryption in transit, access controls and row-level database security. No system is completely secure, so please use a strong, unique password.