Legal

Privacy Policy

Last updated: April 14, 2026

This Privacy Policy describes how Generative Engine Solutions ("GES," "we," "us," or "our") collects, uses, shares, and protects information about you when you use our platform at app.generativeenginesolutions.com. We are committed to handling your data responsibly and transparently.

1. Introduction

Your privacy is important to us. This policy explains what data we collect, why we collect it, how we use it, and the choices you have. By using GES, you agree to the collection and use of information as described in this policy.

This policy applies to the GES web platform and any related services, communications, or support interactions. It does not apply to third-party websites or services linked from GES.

2. Information We Collect

Account information

When you register for a GES account, we collect your email address and, if provided, your name and company name. This information is used to create and manage your account.

Content you provide

When you use GES modules, you provide inputs such as domain names, brand names, company descriptions, product details, and existing web pages. We process this content to generate your requested outputs. We do not use your content to train AI models or share it with other customers.

Automatically collected data

We collect usage data automatically when you interact with the GES platform. This includes:

  • Pages visited, features used, and time spent on the platform.
  • Module runs, credit consumption, and output generation events.
  • Browser type, operating system, IP address, and general geographic location.
  • Referring URLs and click paths.

This data is collected via PostHog, our product analytics tool. We use it to understand how the platform is used, diagnose errors, and improve product features.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the GES platform and its modules.
  • Process your subscription and credit transactions via Stripe.
  • Authenticate your identity and secure your account.
  • Send transactional emails (account creation, billing, password reset, usage alerts).
  • Respond to support requests and troubleshoot issues.
  • Analyze product usage to prioritize feature development.
  • Detect and prevent fraud, abuse, and violations of our Terms of Service.
  • Comply with legal obligations.

We do not sell your personal information. We do not use your personal data for advertising or share it with advertising networks.

4. Data Sharing and Third-Party Services

GES shares data with third-party service providers only as necessary to deliver the platform. The following providers may process your data:

Supabase

Hosts our database and handles user authentication. Your account data, session data, and module outputs are stored in Supabase-managed infrastructure. Data is encrypted at rest and in transit.

Stripe

Processes payments for paid subscriptions. GES does not store your full payment card details. Stripe collects and processes payment data according to its own privacy policy and PCI-DSS compliance requirements.

PostHog

Collects product analytics events including page views, feature usage, and user interactions. PostHog is self-hosted or used under a data processing agreement that limits secondary use of your data.

n8n

Orchestrates the workflow automation that runs GES modules. Your inputs are passed through n8n workflows to generate outputs. n8n processes data on GES-controlled infrastructure.

Anthropic (Claude)

Provides AI content generation for certain GES modules. Your inputs are sent to Anthropic's API to generate structured outputs. Anthropic's data handling is governed by Anthropic's API terms and privacy policy.

Google (Gemini)

Provides AI content generation for certain GES modules. Your inputs may be sent to Google's Gemini API. Google's data handling is governed by Google's API terms and privacy policy.

DataforSEO

Provides data retrieval for AEO scanning, including queries sent to AI engines and search data. Domain names and query strings are sent to DataforSEO's API to retrieve citation data.

GES may also disclose your information if required by law, court order, or governmental authority, or to protect the safety, rights, or property of GES, its users, or the public.

5. Data Retention

We retain your account information and module outputs for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes (such as billing records, which are retained for seven years).

Analytics event data is retained for up to 24 months and then aggregated or deleted. You may request earlier deletion of your personal data by contacting us at privacy@generativeenginesolutions.com.

6. Data Security

GES takes reasonable technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. Our security practices include:

  • All data transmitted between your browser and GES servers is encrypted using TLS 1.2 or higher.
  • Data stored in Supabase is encrypted at rest using AES-256 encryption.
  • Row-level security (RLS) policies restrict database access so each user can only access their own data.
  • Access to production systems is restricted to authorized GES team members with multi-factor authentication.

No method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it responsibly to security@generativeenginesolutions.com.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data GES holds about you.
  • Correction: Request correction of inaccurate or incomplete personal data.
  • Deletion: Request deletion of your personal data (subject to legal retention requirements).
  • Portability: Request your personal data in a structured, machine-readable format.
  • Objection: Object to processing of your personal data for certain purposes, including direct marketing.
  • Restriction: Request that GES restrict processing of your data in certain circumstances.

To exercise any of these rights, email privacy@generativeenginesolutions.com. We will respond within 30 days. We may need to verify your identity before processing your request.

8. Cookies and Tracking

GES uses the following categories of cookies and local storage:

  • Essential cookies: Required for authentication, session management, and core platform functionality. These cannot be disabled.
  • Analytics cookies: Set by PostHog to track product usage events. These help us improve the platform. You can opt out of analytics tracking via the GES privacy settings.

GES does not use advertising cookies or third-party tracking pixels from advertising networks. You can control cookies via your browser settings, but disabling essential cookies will prevent you from using the platform.

9. Children's Privacy

GES is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from anyone under 16. If we become aware that we have collected personal data from a child under 16, we will delete that data promptly. If you believe a child has provided us with personal data, please contact privacy@generativeenginesolutions.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you via email and/or a notice on the platform before the changes take effect.

The most current version of this policy is always available at app.generativeenginesolutions.com/privacy. The date at the top of this page indicates when the policy was last updated.

11. Contact

If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please contact our privacy team:

Generative Engine Solutions

Email: privacy@generativeenginesolutions.com

Website: app.generativeenginesolutions.com