Privacy Policy

We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support.

• •Account information (name, email, password)
• •Content you create using our AI services
• •Communication preferences
• •Payment information (processed securely by PayPal and Tranzila; we never store your full card number, only encrypted tokens)
• •IP address and browser information (user agent)
• •Domain and website URL (for WordPress plugin integration)
• •Chatbot conversation history and user feedback
• •AI generation requests and responses
• •Credit usage and billing history
• •License and subscription information

We use the information we collect for various purposes:

• •Provide, maintain, and improve our services
• •Process transactions and send related information
• •Send technical notices and support messages
• •Communicate about products, services, and promotional offers
• •Monitor and analyze usage patterns and trends

We do not sell, trade, or otherwise transfer your personal information to third parties, except as described in this policy:

• •With your consent
• •To comply with legal obligations
• •To protect our rights and prevent fraud
• •With service providers who assist in our operations
• •With AI service providers (OpenAI, Anthropic, Google, etc.) to process your content generation requests
• •With payment processors (PayPal and Tranzila) to handle transactions. Both are PCI DSS compliant
• •With Cloudflare, which delivers our media and hosts Genwave Studio front ends on its edge network

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes AES-256 encryption for sensitive data, SSL/TLS for data in transit, and regular security audits.

You have certain rights regarding your personal information:

• •Access and update your information
• •Delete your account and associated data
• •Opt-out of marketing communications
• •Request data portability

We use cookies and similar technologies to enhance your experience on our website. You can control cookie preferences through our cookie banner or browser settings.

When using Genwave Agent to manage your WordPress site, we process the following data:

• •Conversation history between you and the Agent
• •WordPress site data accessed during commands (posts, pages, products, settings)
• •Command execution logs and action history
• •Snapshots taken before content edits, kept for 30 days
• •Site URL and authentication tokens
• •When you use Genwave Studio: the public pages of your site (markup, stylesheets, images and screenshots), sent to AI providers to design and quality-check the new front end
• •The design compositions and generated code of your Studio front end
• •Custom domain records and certificate status for domains you connect
• •Order totals and currency for orders placed through a Studio front end (no personal or payment data)

If you choose to keep copies of your WordPress site backups in your own Google Drive, Genwave asks Google for a single permission: drive.file. With it, Genwave can see and manage only the files Genwave itself creates in your Drive. It cannot see, open or change any other file in your Drive.

• What we access: the backup files Genwave uploads, and the one folder it creates for them ("Genwave backups - your site"). We also read the email address of the connected Google account, only to show you which account is connected.
• How we use it: only to upload your site's backups to that folder, list them, bring one back to your site when you ask to restore it, and remove old copies according to the keep settings you chose. We use it for nothing else.
• How we store it: the access permission Google gives us (a refresh token) is stored encrypted (AES-256-GCM) on Genwave's servers. It is never sent to your website and never shown to anyone. Your website only receives short-lived access tokens, and the backup files go from your website straight to your Drive.
• Sharing: we do not sell Google user data, share it with or transfer it to third parties, use it for advertising, or use it to train AI or machine learning models. Genwave staff do not read it, except with your explicit permission for support, when needed for security, or to comply with the law.
• Retention and deletion: you can disconnect Google Drive at any time from the Backups page in Genwave Agent, or at myaccount.google.com/permissions. Disconnecting revokes Genwave's access at Google and deletes the stored token from our servers right away. The backup files in your Drive remain yours, and you can delete them in Drive whenever you like.

When using our AI chatbot feature, we collect the following information:

• •Chat messages and AI responses
• •Session identifiers
• •IP address and browser information
• •User feedback (thumbs up/down ratings)
• •Email address (if voluntarily provided)

This data is used to improve our service and may be reviewed for quality assurance purposes.

Content you submit for AI processing:

• •Is transmitted to third-party AI providers for processing
• •May be temporarily stored during processing
• •Is not used by Genwave for training our own AI models
• •May be subject to third-party provider data policies
• •Includes screenshots and markup of your website when you use Genwave Studio

We retain your data for the following periods:

• •Account data: Until you request deletion or 3 years of inactivity
• •AI generation history: 12 months
• •Chatbot conversation logs: 6 months
• •Billing and payment records: 7 years (legal requirement)
• •Analytics and usage data: 24 months
• •Undo snapshots of content edits: 30 days
• •Chat transcripts you choose to share with support: 30 days
• •Genwave Studio design data: while your front end is published, and deleted on request after it is taken down

Your data may be processed in the following locations:

• •European Union (Frankfurt, Germany): our servers and databases, including your account, your sites, chatbot conversations and the content the chatbot learns from
• •United States: AI service providers (Anthropic, OpenAI, Google) that process each request
• •Cloudflare's global network, which delivers our media and Genwave Studio front ends
• •Payment processors: Tranzila (Israel) and PayPal
• •Your WordPress server location

We use encryption (AES-256) and secure protocols (TLS 1.3) for all data transfers. Where applicable, we rely on Standard Contractual Clauses for EU data transfers.

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us immediately at [email protected].