Privacy notice

Draft placeholder · Phase 1

This is a placeholder

A formal privacy policy is not published yet. Do not treat this page as legal advice or a complete description of data processing. Contact support@genaff.cloud with questions.

GenAff stores account identity, encrypted provider credentials, GenAff API key hashes, session metadata and operational usage metadata. Prompts and completions are not stored by GenAff. Provider credentials are encrypted at rest and are never returned by the API.

Usage metadata is retained for up to 90 days; audit records for up to one year. Account deletion removes credentials, keys and sessions and anonymizes usage and audit rows.

The web app does not use third-party analytics or advertising scripts. Access tokens are kept in memory. A refresh token is stored in this browser only when you sign in, and in persistent storage only if you choose “Keep me signed in”.