Privacy & Data Rights

Privacy Policy

Last Updated: October 13, 2026 · Effective Date: October 13, 2026

1. Overview and Core Philosophy

Genra Inc. (“Genra”, “we”, “us”) respects your privacy. We are committed to minimizing data collection, avoiding invasive tracking, and giving creators total ownership over their personal information and generated works.

We do not sell user data. We do not run third-party advertising networks. We do not profile visitors across the web.

2. Telemetry and Analytics Controls

We collect anonymous, reverse-proxied usage metrics to monitor platform health, discover errors, and measure feature adoption. We do not store persistent cookies for tracking, nor do we record screen sessions or keystrokes.

Analytics Telemetry Preference

Active (Anonymous)

Genra uses cookieless, reverse-proxied telemetry with zero personal identifiers. You can opt out of all event capturing at any time.

3. Information We Collect

Account Information

When you sign up, we collect your email address via Supabase Auth for authentication (magic links or one-time codes). During onboarding, you choose a username and optional profile details (display name, avatar, bio, headline, website, and social links).

User Content & Media

We store the content you intentionally create and publish on Genra: creation metadata, cover imagery, process steps, prompts, external resource links, tool tags, and curated collections.

Technical and Operational Logs

When you browse the platform, our hosting infrastructure (Vercel and Supabase) automatically records standard HTTP access logs (IP address, user agent, requested paths, and timestamps) solely for security, abuse detection, and rate limiting.

4. How We Use Information

We use your information exclusively to:

Authenticate your account and preserve your session state.
Deliver, render, and display your AI creations and curated library items.
Enforce our Content Policy and prevent spam, abuse, or unauthorized direct writes.
Allow you to download your full archive or permanently delete your account.

5. Service Providers & Data Processors

We rely on trusted, industry-standard infrastructure providers to run Genra:

Supabase: Database hosting, user authentication, and media storage (PostgreSQL hosted in the EU).
Vercel: Edge hosting, serverless compute, and static delivery.
PostHog: Privacy-centric, self-configured analytics running in cookieless memory mode behind a reverse proxy.
Sentry: Application error tracking with PII scrubbing and zero session replay.

6. Your Rights: Export and Erasure

Regardless of your geographic location, Genra extends comprehensive data rights to every registered user:

Right of Access and Portability: You can download a complete, machine-readable JSON archive of your account, creations, steps, prompts, resources, and collections at any time from your Account Settings.
Right to Erasure (Deletion): You can permanently delete your account and all associated user data directly in your Account Settings. This immediately cleans up your media assets, purges database records, and terminates your authentication identity.

7. Security Measures

We implement defense-in-depth security including PostgreSQL Row Level Security (RLS) on all public tables, strict column-level write grants, signed session tokens, encrypted HTTPS connections, and security-definer procedures with pinned search paths.

8. Privacy Inquiries and Contact

If you have any questions, requests, or concerns regarding your privacy or data protection on Genra, please contact our data team at legal@genra.co.

1. Overview and Core Philosophy

We do not sell user data. We do not run third-party advertising networks. We do not profile visitors across the web.

2. Telemetry and Analytics Controls

Analytics Telemetry Preference

Active (Anonymous)

Genra uses cookieless, reverse-proxied telemetry with zero personal identifiers. You can opt out of all event capturing at any time.

3. Information We Collect

Account Information

User Content & Media

We store the content you intentionally create and publish on Genra: creation metadata, cover imagery, process steps, prompts, external resource links, tool tags, and curated collections.

Technical and Operational Logs

4. How We Use Information

We use your information exclusively to:

Authenticate your account and preserve your session state.

Deliver, render, and display your AI creations and curated library items.

Enforce our Content Policy and prevent spam, abuse, or unauthorized direct writes.

Allow you to download your full archive or permanently delete your account.

5. Service Providers & Data Processors

We rely on trusted, industry-standard infrastructure providers to run Genra:

Supabase: Database hosting, user authentication, and media storage (PostgreSQL hosted in the EU).

Vercel: Edge hosting, serverless compute, and static delivery.

PostHog: Privacy-centric, self-configured analytics running in cookieless memory mode behind a reverse proxy.

Sentry: Application error tracking with PII scrubbing and zero session replay.

6. Your Rights: Export and Erasure

Regardless of your geographic location, Genra extends comprehensive data rights to every registered user:

Right of Access and Portability: You can download a complete, machine-readable JSON archive of your account, creations, steps, prompts, resources, and collections at any time from your Account Settings.

Right to Erasure (Deletion): You can permanently delete your account and all associated user data directly in your Account Settings. This immediately cleans up your media assets, purges database records, and terminates your authentication identity.