Skip to main content

Privacy Policy

Last updated: March 24, 2026

1. Introduction

GenexOne LLC ("GenexOne," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us through our client portal at genexone.com. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

2. Information We Collect

We collect the following categories of information:

  • Account information: Name, email address, company name, and role, provided when your account is created by a GenexOne administrator.
  • Project data: Project details, requirements, milestones, and communications submitted through the portal.
  • Files: Documents, images, and other files you upload to the portal.
  • Payment information: Billing details processed through Stripe. We do not store full credit card numbers on our servers.
  • Usage data: Log data such as IP address, browser type, pages visited, and timestamps, collected automatically when you use the Service.

3. How We Use Your Information

We use the collected information for the following purposes:

  • Service delivery: To manage your projects, generate invoices, and provide the portal functionality you expect.
  • Communication: To send project updates, invoice notifications, and essential service-related emails.
  • Security: To detect, prevent, and respond to fraud, abuse, and security incidents.
  • Improvement: To analyze usage patterns and improve the Service.
  • Legal compliance: To comply with applicable laws, regulations, and legal processes.

4. Data Storage and Security

Your data is stored using industry-standard infrastructure:

  • Database: Hosted on Supabase with encryption at rest and in transit (TLS).
  • File storage: Files are stored on Cloudflare R2 with encryption at rest. Access is controlled through time-limited presigned URLs.
  • Authentication: Passwords are hashed using industry-standard algorithms. Session tokens are managed securely via HTTP-only cookies.

While we implement reasonable security measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

5. Third-Party Services

We use the following third-party services to operate the portal:

  • Supabase: Database hosting and authentication.
  • Stripe: Payment processing. Stripe's privacy policy applies to payment data they handle. See stripe.com/privacy.
  • Cloudflare: Content delivery, DDoS protection, and R2 file storage.
  • Resend: Transactional email delivery for notifications and communications.

These providers have their own privacy policies governing the data they process on our behalf.

6. Cookies and Tracking

We use essential cookies only to maintain your authentication session and store your preferences (such as theme selection). We do not use advertising or analytics tracking cookies. For more information, see our Cookie Policy.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Project data and files are retained for the duration of the business relationship plus a reasonable period thereafter (typically 12 months) unless you request earlier deletion. We may retain certain data as required by law or for legitimate business purposes such as resolving disputes and enforcing agreements.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete information.
  • Deletion: Request deletion of your personal information, subject to legal obligations.
  • Export: Request a machine-readable copy of your data.
  • Objection: Object to certain processing activities.

To exercise any of these rights, contact us at hello@genexone.com. We will respond within 30 days.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to these jurisdictions. We take appropriate safeguards to ensure your data remains protected in accordance with this Privacy Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the Service or via email. The "Last updated" date at the top indicates when the policy was last revised. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact Us

For privacy-related inquiries, contact us:

← Back to home