This policy explains what Genopty collects, why, and what control you have over it. Genopty is operated by Slowgrain Labs Private Limited ("Slowgrain Labs", "we", "us"), a company incorporated in India, CIN CIN, registered at registered office address.
Questions about this policy go to privacy@genopty.com.
When you create an account we collect your email address and a securely hashed password (we never see or store your password in readable form). If you sign in with a third-party provider, we receive your email address and basic profile identifier from them.
During onboarding you tell us about your brand — name, website, industry, category, description, and the competitors you want tracked. We use this to generate the questions we ask AI engines on your behalf.
Running a scan produces: the questions asked, the answers returned by each AI engine, whether and how your brand was mentioned, its rank, sentiment, factual accuracy, the sources each engine cited, and the resulting Visibility Score. This is your data and is tied to your organisation.
Payments are processed by Razorpay. We do not receive or store your card number, CVV, UPI PIN or bank credentials. We store your plan, subscription status, billing cycle, invoice history, and the identifiers Razorpay gives us.
The free audit runs without an account. We store the brand name and details you type into it, the questions generated, the engine responses, and the resulting score, together with a coarse record of the request (including a truncated or hashed IP address) used solely to enforce rate limits and prevent abuse.
We record which pages and features are used, and basic technical information your browser sends (browser type, operating system, approximate region, referring page). We use cookies and similar storage for sign-in sessions and for these analytics.
| Purpose | Data used | Legal basis |
|---|---|---|
| Provide the service — run scans, compute scores, show your dashboard | Account, brand, scan data | Performance of contract |
| Bill you and manage your subscription | Account, billing data | Performance of contract |
| Send service email — alerts, scan completion, security and account notices | Account data | Performance of contract / legitimate interest |
| Prevent abuse and control cost on the free audit | Free audit data, truncated IP | Legitimate interest |
| Improve the product and fix faults | Usage analytics, aggregated scan metadata | Legitimate interest |
| Marketing email about Genopty | Email address | Consent — withdrawable at any time |
Genopty works by asking third-party AI engines questions about your category. The questions we send are about your brand and its market — they do not contain your account credentials, billing details, or any data you have not asked us to research. Those engines are independent controllers of what they receive and are governed by their own terms and privacy policies.
Engines we query include ChatGPT, Gemini, Claude, Perplexity, Grok, DeepSeek, Mistral, Qwen, Cohere and Gemma, reached through OpenRouter and directly through Perplexity. The exact set depends on your plan and which engines are active.
We use a small number of vendors as processors. Each is bound to use the data only to provide its service to us.
| Vendor | What it does | Where |
|---|---|---|
| Supabase | Database, authentication and file storage | region |
| Railway | Hosts the API and scan worker | region |
| Vercel | Hosts the web application | Global edge network |
| Framer | Hosts this marketing site | Global edge network |
| OpenRouter | Routes queries to multiple AI engines | United States |
| Perplexity | AI engine queried directly | United States |
| Tavily | Source and citation discovery | United States |
| Razorpay | Payments and subscriptions | India |
| Resend | Transactional and alert email | United States |
| Mixpanel | Product analytics | United States |
Some of these are outside India. Where data is transferred internationally we rely on the vendor's contractual safeguards. We do not sell your personal data, and we do not share it with advertisers.
Data is encrypted in transit (TLS) and at rest. Access to tenant data is enforced at the database level with row-level security, so one customer's data is not reachable from another customer's session. Provider API keys and service credentials are held server-side only and are never sent to your browser. Access to production systems is limited to personnel who need it.
No system is perfectly secure. If a breach affects your personal data we will notify you and the relevant authority as required by law.
You can ask us to: give you a copy of your data; correct it; delete it; restrict or object to a particular use; or transfer it elsewhere. You can also withdraw consent for marketing email at any time using the unsubscribe link or by writing to us.
Write to privacy@genopty.com. We respond within 30 days. If you are unhappy with the outcome you may complain to the relevant data protection authority.
In accordance with the Information Technology Act, 2000 and rules made under it:
Name
Slowgrain Labs Private Limited
registered office address
Email: grievance@genopty.com
Genopty is a business product and is not directed at anyone under 18. We do not knowingly collect data from children.
We may update this policy. If a change materially affects your rights we will notify you by email or in the product before it takes effect. The "Last updated" date above always reflects the current version.