Privacy policy

GenBay is the service responsible for the processing described here. For privacy requests, contact hello@genbay.io.

Data we use

We process your account name, email, login identity and preferences; photos you submit; prepared images and generated videos; task status, credits and order records; support requests, replies and attachments; and security signals needed to prevent abuse. Essential cookies maintain sign-in and language preferences. We do not store complete payment card details.

Why we use it

We use this data to provide the requested generation, keep your work accessible, manage payments and credits, secure accounts and respond to support requests. Registration, verification, password recovery, payment and creation notifications relate to your account activity. Ordinary sign-ins do not trigger a notification by default. You can change optional work notifications in your email preferences.

Processing providers

Cloudflare hosts our application, database, private storage, security checks and transactional email. Google handles Google sign-in. Depending on the configured generation provider, Apimart or fal.ai and the selected image/video model providers process submitted media to produce your requested result. Input photo safety checks may also use fal.ai independently of the generation provider. When purchases are enabled, the payment partner identified at checkout (Creem or Waffo Pancake) handles payment data, taxes and receipts as merchant of record. A payment-channel change does not transfer your earlier transaction to a different provider. Their processing and retention practices also apply. Data may be processed outside your country.

Content checks are separate from checkout. When selected, Waffo Prompt Sift checks our preset text prompts; photos are not sent to that text endpoint. Authorized reviewers may inspect submitted photos and generated clips before delivery. If automated video scanning is enabled, Sightengine receives a private copy of the clip for safety checks. We retain review decisions, file hashes and enforcement records for security and compliance; these records are not public.

Support requests are available to authorized staff. Cloudflare receives and stores email sent to our support address, including its headers and attachments, in private storage for our support team to handle in the GenBay support inbox. Replies and support notifications are sent through Cloudflare. Email conversations remain separate from your in-site ticket history; receiving an email does not create or verify a website account. We verify account ownership before disclosing private data or making sensitive account changes.

We do not sell personal data. We do not automatically publish customer work as examples. Public examples are separately selected and authorized. Temporary model input links are private capabilities that expire after at most one hour; link expiry does not by itself delete the provider’s copy.

A temporary photo draft can be saved in your browser when you leave to sign in or buy credits. It expires after one hour and is removed on the next cleanup or after submission. It is not a public upload.

Storage and your choices

Temporary model input copies expire from our dedicated input storage after one day. Your account’s original photos, prepared images and creations remain in private storage with your saved tasks until deletion or account closure, subject to operational and legal needs. Payment, fraud-prevention and accounting records may need to be retained separately. Providers may retain their own copies under their policies.

To request access, correction, export, deletion or account closure, contact hello@genbay.io from your account email. We verify ownership before acting. We protect data with access checks, encrypted connections and restricted credentials; no online service can guarantee absolute security.

Updates and contact

We update the date above when this policy changes and provide notice of material changes where appropriate. Send privacy questions to hello@genbay.io.