We respect your privacy. This policy explains what data we collect, how we use it, and your rights. Your organizational data processed by our platform never leaves your infrastructure.
When you interact with us — by requesting a demo, signing up for a trial, contacting sales, or opening a support ticket — we collect contact information such as name, email address, phone number, company name, job title, and any other information you choose to provide in your message.
When you visit our website, we collect limited technical information including IP address (anonymized after 30 days), browser type and version, operating system, referring URL, pages viewed, and time spent on pages. We use privacy-respecting analytics and do not use third-party advertising trackers.
Critical distinction: Genovation is an on-premise / self-hosted platform. Your organizational data — the documents, databases, and content processed by Mentis agents — never leaves your infrastructure. We do not have access to it, we do not collect it, and we cannot see it. This section refers only to account-level metadata (e.g., user login events, license usage counts) transmitted for licensing and support purposes.
Platform telemetry, when enabled by your administrator, may include agent invocation counts, license seat usage, software version information, and aggregate error logs (which are stripped of content before transmission). This telemetry can be fully disabled for air-gapped deployments.
We use your personal information for the following purposes:
We do not use your data for automated decision-making or profiling. We do not sell your personal information. We do not use it for advertising purposes.
If you are located in the European Economic Area, United Kingdom, India, or any jurisdiction that requires a legal basis for processing personal data, we process data in accordance with the Digital Personal Data Protection Act, 2023 (India), the GDPR (EU/EEA/UK), and other applicable laws. Our legal bases:
| Purpose | Legal Basis |
|---|---|
| Providing our services | Performance of a contract |
| Responding to your inquiries | Legitimate interest |
| Security and fraud prevention | Legitimate interest |
| Marketing (where applicable) | Consent |
| Legal compliance | Legal obligation |
We do not sell, rent, or trade your personal information. We may share information with:
We do not share data with advertising networks, data brokers, or social media platforms.
We retain personal information only for as long as necessary to fulfill the purposes described in this policy. Specific retention periods:
| Data Type | Retention Period |
|---|---|
| Account information | Duration of the business relationship + 12 months |
| Sales inquiry data | 24 months from last interaction |
| Website analytics | 14 months (aggregated), IP anonymized after 30 days |
| Support tickets | 36 months from resolution |
| Platform telemetry | 12 months (aggregated) |
When retention periods expire, data is securely deleted or irreversibly anonymized.
We implement technical and organizational measures appropriate to the sensitivity of the data we process, including encryption in transit (TLS 1.3) and at rest (AES-256), access controls based on least-privilege principles, regular security assessments, and employee security training. Our platform is designed from the ground up around a zero-trust, data-sovereign architecture — see our Security page for details.
If we transfer personal data outside your jurisdiction, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions where applicable, and supplementary measures as required by applicable law. Your platform data, by design, remains within your own infrastructure and is not subject to international transfer by Genovation.
Depending on your jurisdiction, you may have the right to:
To exercise these rights, submit a request via our DSAR Request page. We will respond within 30 days (or sooner, as required by applicable law).
Genovation is an enterprise platform. We do not knowingly collect personal information from individuals under 16 years of age. If you believe we have inadvertently collected such data, please contact us and we will promptly delete it.
We may update this policy from time to time. Material changes will be communicated via email to registered contacts and posted prominently on our website at least 30 days before they take effect. Continued use of our services after changes take effect constitutes acceptance.
For privacy-related questions or requests:
Genovation Technological Solutions Pvt Ltd — Privacy Team
Email: privacy@genovation.ai
Registered Office: Kolkata, West Bengal, India
Data Protection Officer: dpo@genovation.ai
If you are unsatisfied with our response, you have the right to lodge a complaint with the relevant data protection authority, including the Data Protection Board of India under the DPDP Act, 2023.