generativness

Privacy Policy

genera.r-s.space
Operator: PRONOTO OÜ — Registry code 16844094
Vesivärava tn 50-201, Kesklinna linnaosa, Tallinn, Harju maakond, 10152, Estonia
Last updated: 14 July 2026

1. Introduction

This Privacy Policy explains how PRONOTO OÜ ("we", "us") collects, uses, and protects personal data of users ("you") of genera.r-s.space (the "Service") in accordance with the EU General Data Protection Regulation (GDPR).

2. Data We Collect

  • Account data: email address, password (hashed), account settings.
  • Transaction data: purchase history, credit balance, amounts paid, payment method type (full card/bank details are processed solely by our payment processor and are not stored by us).
  • Usage data: prompts/inputs submitted, generated Outputs, timestamps, feature usage, device/browser type, IP address.
  • Communications: support requests and correspondence.
  • Cookies data: as described in our Cookies Policy.

3. Legal Basis for Processing

  • Performance of a contract – account administration, credit purchases, delivering generation requests.
  • Legitimate interests – service security, fraud prevention, product improvement, aggregate analytics.
  • Consent – non-essential cookies, marketing communications (where applicable).
  • Legal obligation – accounting, tax, AML/sanctions screening, and responding to lawful authority requests.

4. How We Use Data

To provide and maintain the Service; process payments and manage credits; deliver generation requests to AI model providers; prevent fraud, abuse, and prohibited use (including sanctions/geoblocking checks); provide customer support; and comply with legal obligations.

5. Sharing of Data

  • We share data only as necessary with:
  • Payment processors, to process credit purchases.
  • Third-party AI model providers/subprocessors, to generate text and image Outputs (your prompts/inputs are transmitted to these providers to produce results).
  • Hosting and infrastructure providers.
  • Regulators, tax authorities, or law enforcement, where legally required.
  • We do not sell personal data.

6. International Transfers

Some providers listed above may process data outside the EU/EEA. Where this occurs, we rely on adequacy decisions, Standard Contractual Clauses, or other GDPR-recognized safeguards.

7. Data Retention

Account and transaction data is retained for the duration of your account plus statutory periods required for accounting/tax law (generally up to 7 years). Prompts and Outputs are retained only as long as necessary for service delivery, support, and fraud prevention, after which they are deleted or anonymized.

8. Your Rights (GDPR)

You have the right to: access your data; request rectification or erasure; restrict or object to processing; data portability; and withdraw consent at any time (without affecting prior lawful processing). You may lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local supervisory authority.

9. Security

We use technical and organizational measures (encryption in transit, access controls, hashed passwords) to protect your data, but no system is completely secure.

10. Children

The Service is not directed at persons under 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Policy; material changes will be notified via the Service or email.

12. Contact

PRONOTO OÜ, Vesivärava tn 50-201, Tallinn, 10152, Estonia. Email: privacy@generaai.org