Last updated: 29 July 2026.

This policy explains what personal data Gensudo (“we”, “us”) collects through this website and the Gensudo application, why we collect it, and the rights you have over it. We aim to collect the minimum we need to run the service well.

Data controller: GENSUDO LTD, company number 17169415, registered in England and Wales.

What we collect

Account data — when you sign up we receive your name and email address from your sign-in provider (we use Google and Microsoft sign-in; we never see or store a password).
Profile information — when you set up your account we ask for your job role, team or function, industry, company website, company size and country.
Contact enquiries — the details you submit through our contact form (name, email, company information and your message).
Billing data — subscriptions are processed by Stripe. We do not receive or store your card details; Stripe shares only what we need to manage your plan.
Usage analytics — we use Google Analytics to understand how the website is used (pages visited, approximate location, device type).
Content you create — projects and documents you create in the application are stored securely and are yours.

How we use it

To provide and operate the Gensudo service, including AI-assisted document features.
To respond to your enquiries and provide support.
To manage subscriptions, billing and account administration.
To understand aggregate usage and improve the product and website.
To send you information about Gensudo products, features and updates. You can unsubscribe at any time - see "Marketing and unsubscribing" below.
To meet our legal obligations.

Marketing and unsubscribing

We use the contact and profile details you give us to send you information about Gensudo - product updates, new features and occasional news about the service. We rely on our legitimate interest in promoting our product to business users, and we tell you this at the point we collect your details.

You can opt out at any time. Every marketing email includes an unsubscribe link, and you can turn marketing emails off in Settings in the app. Opting out takes effect immediately and does not affect service messages we need to send you, such as billing receipts, security notices or changes to your account.

We do not sell your details, and we do not share them with third parties for their own marketing.

AI features

When you use AI features, relevant project context is sent to our AI model providers to generate drafts, research and reviews. We do not use your content to train models. AI research retrieves information from the public web; the sources used are shown alongside the output. Your profile information is not sent to AI providers.

Who we share data with

We use a small set of processors to run the service: Supabase (database and authentication), Vercel (hosting), Stripe (payments), Resend (transactional email), Cloudflare (form-abuse protection), Google (sign-in and analytics) and Microsoft (sign-in). Each processes data only on our instructions. We never sell personal data.

Retention

We keep personal data only as long as needed for the purposes above: account data for the life of your account, contact enquiries for up to 24 months, and billing records as required by law. You can ask us to delete your account and its data at any time.

Your rights

Under UK GDPR you have the right to access, correct, delete, restrict or object to our processing of your personal data, and to data portability. To exercise any of these rights, contact us via the contact page. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).

Changes

If we make material changes to this policy we will update this page and the date at the top.

Privacy policy