Effective Date: 23 April 2025
This Privacy Policy ("Policy") explains how GenFLOW ("GenFLOW", "Company", "we", "us", or "our") - collects, uses, discloses, and safeguards your information when you access or use the GenFLOW website, application, and related services (collectively, the "Service"). This Policy applies to all personal data processed in connection with the Service and forms an integral part of our Terms of Service.
Please read this Policy carefully. By accessing or using the Service, you acknowledge that you have read and understood this Policy and that we will process your information as described herein. If you do not agree with any part of this Policy, you must refrain from using the Service.
We collect and process the following categories of information in order to operate the Service, perform our contractual obligations, and otherwise pursue our legitimate interests or comply with legal obligations:
Where the EU General Data Protection Regulation ("GDPR") applies, we rely on the following legal bases:
We use the collected information for various purposes:
We do not sell your Personal Data. We only disclose information:
We do not share your specific Input Content or Generated Images with third parties except where this is strictly necessary to operate the Service (e.g., storage providers) or where we are legally compelled to do so.
We retain Personal Data for as long as necessary to fulfill the purposes outlined in this Policy, including to satisfy legal, accounting, or reporting requirements. Account data is kept while your account is active and for a reasonable period thereafter. Input Content and Generated Images are retained as part of your account or for model-improvement purposes, subject to your rights described below.
Subject to statutory conditions, you have the right to request access, rectification, erasure, restriction, or portability of your Personal Data, to object to processing, and to withdraw consent. To exercise these rights, please contact us using the details in Section 14. We may require proof of identity before responding. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.
We implement appropriate technical and organisational measures to protect Personal Data. Nevertheless, no Internet transmission is completely secure, and we cannot guarantee absolute security. You use the Service at your own risk.
In the event of a personal-data breach, we will notify the competent supervisory authority without undue delay and, where required, affected individuals, in accordance with Articles 33 and 34 GDPR.
We and our Service Providers may process Personal Data outside the European Economic Area. Where such transfers occur, we rely on European Commission adequacy decisions or Standard Contractual Clauses to ensure an adequate level of protection.
The generation of images is an automated process based on user inputs. This does not constitute automated decision-making producing legal or similarly significant effects within the meaning of Article 22 GDPR.
The Service is not directed to persons under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with Personal Data, please contact us so that we can delete the information.
We may update this Policy from time to time. The updated version will be posted on this page and will take effect on publication. Material changes will be announced at least 30 days in advance, where legally required.
Based on our current processing activities, we are not obliged to appoint a statutory Data Protection Officer. Nonetheless, we maintain robust data protection governance internally. Questions may be directed to the contact details below.
If you have questions about this Policy or our privacy practices, you may contact us: