GenSight (Genassis Insights) Privacy Policy

This Privacy Policy explains how GenSight (also referred to as Genassis Insights) collects, uses, shares, and protects information when you use our application (the “App”). GenSight is a Genassis product and brand.

Operator / Data Controller (UK):

1) Scope

This policy applies to the GenSight / Genassis Insights App (including when accessed via a mobile device). It does not necessarily apply to other Genassis websites or services that have separate privacy notices.

2) What information we collect

We collect the minimum necessary to operate and improve the App.

A. Information you provide

Account details: name, email address, organisation/company, role/title, password (stored in hashed form), and optional profile information.

User Content (text inputs): text, prompts, notes, queries, and other information you type into the App.

Support communications: information you provide when you contact us (e.g., messages, attachments, screenshots).

Uploads: The App does not currently support uploading files. If we add uploads in future, we will update this policy.

Important: GenSight is not designed for storing patient-identifiable information. Please do not input identifiable patient data.

B. Information collected automatically

Usage data: pages/features used, interactions, and timestamps.

Device and technical data: IP address, browser type, device type, operating system, language, and approximate location derived from IP (city/region).

Logs: diagnostic logs, crash and performance data.

Analytics and diagnostics: We use analytics and error monitoring tools to understand App usage, improve performance, and detect/fix errors. These tools may collect or receive usage and device data such as IP address, device/browser type, operating system, event timestamps, pages/screens viewed, and error/diagnostic logs.

C. Cookies and similar technologies

We use cookies/local storage (or similar technologies) for sign-in sessions, security, preferences, and analytics. You can control cookies through your browser settings; some are required for the App to function.

3) How we use your information

We use information to:

Provide and operate the App (authentication, access control, functionality).

Secure the App (fraud prevention, abuse detection, auditing).

Improve and maintain the App (debugging, performance monitoring, analytics).

Communicate with you (service notices, support).

Comply with law and enforce our rights.

4) Legal bases for processing (UK GDPR)

We process personal data under one or more of:

Contract (to provide the App you request),

Legitimate interests (to secure, improve, and operate the App),

Consent (where required, e.g., optional cookies/marketing),

Legal obligation (where required by law).

5) AI/automation and model training

GenSight may use automated methods (including machine learning) to provide features such as search, summarisation, classification, and generating insights based on your inputs.

We do not use your User Content to train public, general-purpose AI models.

We may use aggregated and de-identified usage information to improve reliability, security, and product performance.

6) How we share information

We do not sell your personal data.

We may share information with:

Service providers who help us run the App (e.g., hosting, infrastructure, analytics, error monitoring, email/support tools). They may process data only on our instructions and must protect it.

Legal and compliance recipients where required by law, or to protect rights, safety, and security.

Business transfers if we undergo a merger, acquisition, or asset sale (with appropriate safeguards).

7) International transfers

Our service providers (e.g., hosting/analytics/error monitoring) may process data outside the UK. Where required, we use appropriate safeguards (such as the UK Addendum to Standard Contractual Clauses or other lawful transfer mechanisms) to protect personal data when transferred internationally.

8) Data retention

We keep personal data only as long as needed for the purposes described in this policy.

Account data: retained while your account is active.

User Content (text inputs): retained while stored in your account/workspace, unless you delete it or your organisation deletes it.

Analytics & diagnostics: retained for up to 2 years.

Logs and security records: retained for limited periods (typically days to months) unless needed longer for security investigations or legal obligations.

Support records: retained as needed to resolve issues and maintain service history.

Account deletion

Upon account deletion, we delete or de-identify personal data within 30 days, and backup copies are purged within 90 days, unless longer retention is required by law or is necessary for dispute resolution, enforcing our agreements, or protecting our legal rights.

9) Your rights

Under UK GDPR you may have the right to:

access your personal data,

correct inaccurate data,

request deletion,

object to or restrict processing,

request data portability,

withdraw consent (where processing is based on consent).

To exercise your rights, contact support@genassis.ai. We may need to verify your identity.

You also have the right to complain to the UK regulator: the Information Commissioner’s Office (ICO).

10) Security

We use reasonable technical and organisational measures to protect information (e.g., encryption in transit, access controls). No system is completely secure.

11) Children

The App is intended for professional use and not directed to children. We do not knowingly collect data from children.

12) Changes to this policy

We may update this policy from time to time. We’ll update the “Last updated” date and may provide additional notice in the App for material changes.

13) Contact

Email: support@genassis.ai

Post: Genassis Solutions Ltd, 4th Floor, Silverstream House, 45 Fitzroy Street, Fitzrovia, London W1T 6EB, UK