02 · Legal
Privacy Policy
How genyios collects, uses, and protects your data.
Who we are
genyios is an AI agent platform operated by Connecta DXB L.L.C-FZ, a free zone company registered in the United Arab Emirates under licence number 2531005.01 (“Connecta DXB”, “we”, “us”, or “our”). This Privacy Policy explains how we collect and process personal data through the genyios platform, landing page, and associated services.
Data we collect
2.1 Client (business) data
When you register as a genyios client, we collect:
- First name, last name, work email, company name.
- Billing information, processed and held by Stripe. genyios does not store card details.
- Agent configuration settings, uploaded documents, and website URLs.
- Platform usage logs and analytics.
2.2 End user data, collected via AI agents on behalf of clients
When end users interact with a genyios AI agent deployed by one of our clients, the following data may be collected:
- Name, phone number, and email address, if provided during conversation.
- Voice recordings and audio streams, processed for transcription via self-hosted Whisper STT.
- Conversation transcripts across all channels: voice, WhatsApp, email, and web chat.
- Lead capture information as configured by the client.
genyios processes this data on behalf of the client, acting as a data processor. The client is the data controller and is responsible for providing appropriate notice to end users.
2.3 Website visitors
When you visit the genyios website or landing page, we may collect IP address, browser type, device information, pages visited, and contact form or waiting list submissions.
How we use your data
- Providing and operating the genyios platform and AI agent services.
- Processing voice, text, and email conversations through the AI pipeline.
- Generating and storing leads and conversation transcripts for clients.
- Processing payments and managing subscriptions.
- Sending service-related communications and product updates.
- Improving platform performance using aggregated and anonymised data only — excluding any data received via Google Workspace APIs, which is never used to train or improve any AI or machine learning model.
- Complying with legal obligations.
Voice data and AI processing
Voice interactions are processed through our self-hosted Whisper (STT) and Coqui XTTS (TTS) models. Audio is transcribed in real time and is not shared with third-party AI providers. Transcripts are stored per tenant in isolated databases.
Voice cloning data, meaning reference voice samples uploaded by clients, is stored securely and used exclusively to generate the synthetic voice for that client’s agent. Voice samples are never shared with other clients or used to train general AI models.
Data sharing and third parties
We do not sell personal data. We share data only with the following service providers where necessary:
- Stripe, for payment processing.
- Telnyx, for WhatsApp Business number provisioning and voice routing.
- Hetzner and cloud infrastructure providers, for server hosting.
- Analytics tools, for anonymised usage analytics.
Google Workspace API data
When you connect a Google Workspace account to genyios (Gmail, Google Calendar, Google Contacts, or Google Tasks), we access that data solely to power the features you have asked the agent to perform on your behalf — for example, sending or summarising email, scheduling calendar events, looking up contacts, or creating tasks.
The use of raw or derived user data received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use data obtained through Google Workspace APIs to develop, train, fine-tune, or improve any generalized AI or machine learning model.
We request only the minimum OAuth scopes necessary to perform the features you have explicitly enabled. No scopes are requested speculatively or for future use.
Upon request, users may export personal data processed through Google Workspace integrations by contacting legal@genyios.com.
You can disconnect any Google integration at any time from the Integrations panel inside the genyios workspace, which revokes our access tokens and stops further access to that data.
Data retention
Client account data is retained for the duration of the subscription and for 30 days after termination, after which it is permanently deleted. End user data collected by AI agents is stored in the client’s isolated tenant environment and is subject to the client’s own data retention policies.
Your rights
Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, object to certain processing, or withdraw consent. To exercise any of these rights, contact us at legal@genyios.com. We will respond within 30 days.
Security
genyios implements TLS/SRTP encryption for all data in transit, encrypted storage at rest, per tenant data isolation, firewall and network segmentation, and role-based access controls.
Children’s privacy
genyios is a B2B platform intended for use by businesses and their adult customers. We do not knowingly collect personal data from individuals under the age of 18.
Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify registered clients via email.
Contact us
For privacy related queries or to exercise your data rights, contact legal@genyios.com.
Questions about this document? Contact us at legal@genyios.com.