Privacy Policy

2. Information We Collect

2.1 Information You Provide Directly

• Account Registration: Full name, email address, password (hashed — never stored in plain text), and optional profile information.

• Client Records: Information you enter about your clients, including names, contact details, session notes, and appointment history. You are the data controller for your clients' information — we process it on your behalf.

• Payment Information: Billing details are processed through our payment processor (Wix Payments / Stripe). We do not store full credit card numbers on our servers.

• Communications: Any messages, feedback, or support requests you send to us.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, session duration, and click patterns within the app.

• Device & Technical Data: Browser type, operating system, IP address, and device identifiers.

• Cookies and Similar Technologies: See Section 7 (Cookies) for details.

2.3 Information from Third Parties

• If you sign in using Google OAuth, we receive your name, email address, and profile photo from Google, subject to Google's Privacy Policy.

3. How We Use Your Information

We use the information we collect to:

1. Create and manage your account

2. Provide, operate, and improve the Service

3. Process transactions and send related information (receipts, invoices)

4. Send transactional emails (account verification, password reset, appointment reminders)

5. Send service updates, security alerts, and administrative messages

6. Send promotional communications — only with your explicit consent; you may opt out at any time

7. Monitor and analyze usage patterns to improve user experience

8. Detect, prevent, and address fraud, abuse, and security incidents

9. Comply with legal obligations

We do not sell your personal data to third parties. Ever.

4. Legal Basis for Processing (GDPR / International Users)

If you are located in the European Economic Area (EEA) or United Kingdom, our legal basis for processing personal information depends on the context:

• Contract performance: Processing necessary to provide the Service you requested

• Legitimate interests: Improving the Service, fraud prevention, security

• Consent: Marketing communications, optional analytics cookies

• Legal obligation: Compliance with applicable law

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

5.1 Service Providers (Sub-processors)

Sub-processorPurposeLocation

Base44 (MongoDB Atlas)Database hosting and storageUnited States

WixWebsite hosting, payments, emailUnited States

SendGridTransactional email deliveryUnited States

Google (OAuth)AuthenticationUnited States

5.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or to protect the rights, property, or safety of GenXcd, our users, or the public.

5.3 Business Transfers

If GenXcd is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

6. Data Retention

• Account data: Retained until you request deletion or account closure

• Session logs and activity data: Retained for 30 days

• Billing records: Retained for 7 years as required by applicable tax law

• Backup data: May persist up to 30 days after deletion in encrypted backup systems

When you delete your account, we delete all personal data within 30 days, except where retention is required by law.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Service and improve your experience.

• Essential Cookies: Required for the Service to function (authentication, session management). Cannot be disabled.

• Analytics Cookies: Help us understand how users interact with the Service. Only activated after you provide consent.

• Preference Cookies: Remember your settings and preferences.

You can manage cookie preferences through the cookie consent banner on your first visit, or through your browser settings.

8. Your Rights

All Users

• Access: Request a copy of the personal data we hold about you

• Correction: Request correction of inaccurate or incomplete data

• Deletion: Request deletion of your personal data

• Portability: Request your data in a structured, machine-readable format

California Residents (CCPA)

• Know what personal information is collected, used, shared, or sold

• Opt out of the sale of personal information (we do not sell personal information)

• Non-discrimination for exercising your privacy rights

To submit a privacy request: Email contact_us@genxcd.com with the subject line "Privacy Request" and your account email. We will respond within 30 days.

9. Data Security

• Encryption in transit: All data transmitted via HTTPS / TLS 1.2+

• Encryption at rest: AES-256 encryption on all stored data

• Authentication: Multi-factor authentication available; email verification required

• Access controls: Role-based access control; Row-Level Security on all data entities

No method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

Our Service is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. Contact contact_us@genxcd.com if you believe we have done so.

11. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their policies.

12. Changes to This Policy

We will notify you of material changes by email and/or in-app notice. The "Last Updated" date reflects the most recent revision. Continued use after changes constitutes acceptance.

13. Contact Us

GenXcd

Christopher Durbin, Founder & CEO 5900 Balcones Drive, Austin, TX 78731 Email: contact_us@genxcd.com Website: genxcd.com