Privacy Policy

Last Updated: June 4, 2026 · Effective: June 4, 2026

Genovra AI enforces Hybrid Zero Data Retention (Hybrid ZDR) on all document content. We process your legal documents in-memory and discard them immediately. Any un-opened files or matters in your vault are automatically purged after 14 days of inactivity — we never sell, or train AI models on your case data.

1. Who We Are

Genovra AI ("we", "us", or "our") provides an AI-powered legal document intelligence platform at genovraai.net and a Microsoft Word Add-in. Contact us at [email protected].

2. Data We Collect

Account Information

Email address (for authentication and notifications)
Firm or organization name (optional)
Credit balance and transaction history (for billing)

Document Content — Zero Data Retention

Hybrid ZDR Policy

Document text submitted for analysis (via dashboard upload or Word Add-in selection) is processed in-memory only and discarded immediately after the analysis response is returned. We do not store raw document text persistently.

Analysis results (structured outputs, flagged items) may be stored in your case vault for your review. Under our Hybrid ZDR policy, un-opened files or matters will be automatically and permanently purged after 14 days of inactivity.

Usage Metadata

Feature usage frequency (anonymized)
Credit consumption per operation (for billing accuracy)
Error logs (technical errors only, no document content)
IP address and browser type (for security monitoring)

3. Microsoft Word Add-in — Specific Disclosures

The Genovra AI Word Add-in has access to selected text in your Word documents. Here is exactly how it behaves:

Selective access only: The Add-in reads only the text you explicitly highlight and submit for analysis. It does not read your full document, file system, or other Office applications.
On-demand only: The Add-in processes data only when you click "Analyze Selection." It does not run in the background or access documents passively.
HTTPS transmission: Selected text is transmitted over TLS-encrypted HTTPS to genovraai.net for analysis. It is not retained after the response is returned.
Authentication: Login uses one-time password (OTP) email codes via Supabase Auth. Tokens are stored in sessionStorage and expire when the session ends.
No third-party sharing: Document content is never shared with third parties, used for advertising, or used to train AI models.

4. How We Use Your Data

Provide document analysis and platform features
Manage accounts and credit balances
Send transactional emails (analysis complete, billing receipts)
Respond to support requests
Detect fraud, abuse, and security incidents
Comply with legal obligations

We do not sell, rent, or trade your data.

5. Data Retention

Document content: Not retained. Discarded immediately after analysis.
Analysis results: Retained in your vault until you delete them. Un-opened files or matters are automatically purged after 14 days of inactivity.
Account data: Retained while account is active. Request deletion at [email protected].
Billing records: Retained for 7 years (financial regulation compliance).
Error logs: 30 days. No document content included.

6. Security

All data in transit: TLS 1.3 encrypted (HTTPS)
Authentication: Short-lived JWT tokens, OTP-based login
Database: Row Level Security (RLS) via Supabase
Infrastructure: Cloudflare global edge network
No employee access to document content (we never receive it persistently)

7. Third-Party Sub-Processors

Service	Purpose	Data Shared
Supabase	Auth & database	Email, account data
Cloudflare	Hosting & CDN	IP address (anonymized)
AWS SES	Transactional email	Email address
Whop	Merchant of Record & payment processing	Email, payment info

Document content is never shared with any third party.

8. Your Rights

You have the right to access, correct, delete, or export your personal data. Email [email protected]. We respond within 30 days.

9. Contact

Genovra AI Privacy Team

Email: [email protected]

Support: [email protected]