Privacy Policy

Last Updated: June 4, 2026 · Effective: June 4, 2026

Genovra AI enforces Zero Data Retention (ZDR) on all document content. We process your legal documents in-memory and discard them immediately — we never store, sell, or train AI models on your case data.

1. Who We Are

Genovra AI (operated by PT Visimedia Digital, "we", "us", or "our") provides an AI-powered legal document intelligence platform at genovraai.net and a Microsoft Word Add-in. Contact us at [email protected].

2. Data We Collect

Account Information

Email address (for authentication and notifications)
Firm or organization name (optional)
Credit balance and transaction history (for billing)

Document Content — Zero Data Retention

ZDR Policy

Document text submitted for analysis (via dashboard upload or Word Add-in selection) is processed in-memory only and discarded immediately after the analysis response is returned. We do not store raw document text persistently.

Analysis results (structured outputs, flagged items) may be stored in your case vault under your control, and can be deleted by you at any time.

Usage Metadata

Feature usage frequency (anonymized)
Credit consumption per operation (for billing accuracy)
Error logs (technical errors only, no document content)
IP address and browser type (for security monitoring)

3. Microsoft Word Add-in — Specific Disclosures

The Genovra AI Word Add-in has access to selected text in your Word documents. Here is exactly how it behaves:

Selective access only: The Add-in reads only the text you explicitly highlight and submit for analysis. It does not read your full document, file system, or other Office applications.
On-demand only: The Add-in processes data only when you click "Analyze Selection." It does not run in the background or access documents passively.
HTTPS transmission: Selected text is transmitted over TLS-encrypted HTTPS to genovraai.net for analysis. It is not retained after the response is returned.
Authentication: Login uses one-time password (OTP) email codes via Supabase Auth. Tokens are stored in sessionStorage and expire when the session ends.
No third-party sharing: Document content is never shared with third parties, used for advertising, or used to train AI models.

4. How We Use Your Data

Provide document analysis and platform features
Manage accounts and credit balances
Send transactional emails (analysis complete, billing receipts)
Respond to support requests
Detect fraud, abuse, and security incidents
Comply with legal obligations

We do not sell, rent, or trade your data.

5. Data Retention

Document content: Not retained. Discarded immediately after analysis.
Analysis results: Retained in your vault until you delete them.
Account data: Retained while account is active. Request deletion at [email protected].
Billing records: Retained for 7 years (financial regulation compliance).
Error logs: 30 days. No document content included.

6. Security

All data in transit: TLS 1.3 encrypted (HTTPS)
Authentication: Short-lived JWT tokens, OTP-based login
Database: Row Level Security (RLS) via Supabase
Infrastructure: Cloudflare global edge network
No employee access to document content (we never receive it persistently)

7. Third-Party Sub-Processors

Service	Purpose	Data Shared
Supabase	Auth & database	Email, account data
Cloudflare	Hosting & CDN	IP address (anonymized)
AWS SES	Transactional email	Email address
Creem.io	Payment processing	Email, payment info

Document content is never shared with any third party.

8. Your Rights

You have the right to access, correct, delete, or export your personal data. Email [email protected]. We respond within 30 days.

9. Contact

Genovra AI Privacy Team

Email: [email protected]

Support: [email protected]