Privacy Policy

    Last updated: June 2, 2026

    1. Introduction

    GenPressa ("we", "us", "our") provides an AI-powered content publishing platform for WordPress sites. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. By using GenPressa you agree to this policy.

    2. Information We Collect

    • Account information you provide directly, such as your email address, name, password (hashed), and billing details.
    • Site connection data you configure, such as WordPress URLs, application passwords (encrypted at rest), and content rules.
    • Usage data generated as you use the product, such as articles generated, jobs run, logs, errors, and feature interactions.
    • Third-party integration data you explicitly connect, such as Google Search Console properties and performance metrics (see the Google User Data section below).

    3. How We Use Your Information

    We use your information to operate and improve the service, generate and publish content on your behalf, process payments, provide customer support, send transactional emails, prevent abuse, and comply with legal obligations.

    4. Legal Basis for Processing (EEA/UK users)

    We process your personal data under one or more of the following legal bases: performance of a contract (providing the service you signed up for), our legitimate interests (operating, securing, and improving the service), your consent (where required, e.g. for optional integrations), and compliance with legal obligations.

    5. Data Sharing

    We do not sell your personal data. We share data only with sub-processors who help us run the service (such as our database/auth host, CDN, payment processor, and transactional email provider), all under contractual data protection obligations. We may also disclose data when required by law or to protect the rights, property, or safety of GenPressa, our users, or the public.

    6. Data Retention

    We retain personal data for as long as your account is active and as needed to provide the service. You may request deletion at any time. Some records (e.g. invoices) are kept for the period required by applicable law.

    7. Security

    We protect your data with industry-standard measures including TLS in transit, encryption at rest for sensitive credentials (AES-256-GCM), strict row-level security in our database, and limited, audited access to production systems.

    8. Your Rights

    Depending on your jurisdiction, you may have the right to access, correct, delete, export, or restrict processing of your personal data, and to lodge a complaint with a supervisory authority. To exercise these rights, contact us using the details below.

    9. Contact

    Questions about this policy or your data? Contact us at contact@genpressa.com.

    Google User Data

    This section describes how GenPressa accesses, uses, stores, and shares user data obtained through Google APIs (including Google Sign-In and Google Search Console). Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

    Data Accessed

    When you sign in with Google or connect Google Search Console, we request and access the following data, only with your explicit consent via Google's OAuth consent screen:

    • Basic profile information — your Google account email address, name, and profile picture URL (scopes: openid, email, profile). Used to create and identify your GenPressa account.
    • Google Search Console data — the list of Search Console properties you own or manage, and read-only search performance data (queries, pages, impressions, clicks, CTR, position) for properties you explicitly connect to a site in GenPressa (scope: https://www.googleapis.com/auth/webmasters.readonly).

    We do not request any other Google scopes. We do not access Gmail, Drive, Calendar, Contacts, Photos, YouTube, or any other Google product data.

    Data Usage

    Google user data is used solely to provide and improve the features you have explicitly enabled inside GenPressa:

    • Profile information is used to create your account, display your identity inside the app (e.g. your name and avatar in the dashboard), and authenticate you on subsequent sign-ins.
    • Search Console property list is shown to you in the app so you can choose which property to associate with each of your WordPress sites.
    • Search Console performance data is fetched on your behalf to (a) surface keyword opportunities and suggestions inside the Cluster Planner, (b) score and improve the SEO of content you publish through GenPressa, and (c) display analytics dashboards to you.

    We do not use Google user data to train, develop, or improve generalized or third-party AI/ML models. Any AI features that operate on your content run on prompts and outputs you control, and we do not send raw Google user data to AI providers for model training.

    We do not use Google user data for advertising, do not sell it, and do not allow humans to read it except (i) with your explicit consent, (ii) where necessary for security purposes (e.g., investigating abuse), (iii) to comply with applicable law, or (iv) where the data is aggregated and used for internal operations in a way that does not identify you.

    Data Sharing

    We do not sell, rent, or share Google user data with third parties for advertising or marketing purposes. The only third parties that may process Google user data on our behalf are our infrastructure sub-processors, acting strictly as data processors under contract:

    • Supabase (database and authentication hosting) — stores your account record and encrypted OAuth refresh tokens.
    • Cloudflare (CDN and edge networking) — transports encrypted requests between your browser and our servers.

    We may also disclose data when required by law, valid legal process, or to protect the rights, property, or safety of GenPressa, our users, or the public.

    Data Storage & Protection

    • Google OAuth refresh tokens are encrypted at rest using AES-256-GCM before being written to our database. The encryption key is held only in our server-side secret store and is never exposed to the client.
    • All data in transit between your browser, our servers, and Google APIs is encrypted using TLS 1.2 or higher.
    • Access to production systems is restricted to a small number of authorized engineers, protected by strong authentication, and logged.
    • Search Console performance data we pull on your behalf is stored only to power the features described above and is scoped to your account via row-level security so other users cannot access it.

    Data Retention & Deletion

    • You can disconnect Google from your GenPressa account at any time from the SEO Intelligence page; this revokes our refresh token and stops all further access to your Google data.
    • You can also revoke GenPressa's access directly from your Google Account at myaccount.google.com/permissions.
    • When you disconnect, the stored encrypted refresh token is deleted from our database immediately. Cached Search Console performance data is deleted within 30 days.
    • You may request deletion of your entire GenPressa account and all associated data — including any remaining Google user data — by emailing contact@genpressa.com. We will action verified deletion requests within 30 days.