Privacy Policy
Last updated: 27/07/2026
This Privacy Policy describes how Genielo ("we", "the Service") collects, uses and protects your personal data when you use the platform available at genielo.com. We are committed to complying with the General Data Protection Regulation (GDPR – EU 2016/679) for our European Union users, as well as Moroccan law no. 09-08 on the protection of individuals with regard to the processing of personal data.
1. Data Controller
The data controller is:
- Publisher: Hamza Labyad, a natural person acting in his own name.
- Address: Rue Mahatma Gandhi, Résidence Ariha, 2nd floor, No. 27, Tangier, Morocco.
- Data protection contact: privacy@genielo.com
As the activity is carried out in a personal capacity, appointing a Data Protection Officer (DPO) is not required; your requests are handled directly at the address above. See also our Legal Notice.
2. Data We Collect
We only collect the data necessary to operate the Service:
- Account data: e-mail address and password (stored encrypted / hashed, never in clear text).
- Content you generate: the instructions ("prompts") you enter and the content produced (text, images, voice, video).
- Usage data: generation history, credits consumed, technical logs.
- Technical data: IP address, browser type, connection data, cookies.
We neither collect nor store any payment data (bank card number, etc.). Payments are entirely processed by our partner Whop (see section 4).
3. Purposes and Legal Bases
| Purpose | Legal basis (GDPR) |
| Create and manage your account, provide the Service | Performance of the contract |
| Process subscriptions and payments | Performance of the contract |
| Security, prevention of abuse and fraud | Legitimate interest |
| Service improvement | Legitimate interest |
| Non-essential cookies / marketing communications | Consent |
4. Recipients and Processors
To provide the Service, we use third-party providers (processors) that process certain data on our behalf:
- Whop (Whop Inc.) — payment processing as the official reseller ("merchant of record"). Whop collects and processes your payment and billing data directly under its own privacy policy.
- Artificial intelligence model providers (including OpenAI and ElevenLabs) — your instructions and content are transmitted to these providers to generate the requested results.
- Hosting: OVH SAS (servers located within the European Union).
- E-mail: Hostinger, for sending transactional e-mails.
We never sell or rent your personal data to third parties.
5. Transfers Outside the European Union
Some of our processors (notably the AI model providers and Whop) are located outside the European Union, including in the United States. These transfers are governed by appropriate safeguards (European Commission standard contractual clauses, or equivalent mechanisms). We recommend that you do not include sensitive or identifying personal data in your instructions ("prompts"), as these are transmitted to AI providers for processing.
6. Retention Period
- Account data: kept for as long as your account is active, then deleted within a reasonable time after closure.
- Generated content: kept until deleted by you or upon account closure.
- Billing data (on Whop's side): according to applicable accounting legal obligations.
- Technical logs: limited duration for security purposes.
7. Your Rights
In accordance with the GDPR and law 09-08, you have the following rights: access, rectification, erasure ("right to be forgotten"), restriction of processing, portability, and objection. You may also withdraw your consent at any time.
To exercise these rights, write to us at privacy@genielo.com. We respond within one month.
You also have the right to lodge a complaint with a supervisory authority, in particular:
8. Security
We implement appropriate technical and organisational measures to protect your data: password encryption, secure connections (HTTPS), restricted access. As no system is infallible, we cannot guarantee absolute security.
9. Minors
The Service is reserved for persons aged 18 or over. We do not knowingly collect data concerning minors.
10. Cookies
We use cookies that are essential to the operation of the site and, subject to your consent, audience-measurement cookies. For details (list, purposes, durations) and to manage your consent, see our Cookie Policy.
11. Changes
We may update this Policy. Any change will be published on this page with a new update date.
12. Contact
For any question regarding your personal data: privacy@genielo.com.