Privacy Notice

1. Who operates the service

Genvernium operates the service. Our service address is 1, Aurora Sovo, Plaza Bukit Jalil, Kuala Lumpur, Malaysia. Privacy questions and requests can be sent to support@genvernium.com.

The applicable role of Genvernium and a customer may differ by processing activity. We handle customer instructions, workspace access, and service-provider relationships according to the applicable agreement and law.

2. Information we process

Depending on how the service is used, we may process account and profile information, authentication and session records, workspace settings, roles, website URLs and crawl settings, publicly reachable website content, evidence references and hashes, findings, recommendations, drafts, approvals, audit records, support messages, and technical and security logs.

Authentication may include information received from an identity provider when you choose Google or GitHub sign-in. Technical logs may include IP address, browser or device information, referrer, language, time zone, request identifiers, and diagnostic information where collected.

Do not submit passwords, private keys, API tokens, payment-card data, government identifiers, or other secrets to crawl fields, URLs, prompts, findings, or support messages. The product does not currently collect payment-card details through online checkout.

3. Sources and purposes

We receive information from you or your organisation, from an identity provider you select, from publicly reachable pages that you authorise us to inspect, from your browser and service runtime, and from service providers acting on our instructions.

• authenticate users, recover accounts, and enforce workspace permissions
• operate website connection, crawling, evidence capture, analysis, findings, recommendations, refreshes, exports, and review workflows
• preserve provenance, versions, approvals, and auditability
• prevent fraud, disposable-email abuse, unauthorised access, unsafe crawling, excessive requests, and other abuse
• provide support, security response, service operations, and reliability improvements
• comply with law, enforce agreements, and protect customers and the service

4. Sharing and service providers

We may share the minimum information needed with providers supporting hosting and runtime operations, authentication and identity, email delivery, logging, monitoring, security, support, and approved analysis or model workflows. Providers receive access appropriate to their role and contractual or technical controls.

We may disclose information when required by law, to protect people or the service, to professional advisers under confidentiality duties, or as part of a merger, financing, restructuring, or transfer of assets. We do not sell customer workspace content.

When you choose to allow optional analytics cookies on public Genvernium pages, we use Google Analytics 4 to measure aggregated site use, such as pages viewed and interactions. Google receives the information needed to provide that analytics service. We do not send customer workspace content, connector credentials, or private evidence through the public-site analytics tag.

The initial release does not enable online payment. Any future provider, analytics tool, or model provider that materially changes processing must be assessed and reflected in an updated notice before activation.

5. International processing and security

Service providers may process information in countries other than Malaysia. We use applicable contractual, organisational, and technical safeguards for relevant transfers and will describe material changes in a revised notice or agreement.

Controls may include authentication, least-privilege access, workspace isolation, input validation, crawl-safety checks, rate limits, logging, and reviewable action records. These measures reduce risk but cannot guarantee absolute security.

6. Retention, requests, and complaints

We retain information for as long as needed to provide the service, maintain security and auditability, support customers, resolve disputes, meet legal obligations, and follow an applicable order or retention schedule. Retention may differ for active records, evidence, audit logs, support records, backups, exports, and legal holds.

You may send an access, correction, deletion, export, or other privacy request to support@genvernium.com. We may verify identity and apply lawful exceptions, including protection of another workspace, security records, legal obligations, or legal holds. We will route complaints and requests through the applicable process and respond within the period required by law.

7. Cookies, children, and changes

The service uses essential session, security, and preference technologies. Public Genvernium pages load Google Analytics only after you opt in through the analytics choice presented on the site. You can reject analytics, or later change your choice by clearing the Genvernium analytics preference in your browser. Refusing analytics does not affect access to essential public pages or the service.

The service is not directed to children below the legally applicable age.

We may update this notice when our processing, providers, service, or legal obligations change. The version and effective date above identify the notice that applies to this page.