Privacy Policy
Effective date: 11 October 2026. Controller contact: privacy@genloft.io.
1. Who we are
Controller for this website (https://promo.signu.online): GENLOFT.
2. Scope
This Privacy Policy covers the public marketing website, cookie consent, and contact forms. Customer workspace data inside authenticated product accounts is covered by the customer agreement and data processing terms provided at signup.
3. Data we process
- Contact requests: name, email, optional phone and company, message, timestamp, and basic request metadata needed for abuse prevention.
- Essential cookies: consent preference and security cookies required for the site to function.
- Optional analytics (only after opt-in): aggregated page usage — not loaded before consent.
- Security logs: edge protection and rate-limit events retained for security response.
4. Purposes and legal bases
- Respond to contact requests — contract steps / legitimate interest in answering inquiries.
- Security and abuse prevention — legitimate interest.
- Optional analytics — consent.
- Legal obligations — where applicable.
5. Processors / infrastructure
Depending on deployment mode (managed cloud or self-hosted), processing may involve hosting, identity, mail delivery, object storage, and security monitoring providers configured for the service.
6. Retention
- Contact leads: up to 24 months after last meaningful contact, or sooner on erasure request (unless legal hold).
- Consent records: for the life of the preference plus an audit window (typically 24 months).
- Security logs: typically 90–180 days unless investigating an incident.
7. International transfers
If personal data is transferred outside the EEA/UK, appropriate safeguards (such as standard contractual clauses) are used.
8. Your rights
Subject to applicable law: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Contact privacy@genloft.io or dpo@genloft.io. You may lodge a complaint with your local supervisory authority.
9. Children
The service is directed at business users. We do not knowingly collect data from children under 16.
10. Changes
Material changes will be posted on this page with an updated effective date.