Privacy Policy
1. Introduction
Welcome to Gen Open! This Privacy Policy explains how Gen Open ("we" or "our") collects, uses, shares, and protects information when you use our products or services (the "Service"). This Policy applies to all visitors, users, and other individuals who use the Service through our website at https://genopen.top, or who interact and communicate with us through our online channels ("Users" or "you").
This Service is provided and controlled by Gen Open. As the service operator, we act as the data controller. If you have any questions about how we process your personal information, or if you wish to exercise your privacy rights, please contact us at Feedback.
By using our Service, you acknowledge that you have read and understood this Privacy Policy. Where required by applicable law, we will obtain your consent before processing your personal information for purposes that require consent.
2. Information We Collect
We collect various types of information in order to provide and improve our Service to you.
A. Information You Provide to Us
Account Information: When you create a Gen Open account, we collect your email address and user ID. If you sign in with your Google account, we may receive information provided by Google, such as your user ID and, where you authorize it, your email address. If you sign in with your email address, we may collect the email address and user ID associated with your account.
Communications: If you contact us directly (for example, through customer support), we will receive your email address, the content of your messages, and any other information you choose to provide.
User Input: When you use our Service, we may collect text prompts, uploaded audio, images, videos, brand assets, feedback, chat histories, generated content, or other content that you provide. These materials may contain personal information. We do not intentionally request or knowingly collect sensitive personal information. We generate responses ("Outputs") based on your inputs ("Inputs").
B. Information We Collect Automatically
Device and Technical Information: We collect your IP address, as well as information about your browser, operating system, device, system language, and other technical information necessary to provide and secure the website.
Service Log Information: We automatically collect and store certain information in server logs, including your IP address, time of access, pages browsed, browser information, device information, and information related to errors or crashes.
Usage Data: We collect information about your activity on the Service, such as the types of content you view or interact with, feature usage, session duration, page views, and your interactions within the website.
Transaction Information: If you choose to make a purchase (of products or prepaid services) or subscribe (for example, to a premium membership), we will receive transaction information such as order and transaction status. We are unable to access your sensitive payment details, such as credit card numbers or banking information.
Cookies and Similar Technologies: We use cookies and similar technologies (such as web beacons, tags, and scripts) to collect and use information, remember settings, maintain functionality, understand how the website is used, and improve and analyze our Service. You can manage or disable cookies through your browser settings, although some parts of the Service may not function properly as a result.
C. Information from Third-Party Services
Third-Party Login: You may choose to sign in to our Service using your Google account. If you authorize it, we may receive information provided by Google, such as your user ID and, where you authorize it, your email address. The information we receive depends on your settings with Google. You may also sign in using your email address; in that case, we may collect the email address and user ID associated with your account.
Third-Party Payments: If you subscribe to our paid services, we use third-party payment processors. We do not collect or store your full payment card details, but we may receive transaction confirmation information.
3. How We Use Your Information
We use the information we collect for the following purposes:
To provide, operate, and maintain our Service, including:
Processing transactions and managing subscriptions to paid services;
Providing the core functionality of our website and AI tools;
Ensuring that our Service operates as intended;
Facilitating and delivering AI features, such as generating marketing materials, videos, images, and other creative content. When you interact with the AI features of the Service, we collect the text, prompts, audio, images, videos, brand assets, or files you provide (your "Inputs"). We may share the minimum information necessary to process your Inputs with third-party AI service providers. We may use Outputs and de-identified or aggregated information to improve Gen Open's AI features and services, but we do not use your personal data to train general-purpose artificial intelligence models.
To manage your account. We use your data to create, secure, and manage your user account, allowing you to sign in securely and use the features available to you in the Service.
To improve and optimize our Service, including:
Understanding how the Service is used and which aspects can be improved;
Helping us develop new products, features, and AI tools;
Using de-identified or aggregated information to improve our AI features, algorithms, and service capabilities;
Ensuring the security and reliability of the Service. For example, we prevent and detect abuse, fraud, illegal activity, and violations of our content restrictions through troubleshooting, data analysis, testing, and research.
To communicate with you, including customer support and sending you service-related notifications.
To comply with legal obligations, including:
Complying with applicable laws, legal requests, and legal proceedings, such as responding to subpoenas or requests from government authorities;
Protecting our rights, privacy, safety, or property, or those of you or others (including initiating and defending against claims);
Auditing our compliance with legal and contractual requirements and internal policies.
If we intend to use your information for purposes not covered by this Privacy Policy, we will seek your consent in advance.
4. Legal Bases for Processing (for Users in the European Economic Area, the United Kingdom, Switzerland, and Brazil)
If you are a user in the European Economic Area (EEA), the United Kingdom (UK), Switzerland, or Brazil, we process your personal information on the following legal bases in accordance with applicable laws (such as the GDPR, the UK GDPR, the Swiss FADP, and the LGPD).
Consent: Where required by applicable law, we process certain information based on your explicit consent, such as optional cookies or other processing activities that require consent.
Contract Performance: We process your personal information to perform our contract with you, for example:
Creating and managing your account;
Providing the website features and AI services you request;
Processing subscriptions and purchases.
Legitimate Interests: We process your personal information based on our legitimate interests, such as:
Service improvement, troubleshooting, and analytics;
Detection of fraud, abuse, and content policy violations, and service security;
Legal Obligations: We process your information to comply with legal obligations, such as:
Responding to requests from competent authorities;
Complying with applicable legal requirements.
Vital Interests: We process your information in emergency or safety-related circumstances.
Exercising Rights in Legal Proceedings: We process your information to assert our rights in legal disputes.
Where we rely on consent, you may withdraw your consent at any time. Where we rely on legitimate interests, you may object to the relevant processing.
5. Sharing and Disclosure of Information
We are committed to protecting your privacy. We do not sell, rent, or lend your personal information to third parties. Except in the circumstances described below, we will not transfer your personal information to any company, organization, or individual:
With your separate consent: We may share your information with third parties where we have obtained your separate and explicit consent.
Service providers: We share information with third-party vendors that provide services on our behalf, including authentication and AI model processing.
We share with AI service providers only the minimum information necessary to generate content, such as text prompts and uploaded files (including audio, images, videos, and brand assets). The specific information shared with each provider depends on the model or feature you select.
The specific third-party service providers are as follows:
Volcengine Ark (Doubao, Seedream, and Seedance); Kling AI; Vidu; Tencent Cloud (Gemini and Vidu); Google Sign-in / Apple Sign-In.
We take commercially reasonable measures to ensure that service providers adhere to the security standards we apply to your personal information.
Business transfers: Other than in transactions such as mergers, acquisitions, asset sales, or judicial liquidation, where your information may be transferred as part of the transaction, we will not transfer your personal information to any third party. We will ensure that information remains confidential during the transfer and require the new holder to remain bound by this Privacy Policy.
Legal compliance and security: We may disclose your information if required by law, or to protect anyone's rights or the security of our rights or property.
Professional advisors: Such as lawyers and accountants, to the extent necessary for them to provide services to us.
Related Parties: We may share personal information with our current or future related parties, which are individuals or entities that control us, are controlled by us, or are under common control with us. Related parties may use the personal information we share with them in a manner consistent with this Privacy Policy.
Your sharing: Your content and personal information are private by default. You may choose to make certain content public through the Service, in which case it may be visible to other users or the public.
6. Cross-Border Data Transfers
Our primary data servers are located in Singapore. To ensure the security and reliability of the Service, we may also back up or process data in other locations operated by cloud service providers. These jurisdictions may not provide the same level of protection as the data protection laws of your country. Where necessary, we will implement appropriate safeguards for international transfers, including the use of Standard Contractual Clauses for transfers from the EEA, the UK, or Switzerland. For more information about international transfers, please contact us at Feedback.
7. Data Security
We store your personal information on secure servers protected by up-to-date firewalls and in secure facilities. In addition, we implement administrative, technical, and physical safeguards in accordance with commercially applicable and industry standards to protect the confidentiality and security of your personal information and to prevent unauthorized access.
We have implemented reasonable and appropriate measures to protect the security of the personal information we process, including:
For services involving uploaded audio, images, videos, brand assets, or other user-provided content, we use encryption and access controls to protect such information during transmission, processing, and storage;
We will use various data anonymization techniques to enhance the security of information during use;
We will implement strict data access permission controls and multi-factor authentication technologies to protect information and prevent unauthorized use;
We will establish a data classification and grading system, data security management standards, and secure development standards to govern the storage and use of information;
We will implement comprehensive security controls through confidentiality agreements with those who process information, as well as monitoring and auditing mechanisms;
We will organize security and privacy protection training to raise employee awareness of the importance of protecting personal information.
However, despite our security measures and our efforts to protect your information, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. We cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not defeat our security measures or improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, the transmission of personal information to and from our Service is at your own risk. You should access the Service only in a secure environment. If you have any reason to believe that your interaction with us is no longer secure, please notify us immediately by email.
8. Data Retention
In short: We will retain your information for as long as necessary to achieve the purposes described in this Privacy Policy, or for longer if required or permitted by law.
Unless a longer retention period is required or permitted by law, we will retain your personal information only for as long as necessary to achieve the purposes described in this Privacy Policy. This may include retention necessary to comply with legal obligations, resolve disputes, and enforce our legal agreements and policies.
Anonymous, aggregated, and other data that cannot be used to identify you personally (such as your activity data) may be retained indefinitely and shared with third parties in any manner.
When we no longer have a legitimate business need to process your personal information, we will delete or anonymize it; where this is not possible (for example, because your personal information is stored in backup files), we will securely store your personal information and isolate it from further processing until deletion is possible.
9. Your Privacy Rights
We value giving you control over your information. For users in certain jurisdictions (such as the EU/EEA, the United Kingdom, and California), local privacy laws may provide additional rights or requirements. This section summarizes your rights and choices regarding your personal information. You may exercise these rights through your account and website settings or by contacting us directly. Please note that some of these rights may not be absolute. For example, we may decline a request if complying with it would prevent us from continuing to perform our contractual obligations to you or would impede us from complying with our legal obligations.
A. Rights You Can Exercise Yourself
You can directly access and manage most of your information through your account and website settings:
Access and update account information: You can view and change your account information, such as your email address and user ID, through your account settings.
Delete your account: You can permanently delete your account and related personal information through the account deletion option (if available), or by contacting us at Feedback.
Manage cookies: You can manage or disable cookies and similar tracking technologies through your web browser settings.
Manage third-party login: You can manage the information we receive from Google by reviewing and adjusting your Google privacy settings, or by contacting us at Feedback.
B. Rights That Can Be Exercised by Contacting Us
To exercise the following rights, or if you have any questions or special requests, please contact us at Feedback. To protect your security, we may need to verify your identity before fulfilling your request.
Right of access and data portability: You have the right to request a copy of the personal information we hold about you. You may also have the right to receive such information in a structured, commonly used, and machine-readable format so that it can be transferred to other services.
Right to erasure: You can request the deletion of your account and personal information. After receiving and verifying your request, we will delete your data, subject to certain exceptions. For example, we may need to retain some information to comply with legal obligations, resolve disputes, or for security and fraud prevention purposes.
Right to correct inaccurate information: If you believe that any personal information we hold about you is inaccurate or incomplete, you have the right to request that we correct it.
Right to review AI-generated content and automated decision-making: You have the right to know when you are interacting with AI and, where required by applicable law, to request a manual review of automated decisions that significantly affect your legal rights.
C. Region-Specific Rights
Depending on where you reside, local law may grant you additional rights. To exercise the following rights, or if you have any questions or special requests, please contact us at Feedback.
Residents of California and Virginia in the United States (under the CCPA/CPRA and VCDPA)
In addition to the rights above, residents of California and Virginia have the following rights:
Right to know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, the purposes for which it was collected, and the categories of third parties with whom we have shared the information.
Right to opt out of the "sale" or "sharing" of personal information: You have the right to direct us not to "sell" or "share" your personal information as those terms are defined under California law.
Right to limit the use of sensitive personal information: Where applicable law provides for this right, you may request that we limit the use and disclosure of sensitive personal information. We do not intentionally request or knowingly collect sensitive personal information.
Right to non-discrimination: We will not discriminate against you for exercising any of your privacy rights, including by denying you services, charging different prices, or providing a different level or quality of service.
Right to complain: You have the right to lodge a complaint with a supervisory data protection authority regarding our collection and use of your personal information.
Right to object (under the VCDPA): You have the right to object when we process your personal information based on our legitimate interests.
Right to review automated decisions (under the VCDPA): You have the right to request information about automated decisions and profiling that significantly affect you, and to request a manual review.
Residents of the EEA, the United Kingdom, and Switzerland (under the GDPR/UK GDPR/FADP)
If you are a resident of the EEA, the United Kingdom, or Switzerland, you have the following data protection rights:
Right to object: You have the right to object when we process your personal information based on our legitimate interests.
Right to restrict processing: In certain circumstances, you may ask us to suspend the processing of your personal information.
Right to withdraw consent: If we collect and process your information based on your consent, you have the right to withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out based on consent before the withdrawal.
Right to object to automated decision-making: You have the right to object to automated decisions and profiling that significantly affect you, or to request a manual review of such decisions.
Right to complain: You have the right to lodge a complaint with a supervisory data protection authority regarding our collection and use of your personal information.
Residents of Brazil (under the LGPD)
If you are a resident of Brazil, you have the following rights under the Lei Geral de Proteção de Dados (LGPD):
Confirmation of processing: You have the right to confirm whether processing of your data exists.
Anonymization, blocking, or deletion: You have the right to request the anonymization, blocking, or deletion of data that is unnecessary or excessive, or that is processed in a manner that does not comply with the LGPD.
Information about data sharing: You have the right to request information about the public and private entities with which we have shared your data.
Information about consent: You have the right to be informed about the possibility of refusing consent and the consequences of refusing it.
Revocation of consent: You have the right to revoke your consent at any time.
Review of automated decisions: You have the right to request information about automated decisions and profiling that significantly affect you, and to request a manual review.
Complaint: You have the right to lodge a complaint with a supervisory data protection authority regarding our collection and use of your personal information.
10. Social Media and Third-Party Services
We may provide links to third-party websites and services, including Google and other services used to provide or support our Service. Any data collected by these third parties is governed by their respective privacy policies. You should review these policies before using the relevant third-party services.
11. Children's Privacy
Our Service is not directed at children or minors under the age of 18, and we do not knowingly process their personal information. If we become aware that we have collected personal information from a child or minor, we will delete that information immediately. If you believe that we have processed the personal information of a child or minor, please contact us at Feedback.
12. Changes to This Privacy Policy
Our Privacy Policy may be revised or updated from time to time.
We will not diminish your rights under this Privacy Policy without your explicit consent. We will post any changes to this Privacy Policy on this page.
If this Privacy Policy is updated or undergoes material changes, we will notify you through the website or other reasonable means and indicate the updated effective date and last updated date.
13. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
General inquiries: Feedback
Privacy-related requests: Feedback