GenAsset
Legal
Legal

Privacy Policy

This policy explains what personal data GenAsset processes and how that data is used and protected.

Last updated: 7 May 2026

1. Controller

WARESTACK LTD (Company Number 12374664) is the controller for personal data processed through the GenAsset service.

2. Data we process

  • Account data: Google email and basic identity profile fields.
  • Workspace data: tokens, workspace names, access events, and settings.
  • Content data: uploaded images, generation metadata, prompts, seeds, models, workflow JSON, and version history.
  • Technical data: request logs, IP information, browser/device metadata, and security telemetry.

3. Purposes and legal bases

  • Service delivery and security: contract performance and legitimate interests.
  • Fraud prevention, abuse detection, and incident response: legitimate interests and legal obligations.
  • Operational analytics and product improvement: legitimate interests.

4. Processors and infrastructure

GenAsset is hosted on Google Cloud services (including Cloud Run, Cloud SQL, and Cloud Storage). Service providers process data only under our instructions and contractual safeguards.

5. Retention

We retain data for as long as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. You can request deletion of account-associated data, subject to legal and security retention requirements.

6. Sharing

We do not sell personal data. We share data only with processors, when required by law, or as directed by user-controlled sharing features.

7. International transfers

Where data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

8. Security

We use technical and organizational controls designed to protect confidentiality, integrity, and availability, including access controls, encrypted transport, and credential/token protection mechanisms.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, and data portability. You may also lodge a complaint with your local supervisory authority.

10. Contact

Privacy requests can be sent via your dashboard support channel and will be handled by WARESTACK LTD.