Privacy Policy

Last updated: August 12, 2026

Who we are

GenViz.ai (“GenViz”, “we”, “us”) is an AI workspace that connects to your databases and turns plain-language questions into shareable answers. This policy explains what we collect, why, and the choices you have. Questions? Email privacy@genviz.ai.

What we collect

  • Account and waitlist data. Your email address and profile details, handled by our authentication provider, Clerk.
  • Organization data. Workspace names, membership, and plan information needed to run your organization.
  • Connection credentials and API keys. Database connection details and any LLM API keys you provide are stored encrypted (AES-256-GCM) and used only to run the queries you ask for.
  • Usage analytics. Page views, feature interactions, and campaign parameters (such as UTM tags), collected via PostHog to understand how the product and site are used.

What we don't collect

We do not log the content of your messages or questions. Server logs record metadata only (such as content length, model, and language). Your database contents are queried to answer your questions and are not harvested or used to train models.

How we use your data

  • To provide and operate the service, including running queries you request.
  • To manage billing, handled by Clerk Billing and its payment processor, Stripe.
  • To notify you about waitlist access and service updates.
  • To measure and improve the product and our marketing.

Who processes it

We use a small set of subprocessors: Clerk (authentication and billing), Stripe (payments), Convex (application backend), Cloudflare (hosting and networking), PostHog (analytics), and the LLM provider your organization configures (Anthropic, OpenAI, or OpenRouter). When you bring your own LLM key, your prompts are sent to that provider under your agreement with them.

Retention and deletion

We keep your data while your account is active. You can request deletion of your account and associated data at any time by emailing privacy@genviz.ai, and we will delete it within 30 days except where retention is required by law.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. Contact us and we will honor applicable requests.

Changes

We will update this page when our practices change and revise the date above. Material changes will be announced by email to account holders.