Privacy Policy

1. Introduction

Genfire is an AI content-creation platform operated by Killbrands LLC ("Company," "we," "us," or "our"). We operate the website genfire.ai, the Genfire mobile applications, and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please discontinue use immediately.

2. Information We Collect

2.1 Personal Information

We collect information you provide directly:

• Account registration data (name, email address, password)
• Payment and billing information (processed securely through third-party payment processors)
• Profile information and preferences
• Content you create, upload, or generate using our Service
• Media you ask us to process, including files you upload and public URLs you supply (for example, a YouTube link you paste into the Clips tool so we can fetch that video and cut it into clips)
• Communications with our support team

2.2 Automatically Collected Information

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent)
• Cookies and similar tracking technologies
• Log files and analytics data

2.3 Third-Party Sign-In

If you sign in with a third-party authentication service (for example, Google Sign-In or Apple Sign In), we receive your basic profile information — your name, email address, and profile picture — solely to create and authenticate your Genfire account.

2.4 Connected Social Accounts

If you choose to connect a YouTube, TikTok, or Instagram account so that Genfire can publish content on your behalf, we receive and store information from that platform. For YouTube we also read your own channel's statistics and aggregated YouTube Analytics reports so we can show you how your channel is performing inside Genfire. Section 4 describes exactly what we access, why, how long we keep it, and how you revoke it.

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service
• Process transactions and manage subscriptions
• Publish content to social accounts you have connected, at your direction
• Send administrative notifications and updates
• Provide customer support and respond to inquiries
• Analyze usage patterns and optimize performance
• Detect, prevent, and address fraud, abuse, or security issues
• Comply with legal obligations and enforce our Terms of Service
• Send marketing communications (with your consent, where required)

4. Connected Social Accounts (YouTube, TikTok, Instagram)

Genfire can publish videos and images to social accounts you connect. Connecting an account is entirely optional — the rest of the Service works without it. When you connect an account, you are redirected to that platform's own login and consent screen; Genfire never sees or stores your social account password.

We request the narrowest permissions needed to publish on your behalf, and we use the data we receive only to provide the publishing features you asked for. We do not use it for advertising, we do not build advertising profiles from it, we do not sell it, and we do not use it to train or improve any AI or machine-learning model.

4.1 YouTube

Genfire uses YouTube API Services. By connecting a YouTube channel you also agree to the YouTube Terms of Service. Google's own handling of your information is described in the Google Privacy Policy.

Permissions we request:

• youtube.upload — to upload the videos you create in Genfire to your channel. This permission cannot read, edit, or delete videos already on your channel.
• youtube.readonly — to read your channel's ID, title, and profile image so we can show you which channel a post will go to and confirm an upload succeeded, and to read your own channel's statistics and YouTube Analytics reports so we can show you how your channel is performing inside Genfire.

What we access:

• Channel identity — channel ID, channel title, custom handle, and profile image.
• Public statistics for your channel and its videos — subscriber count, total view count, video count, and per-video view, like, and comment counts, together with each video's title, thumbnail, duration, publish date, and privacy status.
• Aggregated YouTube Analytics reports for your channel — daily totals for views, watch time, average view duration, subscribers gained and lost, likes, comments, and shares; your highest-performing videos; and aggregated, anonymous breakdowns of your audience by traffic source, country, device type, and viewer age and gender band. These reports are statistical aggregates that YouTube produces about your channel. They never identify individual viewers, and Genfire does not receive, request, or store any information that identifies a viewer of your channel.

How we use it:

• To publish and schedule the videos you ask us to publish, to the channel you choose.
• To display your channel's performance back to you inside Genfire — on the Channel Analytics page, on the content calendar, and alongside the individual videos Genfire published for you.
• To show you which of your videos Genfire published, by matching video IDs we recorded at upload time against your channel's videos.

We do not use YouTube data for advertising or ad targeting, to build advertising or marketing profiles, to train or improve any AI or machine-learning model, or to benchmark, rank, or compare your channel against other Genfire users' channels. We do not use it to derive insights about YouTube's own business.

What we store: your YouTube channel ID, channel title, custom handle, and channel profile image — we keep our own copy of the image file, because the link YouTube gives us expires; the OAuth access and refresh tokens Google issues (encrypted at rest); the granted permissions and their expiry; a record of each video Genfire uploaded for you (video ID, URL, timestamp, and status); and a cached copy of the statistics and aggregated analytics reports described above, so the Channel Analytics page loads quickly and we do not have to re-query YouTube on every page view.

Who we share it with: nobody. YouTube channel data is shown only to the Genfire account that connected the channel. We do not sell it, do not transfer it to data brokers, advertisers, or analytics vendors, and do not send it to any third-party AI service. It is stored in our own Google Cloud infrastructure (Firestore, in the United States) and is not passed to the third-party model providers that power Genfire's generation features. A small number of authorised Genfire staff can access stored data where necessary to operate the service, investigate abuse, or comply with law.

How we protect it: OAuth access and refresh tokens are encrypted at rest with AES-256-GCM using a key held in Google Secret Manager, and are never returned by our API; all traffic is over TLS. The cached statistics and analytics are readable only by the Genfire account that owns the connection, enforced by database security rules, and are written only by our backend — never by a browser.

How long we keep it, and when we delete it:

• Channel identifiers, tokens, and upload records are kept while your channel remains connected, because the feature cannot work without them.
• Cached statistics and analytics are exactly that — a cache, refreshed when you open the page. Nothing is kept longer than 30 calendar days without being refreshed: a daily job deletes any cached channel data older than that, so a channel you stop using leaves no residue, including where you revoked access in your Google Account and we never heard about it.
• If you disconnect the channel in Genfire, we delete the stored tokens, channel information, our copy of the channel profile image, statistics, and analytics immediately — well inside the 7 days the YouTube API Services Developer Policies allow. If you revoke access through your Google Account settings instead, the stored data is deleted within 30 days.
• Deleting your Genfire account deletes all of it.

Genfire does not create or maintain any profile of your viewers from YouTube API data.

Revoking access: you can disconnect the channel at any time from Dashboard → Calendar in Genfire, which deletes the stored tokens, channel information, and cached analytics and asks Google to revoke the token. You can also revoke Genfire's access independently at any time through the Google security settings page at https://myaccount.google.com/permissions (also reachable at https://security.google.com/settings/security/permissions).

4.2 TikTok

Permissions we request: user.info.basic, video.upload, and video.publish — to identify which TikTok account you are posting from and to upload and publish the videos you create in Genfire.

What we store: your TikTok open_id, display name, and avatar URL; the OAuth access and refresh tokens TikTok issues (encrypted at rest); the granted scopes and their expiry; and a record of each video Genfire published for you.

We do not read your TikTok videos, followers, comments, direct messages, or analytics. Revoking access: disconnect from Dashboard → Firestation → Connectors, or remove Genfire under Settings → Security → Manage app permissions in the TikTok app.

4.3 Instagram

Permissions we request: instagram_business_basic and instagram_business_content_publish — to identify which Instagram professional account you are posting from and to publish the Reels, images, and carousels you create in Genfire.

What we store: your Instagram user ID, username, and profile picture URL; the access token Meta issues (encrypted at rest); the granted permissions and their expiry; and a record of each post Genfire published for you.

We do not read your existing media, followers, comments, direct messages, or insights. Revoking access: disconnect from Dashboard → Firestation → Connectors, or remove Genfire under Instagram Settings → Website permissions → Apps and websites.

4.4 What happens when you disconnect

Disconnecting an account deletes the stored access token, refresh token, account profile information, our copy of the account profile image, and any cached statistics or analytics for that account from our systems, and we ask the platform to revoke the token so it stops working immediately. Any scheduled posts still queued for that account will no longer publish. Content already published to the platform remains on the platform and is governed by that platform's own terms — you control it there.

5. Google API Services Limited Use

Genfire's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we confirm that:

• We use Google user data only to provide and improve the user-facing features you requested.
• We do not use Google user data for serving advertisements, and we do not sell it.
• This applies equally to the aggregated YouTube Analytics reports described in Section 4.1: they are used only to show you your own channel's performance, are never combined across Genfire users, and are never used for advertising, model training, or benchmarking.
• We do not use Google user data to develop, improve, or train generalized or non-personalized AI or machine-learning models. Content that you generate through Genfire's AI tools is separate from Google user data, and Google user data is never included in it.
• We do not transfer Google user data to third parties, except as necessary to provide or improve the feature you requested, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice and consent as required.
• Humans do not read Google user data, except with your explicit consent for specific messages, where necessary for security purposes such as investigating abuse, to comply with applicable law, or where the data has been aggregated and anonymized for internal operations.

6. AI-Generated Content

Our Service uses artificial intelligence to generate content. You acknowledge that:

• Prompts you write, and files you upload or generate, are sent to the third-party AI model providers that fulfil your request so the content can be produced.
• We may analyze prompts and generated content for quality assurance, safety, and compliance with our Terms of Service.
• Content may be stored temporarily or permanently as part of our operations.
• We implement technical measures to protect your content but cannot guarantee absolute security.

Data from connected social accounts is excluded from all of the above. Information we receive from YouTube, TikTok, or Instagram — including tokens, account identifiers, and profile information — is never sent to AI model providers and is never used to train or improve any AI or machine-learning model, ours or anyone else's.

7. Information Sharing and Disclosure

We do not sell your personal information. We may share information with:

7.1 Service Providers

Third-party vendors who perform services on our behalf under contract, limited to what each needs to do its job: Google Cloud and Firebase (hosting, database, storage, authentication), Vercel (frontend hosting and analytics), Stripe (payment processing), Resend (transactional email), Google Analytics (usage analytics, only with your consent), and AI model providers who generate the media you request.

7.2 Social Platforms You Connect

When you publish through Genfire, we send the media and caption you chose to the platform you selected (YouTube, TikTok, or Instagram) so it can be posted to your account. We share nothing with a platform you have not connected.

7.3 Legal Requirements

When required by law, subpoena, court order, or government request, or to protect our rights and safety.

7.4 Business Transfers

In connection with a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity. Where the transfer includes data received from Google APIs, we will obtain your explicit prior consent as required by the Google API Services User Data Policy.

7.5 With Your Consent

We may share information with your explicit consent or at your direction.

8. Data Security

We implement industry-standard security measures including encryption in transit (TLS), access controls, and secure storage. OAuth access and refresh tokens for connected social accounts are encrypted at rest with a key held in Google Secret Manager, are never exposed to the browser, and are never returned by our API. However, no method of transmission or storage is 100% secure.

We are not liable for unauthorized access, hacking, data loss, or other security breaches beyond our reasonable control.

9. Data Retention

We retain your information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements.

• Connected social account data (tokens, account IDs, usernames, avatars) is retained only while the account remains connected. It is deleted when you disconnect the account or delete your Genfire account.
• YouTube statistics and analytics are cached, never archived: a daily job deletes any cached channel data that has not been refreshed for 30 calendar days, and all of it is deleted immediately when you disconnect the channel. Section 4.1 has the detail.
• Account and content data is deleted when you delete your account, subject to the backup and legal-hold exceptions below.

Upon account deletion, we may retain limited information for a short period for backup, archival, fraud prevention, or legal purposes.

10. How to Delete Your Data

You can delete your data at any time:

• Disconnect one social account: go to Dashboard → Firestation → Connectors and choose Disconnect. This deletes that account's tokens and profile data from our systems.
• Delete your entire Genfire account: go to Dashboard → Usage → Delete Account. This cancels any subscription and permanently deletes your account, generated content, and all connected social account credentials.
• By email: write to hello@genfire.ai from your account email address with the subject "Data Deletion Request". We respond within 30 days.

Full step-by-step instructions are on our Data Deletion page.

11. Your Rights and Choices

Depending on your jurisdiction, you may have rights to:

• Access, correct, or delete your personal information
• Object to or restrict certain processing activities
• Data portability
• Withdraw consent (where processing is based on consent)
• Opt-out of marketing communications

To exercise these rights, contact us at hello@genfire.ai. We may require verification of your identity.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. By using the Service, you consent to such transfers.

13. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe a child has provided us with personal information, contact us immediately, and we will take steps to delete such information.

14. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services. We are not responsible for their privacy practices. Review their privacy policies before providing information.

15. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising CCPA rights

Contact us at hello@genfire.ai to exercise these rights.

16. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data based on:

• Consent (where you have given explicit consent — for example, connecting a social account)
• Contract performance (to provide the Service)
• Legal obligation (to comply with laws)
• Legitimate interests (to improve and secure the Service)

You have the right to lodge a complaint with your local data protection authority.

17. Cookies and Tracking Technologies

We use cookies and similar technologies to operate, secure, and improve our Service. When you first visit our site, a consent banner allows you to choose which categories of cookies you accept. Essential cookies and our own first-party analytics cookies are active by default; cookies that share data with a third party, including Google Analytics and advertising cookies, remain off until you accept them.

Essential Cookies (Always Active)

• __session / session: Authentication session cookies that keep you logged in.
• gf_consent: Stores your cookie consent preferences (1-year expiry).
• gf_ref: Affiliate referral tracking for our referral program (30-day expiry).
• Payment Cookies: Third-party payment processors (Stripe) may set essential cookies to detect fraud and securely process transactions.

First-Party Analytics Cookies (Active by Default)

These are our own cookies, read only by us and never shared with a third party. They are active by default so we can measure how the Service is used, and you can switch them off at any time by choosing "Essential Only" in the consent banner or by updating your preferences on our Cookie Policy page.

• gf_aid: A random identifier for your browser, so activity before and after you create an account can be joined (400-day expiry).
• gf_sid: Groups your activity into a single visit, rolling over after 30 minutes of inactivity.
• gf_ft / gf_lt: The page, referrer and campaign parameters you first and most recently arrived from (400-day expiry).

Third-Party Analytics Cookies (Consent Required)

• _ga, _ga_*: Google Analytics 4 cookies used to measure site usage and performance. Only set if you accept analytics cookies.

We also use Vercel Analytics, a privacy-friendly, cookie-free analytics service, to understand general site performance. This does not require consent as it does not set cookies or collect personal data.

You can change your cookie preferences at any time by visiting our Cookie Policy page. You can also instruct your browser to refuse all cookies, but some parts of the Service (like logging in) may not function properly without essential cookies.

18. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes are effective upon posting, and we update the "Last Updated" date above. If we materially change how we access, use, store, or share data from Google, TikTok, or Meta APIs, we will notify you by email and in the app before the change takes effect. Your continued use of the Service constitutes acceptance of the updated policy.

19. Contact Us

For questions, concerns, or requests regarding this Privacy Policy, contact us:

Genfire — a service of Killbrands LLC

Email: hello@genfire.ai