Legal
Privacy Policy
Version 1.1, effective 5 April 2026
1. Who are we
dGENIX is a product of dGEN Productions, located at Oudekerkstraat 45, 5507LB Veldhoven, Netherlands. Chamber of Commerce: 97916137. VAT number: NL005295840B15. Contact: info@dgenproductions.nl.
dGEN Productions is the data controller for the personal data processed through dGENIX.
2. What data do we process
When using dGENIX, we process the following data:
- Account data: email address, display name, password (hashed via Supabase Auth).
- Subscription and payment data: subscription status and invoice numbers via Stripe. Credit card details are processed solely by Stripe; we never store them ourselves.
- Usage data: credit consumption, executed AI tasks, error logs.
- Integration tokens: Telegram bot token and Google OAuth tokens (Gmail, Google Calendar, Google Drive, Google Sheets), if you choose to connect them. These are stored encrypted (AES-256) and never shared with third parties.
- Technical data: IP address, browser type and session metadata via Supabase.
3. Why do we use your data
- Providing the dGENIX service (AI Assistant via Telegram and dashboard).
- Processing payments and invoicing via Stripe.
- Managing your account and subscription.
- Technical communication about the service (system notifications, security alerts).
- Improving the service based on aggregated, anonymised usage.
We do not send commercial newsletters unless you explicitly consent.
4. Legal basis for processing
We process your personal data based on:
- Performance of contract (Art. 6(1)(b) GDPR): for everything necessary to provide the service.
- Legal obligation (Art. 6(1)(c) GDPR): for the statutory retention of invoice data.
- Legitimate interest (Art. 6(1)(f) GDPR): for security logging and fraud prevention.
- Consent (Art. 6(1)(a) GDPR): for cookies (non-functional) and marketing communications.
5. Third parties and transfers
We share data only with:
- Supabase Inc.: database and authentication (US, SCCs applicable).
- Stripe Inc.: payment processing (US, SCCs applicable).
- Vercel Inc.: hosting of the web application (US, SCCs applicable).
- Telegram Messenger Inc.: message handling via the Telegram Bot API, only if you have connected a bot.
- Anthropic PBC: processing of AI tasks via the Claude API. Your messages are processed in accordance with Anthropic's privacy policy. The agent runs on our own VPS (EU, Hostinger).
- Resend Inc.: sending transactional emails (welcome email, payment confirmation). Only your email address is shared. No marketing purposes.
- OpenAI / Google (Gemini): only if you activate the Multi-Model add-on. Your messages will then (also) be processed by these providers in accordance with their privacy policies. You activate this add-on consciously and voluntarily.
We never sell your data to third parties or use it for targeted advertising.
6. Retention periods
- Account data: as long as your account is active + 30 days after deletion.
- Invoice data: 7 years (statutory retention obligation).
- Usage logs: 90 days after expiry.
- Integration tokens: deleted immediately upon disconnection or account deletion.
7. Your rights (GDPR)
You have the right to:
- Request access to the data we process about you.
- Have incorrect data corrected.
- Have your data deleted (“right to erasure”).
- Restrict processing or object to it.
- Receive your data in a machine-readable format (data portability).
- Withdraw previously given consent.
You can delete your account and all associated data directly via Dashboard → Settings → Delete account. For other requests, send an email to info@dgenproductions.nl. You also have the right to lodge a complaint with the relevant supervisory authority , in the Netherlands: Autoriteit Persoonsgegevens.
8. Cookies
dGENIX uses only functional cookies necessary for the operation of the service (session management). We do not place tracking or advertising cookies without your consent.
9. Security
We take appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS/TLS), hashed passwords (Supabase Auth bcrypt), row-level security at database level, and strict access control based on minimal privileges.
10. Amendments
We may update this privacy policy. For material changes, you will receive a notification via email or a message in the dashboard. The most current version is always available at dgenix.com/privacy.
Questions about this policy?
Contact us at info@dgenproductions.nl or read the Terms of Service.