Genovad
← Back to Genovad

Legal

Privacy Policy

This Policy explains what personal information Genovad handles, why we handle it, and the choices available to you.

Effective September 16, 2026

1. Scope

This Policy applies to Genovad websites, applications, marketplace features, and support interactions that link to it. It does not govern third-party sites, a customer’s own privacy practices, or information processed by another business outside Genovad.

2. Information we collect

Information you provide

  • Account and identity data, such as name, email, phone number, role, credentials, and email-verification status.
  • Profile and organization data, including biography, skills, location, links, company details, team membership, and verification evidence.
  • Marketplace data, including opportunities, requirements, bids, budgets, project status, evaluations, and interests.
  • Content and communications, including posts, messages, files, documents, comments, calendar items, support requests, and e-signature workflow data.
  • Integration data you authorize from connected identity, email, storage, calendar, and signing services.

Information collected automatically

We collect device, browser, IP address, access time, referring page, approximate IP-based location, authentication, security, and diagnostic information. If you permit analytics, we also collect product interactions and page paths. Identifiers embedded in supported page paths are replaced before analytics collection. We disable session replay in our analytics configuration.

Information from other sources

We may receive information from organization administrators, other marketplace users, public business registries, connected services you authorize, security providers, and business partners. Users may invite you or include your professional information in a project or communication.

3. How we use information

  • Provide accounts, profiles, workspaces, projects, bids, messaging, documents, calendar, integrations, and support.
  • Match and connect marketplace participants and display information according to selected visibility settings.
  • Authenticate users, verify organizations, prevent abuse, investigate incidents, and protect Genovad and its users.
  • Send transactional, security, administrative, and preference-based notifications.
  • Operate, troubleshoot, analyze, and improve the service when permitted.
  • Comply with law, enforce agreements, and establish, exercise, or defend legal claims.

Where applicable law requires a legal basis, we rely on performance of a contract, legitimate interests, compliance with legal obligations, and consent. You may withdraw consent at any time without affecting earlier processing.

4. Visibility and disclosure

Public profiles, approved company pages, public posts, and public opportunities may be visible to other users or the public. Private opportunities, proposals, messages, evaluations, and restricted documents are limited to authorized participants, though recipients may save or redistribute information they receive.

We may disclose information to:

  • other users and organizations as needed for features you use;
  • hosting, database, storage, communications, identity, analytics, abuse-prevention, geolocation, support, and signing providers acting for us;
  • professional advisers, auditors, insurers, and authorities where reasonably necessary or legally required;
  • a buyer, investor, lender, or successor in a merger, financing, reorganization, bankruptcy, or transfer; and
  • another party at your direction or with your consent.

Genovad does not sell personal information for money. We do not share personal information for cross-context behavioral advertising and do not use Google API user data for advertising.

5. Connected accounts and Google API data

If you connect Google, Microsoft, or LinkedIn, we receive the identifiers and profile details you authorize. Gmail, Outlook, Drive, and OneDrive connections use separate permissions. OAuth credentials are encrypted and stored server-side. Connected-mail permission is used only when you direct Genovad to send a message, not to read your inbox. To prevent abuse, we record provider, time, delivery status, and a one-way protected representation of the recipient, but not the subject or body in the send audit.

Genovad’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including Limited Use requirements. Google account data is used only for user-facing features you authorize, is not sold, and is not used for advertising. You may disconnect supported accounts in Settings and may also revoke access with the provider.

6. Cookies and analytics

Strictly necessary browser storage supports authentication, security, integration handoffs, and remembering privacy choices. Optional PostHog analytics remains off unless you accept it. You may reject optional analytics or change your choice at any time through Cookie settings. See our Cookie Policy for details.

7. Retention

We retain information for as long as reasonably needed to provide the service, maintain security and business records, resolve disputes, and meet legal obligations. Retention varies by data type, account status, workspace instructions, sensitivity, and legal need. When information is no longer needed, we delete or de-identify it, subject to backup cycles and lawful exceptions.

8. Security

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, protected session cookies, encryption in transit, and encryption of stored integration credentials. No system is completely secure, so we cannot guarantee absolute security.

9. Your choices and privacy rights

Depending on where you live, you may have rights to access, know, correct, delete, or obtain a copy of personal information; object to or restrict processing; withdraw consent; and appeal a denied request. California residents may also request the categories, sources, purposes, and recipients of covered personal information and opt out of sale or sharing. We do not sell or share personal information as those terms are defined by the CCPA. We will not discriminate against you for exercising a privacy right.

You may update profile and organization data in the service, disconnect integrations in Settings, and submit a request to support@genovad.com. We may need to verify your identity and authority. An authorized agent may submit a request where permitted by law. Some information may be retained or excluded as allowed by law. You may appeal a denied request by replying to our decision.

10. International use

Genovad and its providers may process information in the United States and other countries whose laws differ from those where you live. Where required, we use appropriate safeguards for restricted international transfers.

11. Children

Genovad is a business service not directed to children. You must be at least 18 to create an account. If we learn that we collected personal information from a child in violation of applicable law, we will take appropriate steps to delete it.

12. Changes and contact

We may update this Policy to reflect service, legal, or operational changes. We will post the updated date and provide additional notice when required. Questions or privacy requests may be sent to support@genovad.com.