1. Who we are
Geniemix is a marketing measurement service run by OR Genie ("we", "us"). For account and website information we are the data controller. For the data your business connects or uploads to a workspace, your business is the controller and we process it on its behalf (see section 12).
Questions about this policy or your data: info@orgenie.in.
2. What we collect
- When you request access: your work email, and if you choose to share them, your name, company, monthly ad spend range, the ad channels you use and a note. We also record which page and campaign link brought you to the form.
- Your account: name, work email, the workspaces you belong to and your role, and sign-in events such as one-time codes being sent and used.
- Connected ad accounts (Google Ads, Meta, TikTok): daily spend, impressions, clicks and conversions for each campaign, plus campaign names.
- Connected stores and payments (Shopify, Stripe): for each order or payment, its id, date, total, currency, payment status, test flag and refunds. We add these up by day. We do not read customer names, emails, addresses or what was bought.
- Files you upload, such as a CSV of offline spend or sales.
- Billing: your plan, invoices and billing contact. Card details go straight to Razorpay; we never see or store full card numbers.
- Technical data: IP address, browser and device type, pages visited in the app and error reports, so we can keep the service secure and fix problems.
Workspace data is business data about spend and sales totals. It is not designed to identify any person, and we ask you not to upload files that contain your customers' personal details.
3. How we use it, and our legal basis
Under the GDPR and UK GDPR we must name a legal basis for each use. Here they are:
| What we do | Legal basis |
|---|---|
| Run Geniemix: sync your data, build your model, show results and plans | Contract |
| Review and answer access requests | Steps before a contract; legitimate interests |
| Send sign-in codes and emails about your account | Contract |
| Keep the service secure, prevent abuse and fix errors | Legitimate interests |
| Bill you and keep tax and accounting records | Contract; legal obligation |
| Improve Geniemix using aggregated, de-identified statistics | Legitimate interests |
| Send product news, only if you ask for it | Consent (withdraw any time) |
We do not make decisions about people based only on automated processing. Geniemix recommends budgets; a person on your team decides.
4. What we never do
- Sell your personal information, or share it for cross-context behavioral advertising.
- Put a pixel or tracking script on your store or website.
- Change, create or pause anything in your ad accounts. Our access is read-only.
- Use one customer's data to answer another customer's questions, or give it to anyone to train their AI models.
5. Data from the platforms you connect
When you connect a platform you allow Geniemix to read data through that platform's official interface, only to provide the service to you. For every platform: we ask for the narrowest access it offers, we never resell or hand on platform data, and when you disconnect a source its connection key is deleted at once and you choose whether its history stays or goes.
Geniemix's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Geniemix is independent and is not endorsed by or affiliated with Google, Meta, TikTok, Shopify or Stripe. Each platform's own terms and privacy policy also apply to your account with that platform.
7. International transfers
Geniemix is hosted in the United States, and our team may reach it from the countries where we work. When personal data from the EEA, the UK or Switzerland is transferred, we rely on the European Commission's Standard Contractual Clauses (with the UK addendum) and, where a provider is certified, the EU-U.S. Data Privacy Framework and its UK and Swiss extensions. You can ask us for a copy of these safeguards.
8. How long we keep it
- Access requests that don't become an account: 12 months, then deleted.
- Account and workspace data: while your account is open. When you close it, we delete workspace data within 30 days, and it leaves our backups within a further 35 days.
- A disconnected source: its connection key at once; its history when you choose to remove it, or when the workspace is closed.
- Server logs and error reports: up to 90 days.
- Invoices and billing records: as long as tax and accounting law requires.
9. How we protect it
- Encryption in transit and at rest; the keys that connect your accounts are encrypted again before they are stored.
- Every workspace's data is kept apart by the database itself, which checks every read.
- Access for our team only where needed to run and support the service.
- If a breach affects your data, we tell affected customers without undue delay, and within 72 hours where the law requires it.
No system is perfectly secure, but we work to keep your data safe and to fix problems quickly. Read more on our security page.
10. Your rights
If you are in the EEA or the UK, you can ask us to give you a copy of your personal data, correct it, delete it, restrict or object to how we use it, or send it to you or another service in a common format. Where we rely on consent, you can withdraw it at any time. You can also complain to your local data protection authority (in the UK, the ICO), though we'd like the chance to help first.
If you live in California or another US state with a privacy law (such as Colorado, Connecticut, Virginia, Utah, Texas or Oregon), you can ask what personal information we hold and how we use it, ask us to correct or delete it, and appeal a decision we make about your request. We don't sell or share personal information for advertising and we don't use sensitive personal information, so there is nothing to opt out of. We won't treat you differently for using your rights, and an authorized agent can ask on your behalf.
To use any of these rights, email info@orgenie.in. We will check it's you, then answer within one month (45 days for US state requests), and tell you if we need longer.
12. Data we process for our customers
For workspace data, your business is the controller and we act as its processor (a service provider under US state laws): we use it only to provide Geniemix to that business, on its instructions. Business customers can sign our data processing addendum, which includes the Standard Contractual Clauses; email info@orgenie.in.
13. Children
Geniemix is a service for businesses. It is not meant for anyone under 16, and we do not knowingly collect their information.
14. Changes to this policy
When we change this policy we update the date at the top. If a change matters, we email account owners at least 30 days before it takes effect.
15. Contact
OR Genie, the company behind Geniemix: info@orgenie.in, +91 98334 43061.
A110 Eversun Society, Sahakar Nagar, JP Road, Andheri West, Mumbai 400053, Maharashtra, India.