Privacy Policy

This Privacy Policy explains how GeniusAI collects, uses, stores and shares personal data when you visit geniusai.pro, create an account, purchase credits, use our artificial-intelligence tools or otherwise interact with our services.

The controller responsible for your personal data is:

In this Privacy Policy, “GeniusAI,” “we,” “us” and “our” refer to Dunatransit Ltd..

This Privacy Policy applies to personal data processed through:

• The GeniusAI website;
• GeniusAI accounts and dashboards;
• AI image generation, editing and upscaling tools;
• Purchases and credit packages;
• Customer support and contact forms;
• Marketing communications; and
• Related services that link to this Privacy Policy.

This policy does not apply to independent third-party websites or services, even when they are linked from GeniusAI.

3.1 Account and identity information

When you create or manage an account, we may collect:

• Your name;
• Email address;
• Username and account identifier;
• Encrypted or securely hashed password;
• Profile image;
• Country or approximate location;
• Language and communication preferences; and
• Account settings and status.

3.2 AI inputs and generated content

When you use our AI tools, we process content you submit or create, including:

• Text prompts and instructions;
• Uploaded images and photographs;
• Reference files;
• Generation settings and selected models;
• Generated images and other outputs;
• Editing and upscaling requests; and
• Technical information associated with a generation.

Your prompts or uploaded images may contain personal data about you or another person. You should submit another person’s personal data only when you have a lawful basis and all necessary permissions.

Please do not upload sensitive personal data unless it is necessary, lawful and appropriate for the requested service.

3.3 Purchase and transaction information

When you purchase credits or another product, we may collect:

• Purchased package and credit amount;
• Transaction date and value;
• Currency and tax information;
• Billing name, address and country;
• Payment status and transaction identifier;
• Refund or dispute information; and
• Limited payment-method details supplied by our payment provider, such as card type and final digits.

Full payment-card information is normally collected and processed directly by our payment provider. GeniusAI does not intentionally store full payment-card numbers or security codes.

3.4 Technical and usage information

When you access the Services, we may automatically collect:

• IP address;
• Browser and device type;
• Operating system;
• Device identifiers;
• Login times and session information;
• Pages viewed and features used;
• Referring website or campaign;
• Approximate geographic location;
• Cookie and consent information;
• Error reports and diagnostic information; and
• Security and fraud-prevention logs.

3.5 Communications

When you contact us, we may collect your name, email address, message, attachments and information needed to respond to your request.

We may also keep records of complaints, refund requests, legal notices and other communications.

3.6 Social sign-in information

If you register or sign in through a third-party provider such as Google, Apple or Facebook, we may receive information authorized by you and the provider, such as your name, email address, profile image and provider-specific account identifier.

We do not receive your password for the third-party service.

We collect personal data:

• Directly from you when you create an account, make a purchase, submit content or contact us;
• Automatically through cookies, logs and similar technologies;
• From payment processors and other service providers;
• From social sign-in providers where you choose to use that feature;
• From affiliate or referral partners; and
• From public sources where permitted by law.

We process personal data for the following purposes and legal bases:

5.1 Providing the Services

We process account information, prompts, uploaded files, generated content, credits and transaction information to:

• Create and manage your account;
• Generate, edit and deliver requested content;
• Maintain your credit balance;
• Process purchases and refunds;
• Provide customer support; and
• Communicate important service information.

Legal basis: performance of a contract or steps requested before entering into a contract.

5.2 Security and abuse prevention

We may process account activity, prompts, outputs, IP addresses and technical logs to:

• Secure accounts and systems;
• Detect fraud, malware and unauthorized access;
• Prevent harmful or unlawful use;
• Enforce our Terms of Service; and
• Investigate security incidents.

Legal basis: our legitimate interests in protecting users and the Services, compliance with legal obligations and, where appropriate, the establishment or defence of legal claims.

5.3 Improving the Services

We may analyze usage data, performance information, errors and user feedback to improve reliability, usability and service quality.

Where possible, we use aggregated or anonymized information for analytics and development.

Legal basis: our legitimate interests in operating and improving the Services or your consent where required.

5.4 AI model training

We do not use private prompts, uploaded files or generated content to train AI models without your express consent.

If we offer an optional model-training or content-contribution program, we will provide separate information and obtain any consent required before using your content for that purpose. You may withdraw your consent for future use, subject to legal and technical limitations explained when consent is requested.

5.5 Legal and regulatory compliance

We may process personal data to:

• Maintain tax, accounting and transaction records;
• Respond to lawful requests from authorities;
• Comply with consumer-protection obligations;
• Handle intellectual-property complaints;
• Comply with sanctions and other applicable laws; and
• Establish, exercise or defend legal claims.

Legal basis: compliance with a legal obligation and our legitimate interest in protecting our legal rights.

5.6 Marketing

With your consent, we may send you product updates, promotions and other marketing communications.

You may withdraw your consent at any time by using the unsubscribe link in an email or contacting us. Withdrawing consent does not affect processing that occurred before withdrawal.

We may still send non-marketing messages concerning purchases, security, account changes and important service updates.

We use cookies and similar technologies to operate the website, maintain sessions, remember preferences, measure performance and understand how the Services are used.

Cookies may include:

• Strictly necessary cookies required for login, security, checkout and core functionality;
• Preference cookies that remember your settings;
• Analytics cookies that help us understand website and feature usage; and
• Marketing cookies used to measure campaigns or provide advertising, where applicable.

Where required by law, non-essential cookies are activated only after you provide consent. You may withdraw or change your consent through the cookie settings available on the website.

Blocking necessary cookies may prevent parts of the Services from functioning properly. More information is available in our Cookie Policy.

We do not sell your personal data.

We may share personal data with:

• Cloud hosting, storage and infrastructure providers;
• AI model and generation service providers;
• Payment processors, banks and fraud-prevention providers;
• Email, customer-support and communication providers;
• Analytics and cookie providers, subject to applicable consent requirements;
• Authentication and social sign-in providers;
• Professional advisers, including lawyers, accountants, auditors and insurers;
• Authorities, courts and regulators where required or permitted by law;
• A purchaser, investor or successor in connection with a merger, financing, reorganization or sale; and
• Other parties when you instruct us or provide consent.

Service providers may process personal data only for authorized purposes and are required to protect it through appropriate contractual and security safeguards.

Some service providers may process personal data outside Hungary or the European Economic Area.

Where personal data is transferred outside the EEA, we use an approved legal transfer mechanism where required, such as:

• A European Commission adequacy decision;
• European Commission Standard Contractual Clauses;
• Additional contractual, organizational or technical safeguards; or
• Another transfer mechanism permitted by applicable law.

You may contact us for further information about safeguards relevant to your personal data.

We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods are determined by considering:

• The duration of your account and use of the Services;
• The nature, amount and sensitivity of the information;
• Whether you have deleted content or closed your account;
• Security and fraud-prevention requirements;
• Applicable accounting, tax and legal obligations;
• Limitation periods for potential legal claims; and
• Whether information can be securely anonymized.

In general:

• Account data is retained while your account remains active and for a reasonable period after closure;
• Prompts, uploaded files and generated content are retained until deleted by you, your account is closed or they are no longer required to provide the Services;
• Transaction and invoice records are retained for the period required by applicable tax and accounting law;
• Support and legal communications are retained while the matter remains active and for a reasonable period afterward;
• Security logs are retained for a limited period necessary to detect and investigate abuse; and
• Backup copies may remain temporarily until they are overwritten through the normal backup cycle.

We may retain information for longer where required by law, necessary for legal claims or needed to investigate fraud or serious misuse.

We use appropriate technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, destruction or loss.

These measures may include:

• Encryption during transmission;
• Secure password storage;
• Access controls and authentication;
• Logging and security monitoring;
• Restricted employee and contractor access;
• Provider security assessments; and
• Backup and incident-response procedures.

No online service can guarantee absolute security. You are responsible for using a strong password and protecting your account credentials.

If we become aware of a personal-data breach, we will investigate and notify affected individuals and authorities where required by law.

Subject to applicable law, you may have the right to:

• Request access to your personal data;
• Request correction of inaccurate or incomplete data;
• Request deletion of your personal data;
• Request restriction of processing;
• Object to processing based on legitimate interests;
• Object to direct marketing at any time;
• Receive certain data in a structured, commonly used and machine-readable format;
• Request transmission of eligible data to another controller;
• Withdraw consent at any time;
• Obtain information about applicable international-transfer safeguards; and
• Lodge a complaint with a data-protection authority.

These rights are not absolute. We may need to retain or continue processing certain information where permitted or required by law.

To exercise your rights, contact us through our contact page. We may request information necessary to verify your identity and protect your account.

We will respond without undue delay and normally within one month, unless applicable law permits an extension.

GeniusAI uses automated systems to generate content and may use automated tools to detect fraud, harmful content, security threats or violations of our Terms.

We do not ordinarily make decisions based solely on automated processing that produce legal or similarly significant effects concerning you.

If such processing is introduced, we will provide any additional information and safeguards required by law, including the ability to request human review where applicable.

The Services are not directed to children under 18.

We do not knowingly collect personal data from a child without authorization from a parent or legal guardian where such authorization is required.

If you believe a child has provided personal data unlawfully, please contact us so we can investigate and take appropriate action.

The Services may contain links to third-party websites or services. We do not control those third parties and are not responsible for their privacy practices.

You should review the privacy policy of every third-party service you use.

We may update this Privacy Policy to reflect changes to the Services, our processing activities or applicable law.

The updated policy will be published on this page with a revised effective date. Where changes materially affect your rights or how we use personal data, we will provide additional notice where required.

Questions, requests and complaints concerning privacy may be submitted to:

You have the right to lodge a complaint with the data-protection authority in your country of residence, place of work or place of the alleged infringement.

GeniusAI’s lead Hungarian supervisory authority is: