Privacy and compliance

GenieForge is built with security in mind. This page states what we can say clearly in product docs. It does not replace your own legal review, and it does not invent certifications.

Security posture (public facts)

Topic	What we can state
Company / hosting	GenieForge Technologies Inc. is based in Canada. Platform infrastructure is hosted in the United States. Using the product involves processing in the United States and Canada.
Encryption	Industry-standard encryption in transit and at rest, plus access controls and audit logging.
Audit retention	Access and impersonation audit records are kept for at least six years.
Access log	App Settings → Privacy has Access log. Owners and admins can review who opened tools, files, and conversations, export the log, and see whether the tamper-evident chain check passed. This is reviewable evidence, not a claim that the log can never be changed.
Platform support access	App Settings → Privacy has Platform support access. It lists when GenieForge staff opened your app to help you, with a start time, when that access expires, and the reason they gave. Staff names and emails are not shown.
Application controls	Isolated custom logic per app, role-based access, and a separate login path for your customers (end users) vs builders.
Project isolation	Each project has its own database and files while sharing the app blueprint.
Secrets	Keep secrets in environment variables, not chat. See Secrets and safe execution.
Customer authentication	End users authenticate to your app’s portal separately from your builder account.

For fuller privacy language (cookies, rights, retention wording, and how usage signals are reviewed by the GenieForge team), see the public Privacy Policy. For the current list of service providers that help run the platform, see Subprocessors.

What this guide does not claim

GenieForge does not claim certifications (such as SOC 2 or HIPAA) in this documentation. If you need a written answer, DPA language, or an enterprise security pack for diligence, email support@genieforge.ai or privacy@genieforge.ai. For HIPAA / BAA and end-user privacy notices, see HIPAA and regulated health data.

Deletion and privacy requests

To exercise privacy rights or ask about deletion, email privacy@genieforge.ai. The Privacy Policy describes response timing and related process. Account closure for builders is handled through that privacy request path (not a silent self-serve wipe of every record).

Contacts

Privacy: privacy@genieforge.ai
General support: support@genieforge.ai
Product site: https://genieforge.ai