G8
Sign in+Post work

Privacy Policy

Last updated: May 2026

GENR8 (genr8art.com) operated by BC Studios Romania.

1. Introduction

This Privacy Policy explains how GENR8 ("we", "us", "our"), operated by BC Studios Romania, collects, uses, and protects your personal data when you use genr8art.com ("the Platform"). We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR), applicable EU/EEA data protection laws, and other applicable privacy laws.

By using GENR8, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The data controller responsible for your personal data is:

BC Studios Romania Email: contact@genr8art.com Website: genr8art.com

As we operate within the European Union, your data is processed in accordance with GDPR (Regulation EU 2016/679).

3. What Data We Collect

We collect the following categories of personal data:

  • - Account Data: Email address, username, display name, password (encrypted), profile photo, bio, website, and professional information you choose to provide.
  • - Content Data: Artwork, images, videos, audio files, prompts, descriptions, comments, and any other content you post on the Platform.
  • - Usage Data: Pages visited, features used, search queries, timestamps, and interaction data collected automatically when you use the Platform.
  • - Technical Data: IP address, browser type and version, device type, operating system, and other technical identifiers collected automatically.
  • - Authentication Data: If you sign in using Google OAuth, we receive your Google email address and profile picture as permitted by your Google account settings.
  • - Communications: Messages you send to us via contact forms, email, or bug reports.

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your data on the following legal bases:

  • - Contract Performance (Article 6(1)(b)): Processing necessary to provide you with the GENR8 service, including account management and content delivery.
  • - Legitimate Interests (Article 6(1)(f)): Processing for platform security, fraud prevention, and service improvement.
  • - Consent (Article 6(1)(a)): For optional features such as marketing communications. You may withdraw consent at any time.
  • - Legal Obligation (Article 6(1)(c)): Processing required to comply with applicable laws.

5. How We Use Your Data

We use your personal data to:

  • - Create and manage your account
  • - Display your profile and content to other users
  • - Enable platform features including likes, comments, follows, and messaging
  • - Send account-related notifications
  • - Respond to your support requests
  • - Detect and prevent fraud and abuse
  • - Improve and develop the Platform
  • - Comply with legal obligations

6. Data Sharing and Third Parties

We do not sell your personal data. We share data only with:

  • - Supabase (supabase.com): Our database and authentication infrastructure provider. Data is processed under Supabase's Data Processing Agreement.
  • - Vercel (vercel.com): Our hosting and deployment infrastructure provider.
  • - Google (for OAuth users only): Authentication data shared as described in Section 3.
  • - Law Enforcement: We may disclose data when required by law, court order, or governmental authority.

7. Data Retention

We retain your personal data for as long as your account is active. Specifically:

  • - Account data: Retained until you delete your account.
  • - Content you post: Retained until you delete it or your account is deleted.
  • - Usage and technical data: Retained for up to 12 months for security and analytics purposes.
  • - Communications: Retained for up to 24 months.
  • - When you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law.

8. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

  • - Right of Access (Article 15): Request a copy of all personal data we hold about you.
  • - Right to Rectification (Article 16): Correct inaccurate or incomplete data. You can update most data via Settings.
  • - Right to Erasure (Article 17): Request deletion of your personal data. You can delete your account via Settings or contact us at contact@genr8art.com
  • - Right to Restriction (Article 18): Request that we limit how we process your data in certain circumstances.
  • - Right to Data Portability (Article 20): Receive your data in a structured, machine-readable format.
  • - Right to Object (Article 21): Object to processing based on legitimate interests.
  • - Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
  • - Right to Lodge a Complaint: You have the right to lodge a complaint with your national data protection authority. In Romania, this is ANSPDCP (Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal). Website: dataprotection.ro
  • - To exercise any of these rights, contact us at: contact@genr8art.com. We will respond within 30 days.

9. International Data Transfers

GENR8 uses infrastructure providers (Supabase, Vercel) that may process data outside the European Economic Area. Such transfers are protected by Standard Contractual Clauses (SCCs) as approved by the European Commission, ensuring adequate protection of your personal data.

10. Cookies

We use the following cookies:

  • - Essential cookies: Required for authentication and session management. Cannot be disabled.
  • - We do not use advertising, tracking, or third-party analytics cookies.
  • - You can manage cookie preferences in your browser settings. Disabling essential cookies will prevent you from staying logged in.

11. Children's Privacy

GENR8 is not intended for users under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has provided us with personal data, contact us immediately at contact@genr8art.com

12. Security

We implement appropriate technical and organisational security measures to protect your personal data including:

  • - Encrypted data transmission (HTTPS/TLS)
  • - Encrypted password storage
  • - Row-level security on all database tables
  • - Access controls limiting data access to authorised systems only
  • - In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected users without undue delay.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Platform or sending an email. Continued use of GENR8 after changes constitutes acceptance of the updated policy.

14. Contact

For privacy-related questions or to exercise your rights:

  • - Email: contact@genr8art.com
  • - Website: genr8art.com
  • - Operator: BC Studios Romania