Privacy Policy

Last updated: January 21, 2026

Effective Date: December 24, 2025

Plain‑Language Summary

GitGenius respects your privacy. We collect only the data necessary to operate and improve our services, keep that data secure, and give you control over how it is used. You can access, correct, or delete your personal data at any time. We do not rent, sell, or trade your Personal Information.

Overview

This Privacy Policy (“Privacy Policy”, “Policy”) describes how GitGenius (“GitGenius”, “we”, “us” or “our”) collects, uses, shares, processes and protects personal information (“Personal Information”) relating to individuals (“you”, or “your”), who may use or interact with our websites or services, communicate with us, contact us, or attend our events. “You” may be a visitor to one of our websites, a userof one or more of our Services (“User”), a collaborator, or a customer (“Customer”).

Data Controller: GitGenius, LLC is the data controller responsible for the processing of your Personal Information as described in this Privacy Policy.

Table of Contents

  1. Scope
  2. Data Collections and Uses
    • Overview
    • Cookies and Tracking Technologies
    • Personal Information We Collect and Receive
    • Visitors
    • Customers/Prospective Customers (Marketing)
    • Users/Customers
  3. How We Use Personal Information
    • Purposes of Processing
    • Legal Basis for Processing
    • Third Party Sharing
  4. How Long We Keep Your Data
  5. Data Breach Notification
  6. Security
  7. Children's Privacy
  8. International Data Transfers
  9. Notice for California Residents
  10. Your Rights
  11. Changes to This Policy
  12. Contact Us

Scope

This Policy applies to all visitors of our websites, and users of our products, websites, features or services, or any other GitGenius websites that link to this Policy (collectively, the “Websites”), unless covered by a separate privacy policy, and explains how we collect, use, disclose, and safeguard your information. Please note that this Privacy Policy does not apply to the extent that we process Personal Information in the role of a processor (or a comparable role such as “service provider” in certain jurisdictions) on behalf of our customers, including where we offer to our customers various cloud products and services, through which our customers (and/or their affiliates) connect their own applications to our hosted platform, sell or offer their own products and services, send electronic communications to other individuals, or otherwise collect, use, share or process Personal Information via our cloud products and services.

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access or use our services.

Data collections and uses

Overview

This Policy describes how we collect and use your Personal Information, whether it is shared and/or disclosed, and how we address privacy matters, such as deletion of your Personal Information upon request, and opting out of marketing communications. Lastly, we describe methods for contacting us if you have privacy questions, comments or feedback.

Cookies and Tracking Technologies

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout.

Personal Information we collect and receive

Transparency is one of the best ways to earn your trust. Below are the types of personal data elements we may receive and process about you through: the use of our website, products, or support services; attendance of our virtual and in-person events; and third-party advertising and marketing partners. The summary sections and tables below explain in further detail the specific personal data elements we collect from you or receive from third parties and why, based upon your relationship with us and as your relationship evolves with GitGenius.

Visitors

When you visit our public websites, without logging into an account or using our products and/or services, we consider you a Visitor. As a Visitor, the information we collect from you is listed below. You’re not obligated to provide us with such Personal Information, and you are free to change or completely opt out of information being shared with us; however, refusing to provide requested Personal Information might prevent you from using certain features of the Websites.

What do we collect?

Why do we collect it?

Can you limit collection?

GitGenius Cookies

To recognize you when you make a return visit and deliver overall a consistent experience

Most modern browsers allow you to delete or limit cookies

You can manage your cookie preferences and settings at any time by making choices in our cookie banner or through our cookie preference center. You may also configure your browser to refuse all cookies or to indicate when a cookie is being sent

Third-Party Tags and Cookies

To deliver an overall consistent experience, and measure our marketing effectiveness

Most modern browsers allow you to delete or limit cookies, including third-party cookies; however, you may not be able to limit marketing tags entirely unless you do not visit our sites

You can manage your cookie preferences and settings at any time by making choices in our cookie banner or through our cookie preference center. You may also configure your browser to refuse all cookies or to indicate when a cookie is being sent

Internet Protocol (IP) Address

  • Part of the basic function of the internet

  • To measure who is visiting us and from where

The only way to avoid this is to not visit our sites

Browser Metadata

(i.e. browser type, version, operating system)

  • Part of the basic function of the internet

  • To ensure we maintain a positive website experience for most used browsers

Browsers communicate this automatically; however, some third-party extensions may allow you to limit this

Log data

  • To maintain website functionality

Log data is collected automatically and may include: Internet Protocol (IP) addresses; browser types, product versions, and operating systems, date and time stamp, language preferences, etc.

Contact Data

(i.e., Names, emails, phone numbers, etc.)

  • To respond to your inquiry via our “contact us” methods

  • This information is voluntarily shared

  • This may be required to respond to administrative or account issues or inquiries.

Customers/Prospective Customers (Marketing)

In addition to the data above, you may also voluntarily share Personal Information with us, as customers or prospective customers, in order to receive information about products and services, or to register for an upcoming event.

We may also receive information about you, such as your name, employer, title, country, state and contact information, from third parties, such as marketing partners, and combine it with other information we have about you. If we already have information about you in our database in accordance with applicable data retention periods, we would update this information. We also use data enrichment agencies to add information, if you did not provide certain data. These data enrichment agencies can also be located in third countries outside the European Union, European Economic Area, or UK, in particular in the U.S. We will then use adequate safeguards such as Standard Contractual Clauses, as updated from time to time, and supplementary measures, where required. In addition, GitGenius may engage third parties to deliver advertising about our Products or Services. This advertising helps us personalize the advertising content that is relevant to you. The collection and use of your data by third parties is subject to the applicable third party’s privacy policy, but the use of your data by GitGenius is subject to the GitGenius Privacy Policy.

What do we collect?

Why do we collect it?

Can you limit collection?

Name + Email

  • To respond to your inquiry

  • Email you about product offerings, updates and other marketing promotions

  • This information is voluntarily shared, to provide individuals with relevant marketing materials

  • This may be required to respond to administrative or account issues or inquiries.

  • You can opt out of marketing emails, see the “Contact Us” section

Company Name

  • To further develop our understanding of you

  • This information is voluntarily shared; however, for marketing purposes, this is required

Job Title

  • To further develop our understanding of you

  • Yes, this is voluntary

Phone Number

  • To contact you

  • Yes, this is voluntary

Analytics information

  • To measure the effectiveness of our marketing activities

You can manage your preferences and settings by making choices in our cookie banner or through our preference center

Users/Customers

If you choose to register for an account with GitGenius or on our Websites, you will share Personal Information with us.

When you register, create a User Account on our Website and begin using our products, we consider you a User. This section describes our privacy practices related to Users. Keep in mind Users are also considered Visitors so we collect this data in addition to what was described for Visitors.

What do we collect?

Why do we collect it?

Can you limit collection?

Email, Username, and Password

  • In order to establish your account and allow you to securely access it

  • Email you about service updates, maintenance activities, security notifications, weekly summaries, and other account related information

  • No, these are required for us to facilitate your account lifecycle or to contact you

  • You can; however, opt out of marketing emails, see the “Contact Us” section

Phone Number

  • For 2-factor authentication to increase security

  • No, this is required to enable 2-factor authentication

Payment Data (credit card data, address, etc.)

  • In order to process your payment, we require the minimum amount of data NOTE: We do not store any financial data, as we use Stripe and/or Shopify to process the payments.

  • No, this is required to process your payment

Other personal data

Including but not limited to:

  • To facilitate use of our website contact forms.

  • To fulfill support tickets

  • To facilitate events and attendance

  • For interactions of social media

  • Participation in surveys

  • Each of these activities are optional and personal data is provided voluntarily.

How we use Personal Information

Purposes of Processing

In addition to those detailed above, we will not use or share your Personal Information in ways unrelated to those described below. We do not use automated decision-making or profiling that produces legal effects or similarly significant effects concerning you. We will not sell your Personal Information for any purpose.

Legal Basis for Processing

Our legal basis for collecting and using the personal information described in the above sections will depend on the personal information concerned and the specific context in which we collect it. However, in most cases we collect the personal information to facilitate the business relationships we have with our Users where we have consent to do so, to fulfill contractual agreements, or to pursue our legitimate interests where these are not overridden by the interests, rights, or freedoms of Users. In some cases we may be required legally to collect or disclose personal information; in which case we will make this clear. In other cases, where we rely on an alternative legal basis, we will do so only with the appropriate legal requirements in place. For any questions on our legal basis for processing your personal information, please contact us at [email protected].

Third Party Sharing

We may engage third party companies or individuals as service providers or business partners to process Personal Information and support our business. We may share Personal Information with third parties for a variety of reasons, including but not limited to:

How long do we keep your data?

We only process and keep any Personal Information for as long as necessary to achieve the purpose for which the information was originally collected. The exact length of time we keep Personal Information depends on our processing purposes and the statutory retention period for that type of information. After the statutory period of time passes, or if storage of Personal Information is not needed, Personal Information is deleted or anonymized.

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant supervisory authorities as required by applicable law, typically within 72 hours of becoming aware of the breach.

Security

GitGenius takes appropriate administrative, technical, physical, and organizational security measures to protect your Personal Information from loss, theft, misuse and unauthorized access, disclosure, alteration, and destruction. We follow industry standards to protect the Personal Information submitted to us, both during transmission and once it is received, taking into account the nature of such information and the risks involved in processing, and comply with applicable laws and regulations. While we have taken reasonable steps to secure the Personal Information you provide to us, please be aware that despite our best efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

If you have any questions about our security, or have reason to believe that your interaction with us is no longer secure, please contact us at [email protected].

Children's Privacy

We do not knowingly solicit information from or market to children under the age of thirteen (13). If you are under age 13, please do not give us any Personal Information. We encourage parents and legal guardians to monitor their children’s Internet usage and to help us enforce our Privacy Policy by instructing them to never share Personal Information through our Websites without their permission. If you suspect or become aware of any data we have collected from children under age 13, please contact us immediately by emailing [email protected]or by using the contact information provided below.

International Data Transfers

Our servers are located in the United States. If you are located outside of the United States, please be aware that any information provided to us, including Personal Information, will be transferred from your country of origin to the United States. By using our services, you acknowledge and consent to this transfer. GitGenius transfers and processes data in accordance with the UK and EU GDPR, using Standard Contractual Clauses (SCCs) and other appropriate safeguards, and in compliance with additional applicable laws and regulations.

Notice for California Residents

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides California residents with specific rights regarding their Personal Information.

GitGenius does not sell Personal Information for monetary consideration and does not share Personal Information for cross-context behavioral advertising, as those terms are defined under the CPRA.

Do Not Sell or Share My Personal Information

Because GitGenius does not sell or share Personal Information, we do not offer a separate opt-out mechanism at this time. If our practices change, we will update this Privacy Policy and provide appropriate opt-out rights as required by law.

Global Privacy Control (GPC)

GitGenius honors Global Privacy Control (GPC) signals where required by applicable law. Where applicable, GPC signals will be treated as a valid request to opt out of the sale or sharing of Personal Information.

Sensitive Personal Information

GitGenius does not collect or process Sensitive Personal Information for the purpose of inferring characteristics about individuals, as defined under the CPRA.

Your Rights

We recognize, under the CCPA, the EU GDPR, the UK GDPR, the Brazilian General Data Protection Law (LGPD), and other applicable privacy laws, that you may have certain rights regarding your Personal Information. We feel that your privacy and ability to preserve and exercise your rights is very important. You are encouraged to review and understand these rights as they pertain to you and your Personal Information. In certain circumstances, these rights include, but are not limited to:

In support of these rights, you may exercise any of the above rights, with respect to your Personal Information. You may update, correct, or delete your Personal Information; if you wish to delete or suspend your account, please note that we may retain certain information as required by law or for legitimate business purposes. If you have become aware that an account has been created about you without your knowledge or consent, you may contact us to request deletion of that said account. You may initiate the deletion request by emailing [email protected]

For your protection, we may only respond with the Personal Information associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will respond to your request within 30 days (or as otherwise required by applicable law). For requests under GDPR, we will respond within one month, with the possibility to extend by two additional months where necessary.

Changes to This Policy

If we make material changes to this Policy, we will revise the “Last Updated” date at the top of this Policy, and in some cases, where required by law, we may provide you with more prominent notice (such as adding a statement to our homepage or sending you an email notification). Any changes or modifications will be effective immediately upon posting of the updated Privacy Policy.

We encourage you to review the Policy whenever you access the Websites to stay informed about our information practices and the ways you can help protect your privacy.

Contact Us

For any and all privacy-related matters, questions or comments, or to exercise a right under the EU’s GDPR, the UK’s GDPR or the CCPA, you may contact us in writing or by email. Our contact information is as follows:

GitGenius

Email: [email protected]

EU or Swiss residents with inquiries or complaints regarding this Privacy Policy should first contact GitGenius at [email protected]. We aim to respond to privacy inquiries within a reasonable timeframe, typically within 30 days for general inquiries and as required by applicable law for rights requests (e.g., 30 days under CCPA, one month under GDPR).

If these processes do not result in a resolution, you may contact your local data protection authority, the U.S. Department of Commerce, and/or the Federal Trade Commission for assistance. EU or UK residents may also have the right to lodge a complaint with their local supervisory authority.