cGenie
  • Pricing
  • Privacy
  • Terms
  • Refunds
  • Back to cGenie
ESENPT
cGenie

Privacy Policy

How cGenie, operated by NeuralAi SpA, collects, uses, stores, shares, and protects personal data.

Last updated: September 20, 2026

This is a courtesy translation. In case of any conflict or discrepancy, the Spanish-language version of this document is the one that governs.

1. Controller and contact information

cGenie is a software-as-a-service platform operated by NeuralAi SpA, a company incorporated in Chile.

  • Data protection and privacy: privacy@cgenie.ai
  • Legal and contractual matters: legal@cgenie.ai
  • Support: support@cgenie.ai

This Policy explains how we collect, use, store, share, and protect personal data when you use cGenie's sites, applications, landing pages, integrations, and other services.

We do not publish in this Policy the name, personal RUT (Chilean tax ID), or other personal data of NeuralAi SpA's legal representative that is not necessary to identify the operator of the service.

2. Scope of this Policy

This Policy applies to data processed by NeuralAi SpA in connection with cGenie, including:

  • registration and authentication
  • Main Accounts or workspaces
  • users and teams
  • Brands
  • campaigns
  • ads
  • Landing Pages
  • leads
  • CRM
  • integrations
  • artificial intelligence
  • support
  • billing
  • security
  • analytics and platform operation

When a Landing Page created through cGenie belongs to one of our customers, that customer may have its own Privacy Policy, which directly governs the relationship between that business and its prospects or customers.

3. Our roles with respect to data

NeuralAi SpA normally acts as the data controller with respect to data necessary to administer cGenie, such as users, authentication, subscriptions, support, security, and platform operation.

When a customer uses cGenie to capture or manage information about its prospects, leads, or customers, the customer normally determines the essential purpose and means of the processing, and NeuralAi SpA acts as a data processor or service provider with respect to that data.

The customer is responsible for:

  • having a valid legal basis
  • providing the applicable privacy notices
  • obtaining consents when necessary
  • determining what information it requests
  • using the data lawfully
  • addressing data subject rights requests when applicable

We may enter into a Data Processing Agreement or DPA that supplements this Policy for customers who require one.

4. Data we collect

Depending on the features used, we may process the following categories of data.

Account data

Name, email address, phone number where applicable, company, job title, internal identifiers, registration date, verification status, roles, permissions, and memberships.

Workspace and Brand information

Business name, website, business description, products, services, markets, locations, communication tone, logos, colors, photographs, images, documents, and other resources provided or imported.

Campaign information

Objectives, budgets, locations, keywords, ad groups, ads, assets, configuration, and results.

Landing Pages and content

HTML, text, images, logos, videos, files, forms, versions, history, and other information necessary to create and publish pages.

Landing Page usage and analytics data

When a Landing Page published through cGenie receives visits, we may record operational and analytics information associated with that visit, such as: the Landing Page, Brand, and campaign involved; the date and time of the visit; the pageview; conversion events configured on the Landing Page; technical browser or device data; available attribution information; and, when captured by the product, UTM parameters, GCLID, or other campaign identifiers associated with the visit.

Leads and CRM

The data that customers choose to request through their forms, which may include name, email address, phone number, company, message, and other information configured by the customer.

Integrations

Identifiers and metadata necessary to connect external services, including Google and Google Ads.

Product usage

Account activity, operations performed, feature usage, cGenie credits, AI usage, dates, errors, and operational events.

Technical information

IP address, browser, device, session, timestamps, errors, technical identifiers, and security logs.

Billing

We may receive from Paddle, our billing provider, information such as subscription status, product, amount, currency, date, transaction identifier, and payment status.

We do not need to store the full card number or other financial credentials that are processed directly by our payment provider.

5. Purposes

We may use data to:

  • create and administer accounts
  • verify email addresses
  • authenticate users
  • administer workspaces and permissions
  • create and maintain Brand memory
  • generate campaigns
  • generate and edit Landing Pages
  • run artificial intelligence features
  • connect Google Ads
  • research keywords and demand
  • publish campaigns when authorized by the user
  • publish Landing Pages
  • receive and manage leads
  • operate the CRM and related features
  • measure Landing Page performance and provide analytics to the customer
  • attribute campaign results
  • generate aggregate, anonymized benchmarks (for example, typical click-through rates, cost-per-lead, or lead-qualification rates across cGenie accounts) so customers can see how their campaigns compare to overall platform activity
  • administer and, where applicable, enforce usage quotas, including pageviews
  • provide support
  • prevent fraud and abuse
  • protect the security of cGenie
  • diagnose errors
  • perform operational measurements
  • administer plans and credits
  • process subscriptions
  • comply with legal obligations
  • defend legal rights
  • improve the reliability and functioning of the service

We do not sell personal data.

6. Artificial intelligence

cGenie uses artificial intelligence systems to assist with tasks such as business analysis, advertising strategy, campaign generation, ads, Landing Pages, content editing, and other product features.

To carry out a given function, we may transmit to artificial intelligence providers the context strictly necessary to complete the request.

Depending on the case, this may include:

  • Brand context
  • campaign context
  • user instructions
  • content excerpts
  • information necessary to generate a Landing Page
  • other data directly related to the operation requested

We attempt to minimize the sending of unnecessary personal data.

AI-generated outputs may contain errors and should be reviewed before being used or published.

Unless expressly stated otherwise, cGenie does not use these features to make decisions based solely on automated processing that produce legal effects or similarly significant effects on a person.

7. Google and Google Ads

When you connect a Google or Google Ads account, cGenie accesses only the data and permissions necessary to provide the features you authorized.

Depending on the features used, this may include:

  • Google Ads account identifiers
  • customer and manager identifiers
  • connection information
  • OAuth tokens
  • campaigns
  • ad groups
  • ads
  • keywords
  • assets
  • information necessary for demand research
  • metrics and results that the integration allows to be queried
  • information necessary to publish or manage authorized resources

We use this data to provide the Google Ads features requested by the user and not for independent, incompatible purposes.

The user can disconnect the integration from cGenie where that option is available, and can also revoke permissions from their Google account.

Upon disconnecting or permanently closing the cGenie account, the integration credentials will no longer be used and will be revoked or deleted as applicable.

Use of information received from Google APIs must comply with the Google API Services User Data Policy and its Limited Use requirements where applicable. Google also requires that application policies clearly explain how they access, use, store, and share this data.

8. Leads of our customers

When a visitor completes a form hosted on a Landing Page belonging to a cGenie customer, the business that published that Landing Page is normally the data controller for that data.

NeuralAi SpA provides the technological infrastructure to collect, store, and make the information available to the customer.

cGenie does not acquire ownership of those leads.

Our customers must provide the applicable legal notices and consent mechanisms on their Landing Pages.

9. Legal basis

Depending on the processing activity and applicable law, we may process data on the basis of:

  • performance of a contract
  • pre-contractual measures requested by the individual
  • consent
  • compliance with legal obligations
  • legitimate interests related to security, fraud prevention, administration, and reasonable improvement of the service
  • other bases permitted by applicable law

In Chile we apply Law No. 19,628 and its amendments. The amendments introduced by Law No. 21,719 have a deferred effective date of December 1, 2026.

10. Providers and subprocessors

To operate cGenie we use providers that may provide services such as:

  • infrastructure and hosting
  • databases
  • storage
  • authentication
  • artificial intelligence
  • observability
  • email
  • billing
  • security
  • Google Ads
  • support and other necessary functions

We limit each provider's access to the information necessary to provide the corresponding service.

We may maintain a separate, up-to-date list of subprocessors.

11. Aggregate Benchmarking

To help customers understand how their campaigns are performing, cGenie may compute aggregate, anonymized benchmarks using numeric performance data (such as click-through rate, cost per lead, or lead-qualification rate) drawn from multiple customer accounts on paid plans.

These benchmarks never identify, name, or attribute any figure to a specific customer, business, Brand, or account, and are only computed and shown when at least 5 accounts contribute to a given comparison, to prevent any individual account's data from being inferred.

Benchmarking data does not include personal data, lead or visitor information, or business names — only anonymized numeric metrics.

12. Payments and billing

For payment transactions made through Paddle, Paddle processes the data needed for checkout, payments, billing, fraud prevention, taxes, refunds, and subscription management.

Paddle acts as Merchant of Record for those transactions and may collect identification, contact, billing, transaction, device, and IP address data under its Privacy Policy.

NeuralAi SpA may receive from Paddle information necessary to administer access to cGenie, such as:

  • customer identifiers
  • product or plan
  • subscription and transaction identifiers
  • payment status
  • billing status
  • currency
  • amount
  • renewals
  • cancellations
  • transaction identifiers

We use this data to enable plans, manage subscriptions, apply access rights, provide support, prevent fraud, and comply with legal, tax, and accounting obligations.

Sensitive financial data is processed by Paddle, and NeuralAi SpA does not store full card numbers. Payment data is also handled under Paddle's terms and policies applicable to the purchase.

13. International transfers

Some providers may process information outside of Chile.

Where applicable, we will use the contractual, organizational, or technical mechanisms required by applicable law for international transfers.

14. Retention

We apply the following operational criteria.

Active account

Data necessary to provide cGenie is retained while the account remains active.

Cancellation of a subscription

Cancellation prevents the next renewal but does not immediately delete the account.

The user retains paid access until the end of the contracted period.

After that, the account may remain for 30 days in a limited or read-only mode, intended mainly for reviewing and exporting information.

After that period, access may be suspended. Operational data may be retained for an additional 60 days to allow for recovery or reactivation.

If the account is not reactivated, operational data will be scheduled for deletion at approximately 90 days from the end of the paid period, except for data that must be retained due to legal obligation, security, fraud prevention, or defense of legal rights.

Permanent closure

If the user expressly requests permanent closure of the account:

  • public Landing Pages will be unpublished
  • integrations will be disconnected or revoked
  • no new campaigns may be run from the account
  • a 30-day grace period will begin

During that period, recovery may be requested where technically possible, and export will be permitted of the data cGenie has available for export, including leads.

After the 30 days have elapsed, the associated operational data will be deleted or anonymized, except for legal exceptions.

Leads

Leads are retained for as long as the customer maintains its account and does not delete them, or until the deletion process associated with account closure is completed.

Files and assets

Logos, photographs, documents, and other resources are deleted along with the account's operational data under the same cycle.

OAuth tokens

These are retained only while the integration remains active and are deleted or revoked when the integration is disconnected or the account is permanently closed.

Operational logs

Ordinary technical logs are normally retained for up to 90 days.

Security and audit logs

These may be retained for up to 12 months, or for a longer period when necessary to investigate an incident, comply with legal obligations, or defend legal rights.

Billing

Financial, accounting, tax, or contractual records may be retained for the period required by applicable law, even after the rest of the account has been deleted.

Backups

Deletion in active systems does not always instantly delete all backup copies.

While cGenie uses Lovable Cloud, deleted data may remain transitorily in backups for up to 90 days before disappearing through its normal rotation cycle.

Deleted data present only in backups will not be restored for ordinary use and will disappear according to the backup cycle.

If we substantially change our infrastructure or storage provider, we will review this Policy to reflect the new backup regime.

15. Data export

Before permanent closure, cGenie will allow the export of the types of information for which export functionality exists.

At a minimum, our operational goal is to allow the export of leads.

We may expand export options for other data as the product evolves.

16. Security

We apply reasonable technical and organizational measures intended to prevent unauthorized access, loss, alteration, or disclosure.

These measures may include:

  • authentication
  • permissions and roles
  • logical isolation between accounts
  • Row Level Security where applicable
  • encryption in transit
  • secrets protection
  • security logs
  • administrative controls
  • backups
  • monitoring

No system can guarantee absolute security.

17. Cookies and local storage

cGenie may use cookies and local storage necessary for:

  • authentication
  • maintaining sessions
  • security
  • preferences
  • technical functioning

If we incorporate non-essential technologies for advertising, marketing, or other uses that require consent, we will provide the corresponding notices and controls.

18. Data subject rights

Depending on applicable law, you may have the right to:

  • access
  • information
  • rectification
  • deletion or erasure
  • object to processing
  • portability
  • blocking
  • withdraw consent
  • other rights established by law

To exercise these rights, write to us at privacy@cgenie.ai.

We may request reasonable information to verify your identity before providing, modifying, or deleting data.

If the information was provided to cGenie by one of our customers and we act solely as a data processor, we may refer the request to the corresponding customer or assist the customer in complying with it.

19. Minors

cGenie is intended for businesses, professionals, and users over the age of 18.

It is not designed for minors to create accounts.

20. Changes to this Policy

We may modify this Policy when the following change:

  • cGenie
  • our providers
  • our infrastructure
  • the features
  • legal obligations

When a change is material, we will provide notice through the platform, email, or another reasonable mechanism.

Where legally required, we will request consent again.

21. Contact

NeuralAi SpA — Chile.

  • Privacy: privacy@cgenie.ai
  • Legal: legal@cgenie.ai
  • Support: support@cgenie.ai
© 2026 NeuralAi SpA. cGenie is a product of NeuralAi SpA.
Contact: support@cgenie.ai
Pricing Privacy Policy Terms of Service Refund Policy cGenie homepage