Privacy Policy
Last updated: March 22, 2026
1. Who We Are
Apex is a product of Genesis Technology, a software company. We provide AI-powered media authentication services that help users detect synthetic or manipulated images and video. References to "we," "us," or "our" in this policy refer to Genesis Technology.
If you have questions about this policy, contact us at privacy@genesiswm.net.
2. Information We Collect
2.1 Account Information
When you create an account, we collect your email address and a password hash. We use Supabase Auth for authentication. We do not store plaintext passwords.
2.2 Media You Submit for Analysis
When you submit an image or video for analysis, that media is transmitted to our servers and to Anthropic's Claude Vision API for analysis. We store the SHA-256 hash of your media and the analysis result (confidence score, verdict, indicators). We do not store the original media file after analysis is complete.
2.3 Usage Data
We record the number of scans performed per user per month to enforce plan limits. We also log API key usage (timestamps, call counts) for rate limiting and billing purposes.
2.4 Payment Information
Payment processing is handled entirely by Stripe. We do not store credit card numbers or payment credentials. We receive a Stripe customer ID and subscription status from Stripe.
2.5 Automatically Collected Data
Our servers may log standard request metadata (IP address, browser user agent, timestamp) for security and abuse prevention purposes. These logs are retained for 30 days.
3. How We Use Your Information
- To provide the media authentication service
- To enforce scan limits and billing tiers
- To generate and store provenance certificates linked to your scans
- To communicate service updates, security notices, and billing information
- To detect and prevent fraud, abuse, and unauthorized use of the API
- To comply with legal obligations
We do not sell your personal information. We do not use your submitted media to train AI models.
4. Third-Party Services
We share data with the following third parties only as necessary to provide the service:
- Anthropic — media submitted for analysis is sent to Anthropic's Claude Vision API. Anthropic's privacy policy governs their handling of this data.
- Supabase — our database and authentication provider. Data is stored in Supabase-managed infrastructure.
- Stripe — payment processing. Stripe's privacy policy governs their handling of payment data.
- Vercel — our hosting provider. Request logs may be retained by Vercel per their data processing policies.
5. Data Retention
Scan results and provenance certificates are retained indefinitely so that issued certificates remain verifiable. You may request deletion of your scan history at any time by contacting us. Account data is deleted within 30 days of account deletion. Server logs are purged after 30 days.
6. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Export your scan history in machine-readable format
- Opt out of non-essential communications
To exercise these rights, email privacy@genesiswm.net.
7. Security
We implement industry-standard security practices including HTTPS encryption in transit, row-level security on our database, hashed API keys (never stored in plaintext), and ML-DSA-65 post-quantum cryptographic signatures on all provenance certificates. No security system is perfect, and we cannot guarantee absolute security.
8. Children's Privacy
Apex is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us immediately.
9. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email or a prominent notice in the product. Continued use of Apex after changes take effect constitutes acceptance of the revised policy.
10. Contact
Genesis Technology
privacy@genesiswm.net