Privacy Policy

Bidleys VOF, handelend onder de naam Genlista, registered at Compagnonsstrjitte 80, 8401 RV Gorredijk, Nederland, Chamber of Commerce number 97400394, VAT number NL868035968B01, is the data controller for the personal data processed via this website. Contact: info@genlista.com.

We collect the following personal data:

• Name and email address (when you create an account);
• Optional company name and billing details;
• Photos and inputs you upload for AI analysis;
• Listings you generate through the Service;
• Subscription, payment and invoice data (processed via Stripe);
• Technical data: IP address, browser type, device information, log data;
• Cookies and usage data.

We process your data for the following purposes:

• To provide and maintain the AI listing-generation service;
• To manage your account and subscription;
• To process payments and issue invoices;
• To send service-related and security communications;
• To detect, prevent and address fraud and abuse;
• To improve the Service (in aggregated, non-identifying form);
• To comply with legal and fiscal obligations.

We process personal data on the basis of: (a) performance of the contract with you, (b) compliance with legal obligations, (c) our legitimate interests in operating, securing and improving the Service, and (d) where applicable, your consent.

Photos you upload are sent to our AI providers strictly to generate the listings you request. We do not use your uploads to train third-party foundation models. Uploaded images and generated listings are stored in your account so you can revisit them, and can be deleted by you at any time.

We retain personal data for as long as your account is active or as needed to provide the Service. After account deletion, we retain transactional and accounting data for 7 jaar (fiscale bewaarplicht) to comply with Dutch fiscal obligations. Uploaded images and generated content are deleted within 30 days of account closure unless retention is required by law.

We do not sell your personal data. We share data only with processors needed to deliver the Service: payment processor (Stripe), cloud and database infrastructure (Lovable Cloud / Supabase), AI providers (e.g. Google, OpenAI via the Lovable AI Gateway), and email providers. All processors are contractually bound by GDPR-compliant data processing agreements.

Under the GDPR, you have the right to:

• Access your personal data;
• Rectify inaccurate data;
• Request deletion of your data;
• Restrict processing;
• Data portability;
• Object to processing based on legitimate interest;
• Withdraw consent at any time;
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

To exercise these rights, contact info@genlista.com.

We apply appropriate technical and organisational measures to protect your personal data, including TLS encryption in transit, encryption at rest for sensitive fields, access controls, audit logging and least-privilege provisioning.

Your data may be processed outside the EEA (e.g. by AI providers based in the United States). Where this occurs, we rely on the European Commission's Standard Contractual Clauses and additional safeguards as required.

We may update this policy from time to time. Material changes will be communicated by email or in-app notification.