1. Data Controller
Genius Room (“we”, “us”, “our”) is the data controller responsible for your personal data. We process personal data in compliance with applicable privacy laws, including the GDPR where applicable.
Contact: privacy@genius-room.app
2. Data We Collect
- Account data: email address, name (provided during signup)
- Usage data: session logs, mode usage counts (consulta, debate, hardcore)
- Payment data: processed exclusively by Stripe — we never store card details
- Technical data: IP address, browser type, and device information collected automatically
3. Legal Basis for Processing
- Contract performance: to provide the service you signed up for
- Legitimate interests: security, fraud prevention, and service improvement
- Legal obligation: billing and tax compliance
- Consent: analytics cookies (where applicable)
4. AI-Generated Content
Genius Room uses artificial intelligence to generate responses based on publicly documented ideas, writings, and interviews of the represented individuals. Your conversation inputs are sent to Anthropic’s API for processing. We do not use your conversations to train AI models. Anthropic’s data processing is governed by their own privacy policy and data processing agreement.
Genius Room is an educational simulation. No affiliation exists with any represented individual or their estates.
5. Data Retention
- Account data: retained while your account is active and for 2 years after deletion
- Usage counters: retained for the current calendar year plus 12 months
- Billing records: retained for 5 years to comply with applicable tax and accounting law
6. Data Transfers
We use the following sub-processors, all of which provide adequate safeguards for international data transfers:
- Supabase (database & auth) — EU region
- Vercel (hosting) — EU region where available
- Stripe (payments) — Standard Contractual Clauses
- Anthropic (AI inference) — Standard Contractual Clauses
7. Your Rights
Depending on your location, you may have the right to:
- Access your personal data
- Rectify inaccurate data
- Erasure (“right to be forgotten”)
- Restriction of processing
- Data portability
- Object to processing
- Lodge a complaint with your local data protection authority
To exercise any right, email privacy@genius-room.app. We respond within 30 days.
8. Changes to This Policy
We may update this policy. Material changes will be notified by email or a prominent notice in the app at least 14 days before they take effect.