GenerativeX Privacy Notice (Services incl. Excel Add‑in)
Last Updated: September 30, 2025
1) Who We Are and Scope
This Privacy Notice explains how GenerativeX Co., Ltd. (“GenerativeX,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards personal data in connection with our services (including the Excel add‑in) and related support channels (together, the “Services”). Your use of the Services indicates your acceptance of this Notice.
2) Our Role in Processing
Data protection laws distinguish between a controller and a processor.
We act as controller for our websites, accounts, billing, support, and telemetry we determine.
When an enterprise customer deploys the add‑in and we process end‑user content on their instructions, we act as their processor/service provider. This Notice covers our controller activities. For processor activities, please refer to your organization’s privacy notice. We may direct certain requests to your organization where we act as processor.
3) Personal Data We Collect
A. Data you provide
- Contact and account data: name, business email, role, organization, preferences.
- Professional data: title, department, relationship to us.
- Support and feedback: messages, tickets, call recordings where permitted.
- Billing data: payer details. Card numbers are handled by our payment processor; we do not store full card data.
B. Data collected automatically
- Usage and device data: app events, feature use, error/diagnostic logs, IP address, device/OS/browser, identifier(s).
- Cookies/SDKs on our online properties: used for operations and analytics. We do not use third‑party advertising cookies in the add‑in.
C. Data from other sources
- Single sign‑on / Microsoft identity: tokens and identifiers to authenticate and authorize features; we do not retain raw tokens beyond what is necessary for session operation.
- Your employer or reseller/partner: to enable enterprise provisioning and support.
D. Spreadsheet and document content (Excel add‑in)
When you invoke AI or other processing features, the add‑in may transmit selected workbook content (values, formulas, formatting, comments, and relevant context), your prompts, and interaction metadata to our systems and trusted processors to return results.
4) How We Use Personal Data
- Provide, operate, and secure the add‑in and Services.
- Authenticate users and authorize features.
- Deliver AI‑powered outputs you request and improve quality and relevance.
- Troubleshoot, support, and communicate about the Services.
- Billing, accounting, audits, compliance, and prevention of fraud/abuse.
- Develop and improve functionality, including aggregated or de‑identified analytics.
We do not use add‑in data for targeted advertising. We do not sell personal data.
5) AI Processing Practices
- We process only the minimum content necessary to fulfill the requested operation.
- Unless your organization opts in by contract, we do not use your content to train foundation models.
- We may engage vetted third‑party AI providers acting under our instructions and data processing agreements. A current list of sub‑processors is available upon request.
6) Disclosures of Personal Data
We disclose personal data only as needed to:
- Service providers/sub‑processors: cloud hosting, security, analytics, support, and AI engines operating under contract.
- Your organization: usage/administration information when the Service is provided through your employer.
- Integrations you enable: if you connect third‑party tools, we disclose as necessary to fulfill your request.
- Legal and safety: to comply with law, respond to lawful requests, or protect rights, safety, and security.
- Corporate transactions: in connection with mergers, acquisitions, or reorganization.
- With your direction or consent.
7) Your Choices and Rights
- Communication preferences: you may opt out of non‑transactional marketing emails via the unsubscribe link.
- Cookie/analytics controls (web): use your browser or platform settings to manage cookies and analytics.
- Access, correction, deletion: you may submit requests via our contact channels below. Where we act as processor, we will refer your request to your organization.
8) Security
We apply administrative, technical, and physical safeguards, including encryption in transit, access controls, least‑privilege administration, environment segregation, monitoring, and secure software development practices. No method is 100% secure.
9) Retention
We retain personal data only for as long as necessary for the purposes described above or as required by law.
Session data and in‑memory processing for the add‑in are temporary.
Logs and support artifacts are kept for limited periods needed for operations, security, and compliance. Where deletion is not immediately possible (e.g., backups), data is isolated until deletion.
10) International Transfers
We may process and store data outside your country. Where required, we use appropriate safeguards such as contractual protections.
11) Children
The Services are not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child provided data, contact us to request deletion.
12) Changes to This Notice
We may update this Notice. We will revise the “Last Updated” date and, where required, provide additional notice for material changes.