Privacy policy

1. What data we process

Account data: name, email and, if you sign in with Google or Microsoft, the identifier that provider shares with us.

Data your agency enters: clients, contacts, quotes, projects, hours, invoices and transactions. For that data your agency is the controller and we act as processor.

Technical data: IP address, browser and access logs needed to run and protect the service.

2. Why we use it

To provide the service, keep your session, protect the account, give you support and tell you about important changes. We do not sell data or use it for third-party advertising.

3. Who we share it with

Only with providers we need to run the service:

Supabase (database and authentication, São Paulo region, Brazil).

Vercel (application hosting and cookieless web analytics, United States).

Toggl, Google and Microsoft, only if you choose to connect them.

Some of these providers are outside Uruguay. We work with providers that offer adequate data protection guarantees.

4. How long we keep it

While your account is active. If you close it, we delete the data within 30 days, except what the law requires us to keep.

5. Your rights

You can request access, rectification, update or deletion of your data, and object to its processing, by emailing hola@geniaerp.com. We respond within the deadlines of Law No. 18.331.

If you are not satisfied with our answer, you can file a complaint with Uruguay's Personal Data Regulatory and Control Unit (URCDP).

6. Security

We apply technical and organizational measures to protect data: encrypted connections, isolation per agency, role-based access control and encryption of integration credentials.

7. Changes

If we change this policy materially, we notify you before it takes effect.

8. Contact

Controller: SALKANTAY STUDIO SAS, Uruguay. Email: hola@geniaerp.com.