Privacy Policy

Project Genesis (“Genesis”) (project-genesis.ai)
Operated by Project Genesis (“we,” “us,” “our”), in accordance with the Protection of Personal Information Act 4 of 2013 (“POPIA”) and, where applicable, the Electronic Communications and Transactions Act 25 of 2002 (“ECT Act”).

Last updated: 29 July 2026

1. Purpose

This is the privacy policy for Genesis, the data management platform operated at project-genesis.ai, and for the website itself. It explains what personal information we collect when you visit our site, request a demo, sign up for a workspace, use the Genesis platform, or opt in to receive email communications from us, and how we use, share, and protect that information.

2. Who We Are (Responsible Party)

Under POPIA, Project Genesis is the “responsible party” for personal information processed in connection with Genesis and this website.

Privacy queries: use our contact form, or email info@project-genesis.ai.

3. Information We Collect

3.1 Account and Workspace Information

When you sign up for or use Genesis, we collect:

  • Email address (used for magic-link sign-in and account identification)
  • Identity information from OAuth providers, if you sign in via Microsoft or GitHub (e.g. name, email address, profile identifier, as permitted by your provider settings)
  • Workspace and account data, including workspace name, role/permissions, and team member invitations
  • Content you or your team enter into Genesis — entities, fields, relationships, workflows, and other data you choose to store on the platform

3.2 Enquiry and Marketing Information

When you request a demo, submit our contact form, or opt in to receive email communications, we collect:

  • First and last name
  • Work email address
  • Company/organisation name
  • Job title
  • Company size (where you provide it on the contact form)
  • The nature of your enquiry (e.g. demo request, discovery session, partnership, press, or general enquiry)
  • Free-text details you choose to share about your needs or operational context
  • Consent records — when and how you opted in or acknowledged our privacy notice, and the specific consent given
  • Engagement data — opens, clicks, unsubscribes (collected via Resend)

3.3 Automatically Collected Information

When you visit our site or use the platform, we and our service providers may automatically collect:

  • IP address, browser type, device type, operating system
  • Pages viewed, referring page, and session/usage data
  • Cookies and similar technologies (see section 7)

We do not collect special personal information (e.g. health, religious belief, biometric data), and we do not knowingly collect personal information from children without the consent of a competent person (parent/legal guardian), as required by POPIA section 34.

4. Legal Basis for Processing (POPIA Section 11)

We process your personal information on the following bases:

  • Performance of a contract — account and workspace data is processed because it is necessary to provide the Genesis service you have signed up to use.
  • Consent — for email marketing, you have actively opted in (e.g. by ticking a checkbox on our demo request form). Consent is not bundled with account creation — it is a separate, affirmative choice. Submitting our contact form includes an acknowledgment that enquiry details may be processed as described in this policy.
  • Legitimate interest — we may process data to secure the platform, understand usage, improve the product, and send service-related communications (e.g. security notices, workspace invites) necessary to your use of Genesis.

Where we rely on consent, you may withdraw it at any time, free of charge, without affecting the lawfulness of processing carried out before withdrawal.

5. How We Use Your Information

We use the information described above to:

  • Provide, operate, and maintain the Genesis platform, including workspaces, workflows, and real-time collaboration features
  • Authenticate you via magic link or OAuth, and manage workspace-scoped access and permissions
  • Respond to enquiries and arrange next steps you've requested, such as a demo or discovery session
  • Send newsletters, product updates, feature announcements, and offers to those who have opted in
  • Measure engagement (opens/clicks) to improve the relevance of what we send
  • Understand how the site and platform are used, so we can improve content, navigation, and performance
  • Protect the platform and our enquiry channels against spam, abuse, and unauthorised access
  • Meet legal, regulatory, or contractual obligations where they apply

We do not sell your personal information to third parties, and we do not add you to marketing lists without your consent.

6. Cookies and Similar Technologies

Our site may use cookies or similar technologies to support core functionality and, where you consent, analytics. Analytics data, where used, is used in aggregate and is not intended to identify individual visitors.

You can control or delete cookies through your browser settings. Blocking cookies may affect some site or platform functionality.

7. Third Parties We Share Information With

We share personal information with the following categories of service providers, each acting as an operator under our instruction per POPIA section 20, and contractually bound to keep it confidential and secure:

  • Resend — a transactional email platform used to send account, product, and marketing emails. Resend stores account data, including email metadata and delivery logs, in the United States regardless of which sending region is used.
  • Microsoft Azure — our cloud hosting provider, used for platform infrastructure and per-tenant data storage.
  • Microsoft and GitHub — as OAuth identity providers, if you choose to sign in using one of these services.

We do not otherwise share your personal information with third parties, except where required by law or to protect our legal rights.

8. Email Marketing: Opting In and Opting Out

Opting in: You opt in by affirmatively checking a consent box during sign-up, on our website, or through another clear opt-in action. Pre-ticked boxes or bundled consent are not used.

Opting out: Every marketing email includes an unsubscribe link. You can also opt out at any time by:

  • Clicking “unsubscribe” at the bottom of any email
  • Emailing info@project-genesis.aiwith “unsubscribe” in the subject line
  • Updating your preferences in your Genesis account settings (where available)

We will action opt-out requests within a reasonable time and no later than required under POPIA. Note that essential service or security-related emails (not marketing) may continue even after you opt out of marketing communications, as these are necessary to operate your account.

9. Cross-Border Transfer of Information

Because we use Resend to send email communications, and Resend stores account data in the United States regardless of sending region, your personal information (email address, name, company, and engagement data) is transferred to and processed in the United States. Our platform infrastructure, hosted on Microsoft Azure, and OAuth sign-in via Microsoft or GitHub may also involve processing outside South Africa. In line with POPIA section 72, we only transfer personal information internationally where:

  • The recipient is subject to a law, binding corporate rules, or binding agreement that provides an adequate level of protection substantially similar to POPIA; or
  • You have consented to the transfer; or
  • The transfer is necessary to perform a contract with you or in your interest.

10. Data Retention

We retain account and workspace data for as long as you maintain an active Genesis account, and enquiry/marketing data for as long as you remain subscribed or until your enquiry is resolved, plus a reasonable period afterward to maintain records (e.g. a suppression list, or to demonstrate POPIA compliance), unless a longer period is required by law. After this, data is deleted or anonymised.

11. Your Rights

Under POPIA, you have the right to:

  • Be notified that your personal information is being collected
  • Request access to the personal information we hold about you
  • Request correction or deletion of inaccurate, outdated, or unlawfully processed information
  • Object to the processing of your personal information for direct marketing purposes, at any time and free of charge
  • Withdraw consent at any time
  • Lodge a complaint with the Information Regulator of South Africa if you believe your rights have been infringed:
    Information Regulator (South Africa)
    Email: complaints.IR@justice.gov.za
    Website: inforegulator.org.za

To exercise any of these rights, contact us via our contact form or at info@project-genesis.ai.

12. Security

We implement reasonable technical and organisational measures — including transport encryption (HTTPS), access controls, and workspace-scoped data isolation — to protect your personal information against loss, unauthorised access, or disclosure, as required under POPIA section 19.

13. Children's Privacy

Genesis is not directed to children, and we do not knowingly collect personal information from children without the consent of a competent person (parent/legal guardian), as required by POPIA section 34. If you believe a child has provided us with personal information without appropriate consent, please contact us so we can address it.

14. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email or notice on our site before they take effect. The latest version is always published on this page, with the date of the most recent update shown above.

15. Contact Us

For any questions about this policy or to exercise your POPIA rights:

Project Genesis
Email: info@project-genesis.ai
Or use our contact form
Website: project-genesis.ai