Legal
Privacy Policy
Last updated: June 18, 2026
This Privacy Policy explains how GenComment, the service at gencomment.com (the “Service”), handles information when you use it. We aim to collect as little as possible. The operator of GenComment is the controller of the personal data described here; you can reach us at the address in the Contact section.
1. Comment content stays on your device
The comment images you build are rendered in your browser. The comment text you type and any profile pictures you upload are processed locally to draw the image and are not required to be uploaded to our servers to produce your download.
2. Information we collect
- Account data. If you sign in, we receive basic profile information from your sign-in provider (such as your name and email address) to create and identify your account.
- Payment data. If you buy a paid plan or credits, payment is handled by a third-party payment processor. We do not store full card details; we receive a record that a transaction occurred and your plan or credit status.
- AI suggestions. If you use AI-assisted text suggestions, the description you provide is sent to an AI provider to generate a response.
- Usage and device data. We may collect basic, aggregated analytics (such as page views and approximate region) to understand and improve the Service.
3. How we use information
We use the information above to provide and secure the Service, operate accounts and payments, respond to support requests, and improve the product. We do not sell your personal information.
4. Legal bases for processing
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR: performance of a contract (to operate your account, plans and payments); our legitimate interests (to secure, maintain and improve the Service, and to understand aggregated usage), balanced against your rights; your consent where we ask for it (for example, non-essential analytics), which you may withdraw at any time; and compliance with a legal obligation (for example, keeping accounting records).
5. Third-party services and international transfers
We rely on third parties for sign-in, payment processing, optional AI suggestions and analytics. These providers process data under their own privacy policies, and we encourage you to review them. Some providers may process or store data in countries other than your own; where they do, we rely on the safeguards those providers offer, such as standard contractual clauses or an adequacy decision, to protect your data.
6. Cookies
We use cookies or similar technologies that are necessary to keep you signed in and to operate the Service, and we may use them for basic analytics. You can control cookies through your browser settings.
7. Data retention
We keep account and transaction records for as long as your account is active or as needed to comply with legal, accounting or reporting obligations. You may request deletion of your account as described below.
8. Your choices and rights
Depending on where you live, you may have rights to access, correct, export or delete your personal information, to object to or restrict certain processing, and to withdraw a consent you previously gave. To make a request, contact us at the address below; we will respond as required by applicable law. If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data protection supervisory authority.
9. Children
The Service is not directed to children under the age required by your local law to consent to data processing, and we do not knowingly collect their personal information. If you believe a child has provided us personal data, contact us and we will delete it.
10. Changes
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date at the top of this page.
11. Contact
Questions or requests? Email hello@gencomment.com.