Data Protection Addendum

Please note. This document is being reviewed against the Genacy platform as it stands in September 2026 and against the company's final legal entity details. Where it and the product disagree, the product is the fact and this page is the one that is wrong. Tell us at support@genacy.co and we will correct it.

For business customers, our full Data Processing Agreement is available on request at support@genacy.co. The headline commitments are below.

We are a processor of your account holders' data, not a controller.
We will only process the data on your documented instructions.
We will assist you with data subject rights requests within 14 days.
We will notify you of personal data breaches within 72 hours of becoming aware.
We will permit and contribute to audits, subject to reasonable confidentiality.
On termination, we will return or delete all personal data within 30 days.
Sub-processors require your written consent and are listed in our Trust Center.

Signing

The full DPA is signed at support@genacy.co. We countersign within five business days.

Back to Trust Center