Privacy Policy

At genRAG.AI, privacy and multi-tenant isolation are fundamental architectural requirements. We never sell subscriber data or allow cross-tenant knowledge retrieval.

1. Data Isolation & Storage

Every profile, uploaded document, brochure, and captured lead is strictly partitioned using compound relational indexes (account_id, profile_id). One subscriber can never view or search another subscriber's data.

2. AURA AI Chatbot & Site Assistant

Each card has its own separate search index: a question to one cardholder's AURA is answered only from that cardholder's published card details, FAQs, knowledge base and PDF brochures, never from another subscriber's data. To write a reply, the visitor's question, the last few messages of that conversation and the matching passages from that card are sent to an AI model provider (Google Gemini, Groq, Cerebras or OpenRouter, whichever is available). Some providers' free plans may use prompts to improve their models, so please don't type passwords, payment details or health or other sensitive personal information into a chatbot. Every AI reply is checked against the card's own information before it is shown.

We don't store the text of chatbot conversations on our servers: we keep only a count of questions per card. Recent replies may be held in server memory for up to 12 hours so repeated questions are answered faster. We don't sell chat content.

3. Voice Input & Spoken Replies

When you tap the microphone, your browser's own speech recognition turns your speech into text (for example, Chrome sends the audio to Google for this). We receive only the resulting text, never your audio. Spoken replies use your device's voices or, where enabled, Google Cloud Text-to-Speech, which receives only the reply text. Generated audio for a card's replies is cached on our server for that card only. Your voice language and reply-aloud choices are saved only in your own browser.

4. Contact Information & vCard Downloads

Public digital profiles display only the contact details explicitly published by the subscriber. When visitors tap "SAVE CONTACT", a static vCard is generated locally for phonebook saving without visitor data tracking.

5. Order Reminders, Referrals & Site Statistics

If you enter your email on our order page but don't finish, we may send up to two reminder emails about that order. Every reminder has a one-click link to stop them, and they stop automatically once you order. When you arrive through a cardholder's referral link, we remember that link for 30 days so they can be credited. To understand how many visitors reach each step of ordering, we count steps with an anonymous random ID cookie; it contains no personal details. Cardholders also get a weekly referral email with their personal link; every one has a one-click link to stop them. If you add bank or UPI details for referral rewards, they are stored encrypted, kept separate from your public card, and used only by our admin team to pay you. If Google Analytics or Meta Pixel are enabled, they may set their own cookies under their policies.