Privacy policy
Last updated: November 2, 2026
Who operates Genovo
Genovo is a website and commerce platform powered by Grid & Logic. This notice covers our platform, merchant accounts and support. Each merchant operates its own website and is responsible for describing its use of customer information in its store privacy policy.
Information we receive
Merchant signup collects a name, email address and password, which is stored as a salted password hash. We also store store names, designs, pages, domains, uploaded images and configuration. Store accounts, order details, addresses, reviews and contact submissions are processed to provide the merchant’s service. Support requests contain the contact details and message you submit. Hosting and security services may process IP addresses, request logs and technical errors.
Why we use it
We use information to provide accounts and websites, authenticate users, publish content, verify domain ownership, support merchants and customers, prevent abuse and meet applicable obligations. The operational reasons include delivering the requested service, protecting the platform and complying with applicable law. We do not use store customer data for platform advertising.
Providers and public information
The current platform uses Vercel for application hosting and domain connection, and Supabase for database and image storage. Optional email and payment integrations use the providers configured by the operator or merchant. Storefront content, approved reviews and uploaded store imagery can be public. Merchant-provided external image URLs contact the servers hosting those images. Do not upload secrets or personal documents as public imagery.
Cookies and browser storage
Essential cookies keep merchant/customer sessions and remember the selected store. Sign-in sessions last up to thirty days. On the shared platform host, store selection can last up to thirty days; the demo selection can last a day. Browser local storage holds cart, wishlist and comparison data separately for each store until you clear it. The application does not currently include advertising cookies or third-party analytics scripts. Provider logs and externally linked services are governed by their own practices.
How long information stays
Session records expire after thirty days and expired session records are cleared during subsequent session creation. Merchant accounts, store data, orders and support records do not currently have an automatic deletion schedule. They remain while the service is used and until an authorized removal or a verified privacy request is handled, subject to outstanding transactions, disputes and applicable record-keeping needs. We assess requests individually and explain any information that must be retained.
Your choices
You can change your merchant password in your dashboard and edit store content. Store customers can update account details and saved addresses. For access, correction, deletion, subscriber removal or a privacy concern, use our support form. For a purchase or store-specific use of information, contact the merchant through that store’s contact page. We may verify identity before acting. Applicable law may provide additional rights or a right to complain to a relevant supervisory authority.
Submit a privacy or support request →Security and international processing
Passwords are hashed; sessions use HTTP-only cookies; management actions require authentication and authorization. Hosting and database providers may process information outside your country, depending on selected regions and their infrastructure. These measures reduce risk but do not guarantee that an online service can never be compromised.
Updates and contact
This notice reflects the current platform configuration and may be updated when features or practices change. Privacy and support requests can be submitted through the linked support form.