1) Quick summary and contact
This policy explains what information GEENXT ("GEENXT", "we", "us", or "our") collects when you use the GEENXT website at geenxt.com (the "Website") and the GEENXT application and AI-agent services (the "Service"), how that information is used, when cookies and third-party advertising tools apply, how client access is handled, and how to contact us about privacy requests.
- What we collect: contact details, account and inquiry information, project and task details, comments data where enabled, connected-site information, and limited technical usage data.
- How we use it: communication, service delivery, site and Service operations, billing, security, spam prevention, and improvement.
- Cookies and ads: cookies may support consent, functionality, analytics, and advertising where applicable. Google AdSense ads may appear on substantive editorial or informational pages, while legal, policy, contact, account, private, and utility pages remain ad-free.
- Your next step: email support@geenxt.com or use our contact page for questions and privacy requests.
2) Scope of this policy
This policy applies to the public GEENXT Website (contact forms, service inquiries, comments, and related interactions) and to the GEENXT application and Service (accounts, subscriptions, and the AI agent that performs work on connected WordPress sites). It does not automatically replace a separate client agreement or confidentiality arrangement for paid work.
GEENXT is a website services business focused on WordPress support, website development, maintenance, performance work, and related digital services. For more business context, see About GEENXT. For more about how we plan, review, and maintain website content, see our Editorial Policy and Review Policy.
3) Information we collect
Information you provide.
- Contact and inquiry information: names, email addresses, phone numbers, business details, project information, and support requests.
- Account information: the email address, password, and profile details you provide when you register, or, if you sign in with Google, the basic profile information Google shares with us (such as your name and email address).
- Connected WordPress site data: the site URL and the access credentials or tokens you provide to link a site. Access credentials and tokens are stored encrypted at rest (AES-256-GCM) and are used only to perform the work you request.
- Task and session content: the instructions, messages, and materials you submit to the Service for the AI agent to act on.
- Comments: information shown in the comment form together with visitor IP address and browser user-agent data for spam detection and moderation.
Information collected automatically.
- Limited technical and usage information needed to operate, secure, and improve the Website and Service, such as IP address, browser type, device type, referrer information, pages visited, and basic request or activity data.
- Service usage metering, such as agent-token usage recorded to enforce Plan limits and to bill and operate the Service.
If you upload media to the Website, avoid files that contain embedded location data because that information may be accessible to others who download the file.
4) Cookies, consent, and similar technologies
The Website uses cookies and similar technologies for core functions, consent settings, analytics, security, spam prevention, and advertising. Google AdSense ads may appear on substantive editorial or informational pages, including blog posts, guides, resources, service explanations, and other public informational content. Legal and policy pages, contact pages, account and private screens, and navigation or utility pages are intended to remain free from display ads.
- Necessary cookies support site functionality, session handling, consent choices, and security.
- Functional cookies may remember selected preferences or form settings.
- Analytics cookies such as
_ga and _gid may help measure site use and performance when analytics consent is granted.
- Advertising cookies, including AdSense or DoubleClick cookies such as
__gads, __gpi, __eoi, IDE, DSID, and test_cookie, may support ad delivery, measurement, personalization, frequency management, and fraud prevention when advertising consent is granted.
- Consent cookie:
wpconsent_preferences stores the categories selected in the preference center.
You can accept or reject optional cookies through the cookie banner and change your choices later through the Cookie Preferences control in the site footer. For site-level advertising boundaries and ad-free page categories, see the Monetization Disclosure.
Third-party vendors and Google advertising. Third-party vendors, including Google, may use cookies or similar identifiers to serve, limit, personalize, and measure ads based on a visitor's activity on this Website and, where permitted, other websites or applications. For more information, see Google's Privacy Policy and how Google uses information from sites or apps that use its services.
Opting out of personalized advertising. Use the footer Your Privacy Choices control or manage Google ad personalization through Google Ads Settings. Additional opt-out options include the Digital Advertising Alliance at aboutads.info/choices and the Network Advertising Initiative at optout.networkadvertising.org.
EEA, UK, and Switzerland users. Google Privacy & messaging is the Google-certified consent management platform selected for regulated-region consent messages. The Website sets Google Consent Mode v2 defaults before Google tags run and updates those signals when preferences are saved. The certified regional message must be active before personalized advertising is enabled for visitors who require it.
5) How we use information
We use collected information to respond to inquiries and support requests; provide and operate the Service, including running the AI agent and performing the tasks you request on your Connected Sites; manage communication with prospective or current clients; process and verify payments and manage subscriptions; operate and secure the Website and Service; detect spam, abuse, fraud, or invalid traffic; analyze performance and improve content or services; and meet legal, administrative, advertising-policy, or security obligations.
We do not sell personal information for money. When personalized advertising is enabled, we may disclose identifiers, device information, or Website activity to advertising providers such as Google for cross-context behavioral advertising. This may constitute "sharing" under California law. Use the footer Your Privacy Choices control to opt out. A recognized Global Privacy Control signal will also be treated as an opt-out request once GPC handling is enabled and verified on the Website.
6) When we share information (subprocessors)
We share information only when reasonably necessary with providers or tools that support Website operations or Service delivery, under appropriate confidentiality and data-protection terms. These currently include:
- Hosting, database, and authentication: Supabase (application hosting, database, and account authentication).
- Payments: PayPal (payment processing for paid Plans).
- Sign-in: Google (Google sign-in / OAuth, where you choose it).
- AI / language-model providers: the configured provider used to power the agent, which may include Anthropic, OpenAI, OpenRouter, Google, or Moonshot (Kimi). Task and session content necessary to perform your request may be processed by the configured provider.
- Email: our transactional email provider (for example, Resend) for account, activation, and notification emails.
- Advertising: Google AdSense on substantive editorial or informational pages where display advertising is enabled.
We may also disclose information where reasonably necessary to protect rights, respond to lawful requests, enforce agreements, investigate abuse, address security issues, or respond to advertising-policy, invalid-traffic, or compliance concerns.
7) Advertising, embeds, and third-party services
The Website may use third-party services such as analytics providers, embedded media, font services, spam-prevention tools, advertising platforms, or social-media features. These third parties may collect data, use cookies, or monitor interactions according to their own policies. GEENXT does not control the privacy practices of third-party websites or services.
Where advertising features are active, third-party vendors such as Google may use cookies to serve ads based on prior visits to this and other websites. You can learn more here:
If a third-party ad or embedded service appears to cause a misleading experience, unwanted redirect, unwanted download, disruptive popup, or other suspicious behavior, please stop interacting with it and contact GEENXT through the contact page.
8) Client confidentiality and service access
When GEENXT provides website or support services, we may receive access to client-owned systems, credentials, website content, project details, or operational data. We treat that access as confidential and use it only for agreed service delivery, support, troubleshooting, maintenance, security, or related operational work. Connected-site access credentials and tokens are stored encrypted at rest and are used only to perform the work you authorize.
Where a separate client agreement, scope document, or instruction set applies, that more specific arrangement may govern the handling of project information within the service relationship.
9) Retention and security
We keep personal data only as long as reasonably needed for the purpose it was collected, including communication, service delivery, billing, compliance, security, and recordkeeping. Comments and related metadata may be retained indefinitely; account and subscription data is retained while your Account is active and afterward where needed for legal, tax, or operational reasons; and inquiry records may be retained for business purposes.
We use reasonable technical and organizational measures — including encryption at rest for sensitive secrets such as connected-site credentials, access controls, and least-privilege service access — to help reduce unauthorized access, misuse, alteration, or loss. However, no website, transmission method, or storage system can guarantee absolute security.
10) Your rights
Philippines — Data Privacy Act of 2012 (RA 10173). If you are in the Philippines, you have rights under the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules, including the rights to be informed, to access, to object, to rectify, to erasure or blocking, to data portability, to damages, and to lodge a complaint with the National Privacy Commission (NPC). To exercise these rights, contact support@geenxt.com. GEENXT acts as the personal information controller for personal data processed through the Website and Service and has not designated a separate Data Protection Officer; direct all Philippine data-privacy requests to support@geenxt.com.
EEA, UK, and Switzerland — GDPR / UK GDPR. If you are in these jurisdictions, you may have the right to access, correct, delete, restrict, port, or object to processing of your personal data, and the right to lodge a complaint with your local supervisory authority.
California — CCPA / CPRA. California residents may have rights to know, access, correct, or delete certain personal information; to limit certain uses of sensitive personal information; and to opt out of any "sale" or "sharing" as those terms are defined under California law. GEENXT does not sell personal information for money. Personalized advertising may involve "sharing" personal information with advertising providers for cross-context behavioral advertising. Use the footer Your Privacy Choices control to opt out. A recognized Global Privacy Control signal will also be treated as an opt-out request once GPC handling is enabled and verified.
To make any privacy-related request, use our contact page or email support@geenxt.com and describe the issue clearly enough for follow-up.
11) Children's privacy and policy updates
This Website and Service are not intentionally directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided personal information through this site, please contact us so the information can be reviewed and removed where applicable.
This policy may be updated periodically, with changes reflected in the "Last updated" date shown at the top. Material changes will be indicated as appropriate. The version published on this page is the current version for website and Service use.