Privacy Policy

GenuineIN is committed to protecting your privacy. This Privacy Notice ("Notice") describes how GenuineIN processes personal data in connection with our business, including the provision of our website at (http://www.GenuineIn.com/) ("Website") and our Services.

This Notice explains GenuineIN' approach to any Personal Data that we might collect from you, or which we have obtained about you from a third party, and the purposes for which we process your Personal Data in our capacity as a Controller. It also describes your rights in respect of our processing of your Personal Data.

This Notice only applies to the use of your Personal Data by us or on our behalf. It does not apply to:

• Personal Data collected by third parties during your communications/dealings with those third parties or your use of their products or services
• Personal Data processed, stored or hosted by us when we act as a Processor on behalf of our Customers in the course of providing our Services, in which case the privacy statement of the relevant Customer will apply.

1. WHO IS THE DATA CONTROLLER?

The Website and our Services are made available by various companies in the GenuineIN group of companies (each a "Group Company"). Where this Privacy Notice refers to "GenuineIN", "we", "us, "our", this means one or more of the particular Group Companies that provide the particular Website, Mobile Application, Newsletter or Services to you.

2. WHO WE COLLECT PERSONAL DATA ABOUT

We collect and process Personal Data about the following people:

• Website visitors: If you browse our Website or contact us via our Website (Contact Sales) we will collect and process your Personal Data in connection with your interaction with us and our Website.
• Users of our Services: If you use our Services, whether it is through our Website or our Mobile Applications, we will process your Personal Data for certain data analytics purposes, profile management and in order to offer, deliver and improve our Services.
• Visitors to our Offices: If you attend our office, we may process Personal Data about you that you volunteer in connection with your visit (e.g. signing in). CCTV footage may also be collected.
• Recipients of marketing communications: If you are a potential lead or existing customer, we may process Personal Data about you in order to send you marketing communications.
• Event attendees: If you register for, attend or take part in our events, webinars or contests hosted by us we will process Personal Data about you in connection with your attendance.
• Personnel of Customers/Partners: If you work for our Customers, partners and suppliers, we may collect Personal Data in connection with our provision of Services.

Hosted Data

Some of our Services include processing of data on behalf of our Customers ("Hosted Data"). Save for limited circumstances, we are not the data controller of this Hosted Data. If you believe your Personal Data is being processed by us in this way you should refer to the privacy notice of the data controller on whose behalf we are acting.

3. WHAT PERSONAL DATA DOES GENUINEIN COLLECT?

Purpose: Providing Services
We may use your Personal Data for administering your account, assessing analytics needs, facilitating transactions, preventing misuse, and collecting fees.

Data processed includes:

• Contact information (name, email, address, IP, phone) of Account Admin
• Data sections: education, experience, courses, certifications, training, projects, publications, skills, competencies, attributes, languages, etc.
• Billing information (credit card, billing address)
• Unique identifiers (username, account number, password)
• Feedback and survey responses
• Communication content

Purpose: Newsletters
When you subscribe, we collect your email to share newsletters. It is in our legitimate interest to process this request.

Purpose: Service Analytics
We perform analytics to assess business needs, improve service quality, respond to requests, and for product improvement (training algorithms, compiling statistical reports, developing new features).

Purpose: Cookies, Mobile Apps, Usage Data
We use cookies and similar technologies to collect data for analyzing trends, administering the website, gathering demographic info, and remembering preferences.

• Single Sign-On: You can log in using Google, Facebook, LinkedIn. These services authenticate your identity and may share name/email.
• Social Media Features: Features like "Like" or "Share" buttons may collect IP address and set cookies. Interactions are governed by the third party's privacy policy.

4. WITH WHOM DO WE SHARE PERSONAL DATA?

We process Personal Data in countries where we are established. We may share it with:

• Third parties assisting in providing Services (Sub-Processors) subject to confidentiality.
• Service providers for research, analytics, marketing, and data enrichment.
• For Recruiters: Third parties registered for recruitment and verification purposes.
• Payment processors (for billing only).
• Partners assisting in onboarding/support.
• Contest sponsors or event partners.
• Social media networks and advertising networks.
• External recruiters and background check providers.
• Professional advisers (auditors, lawyers, accountants).
• Law enforcement or regulatory agencies as required by law.
• Affiliates within GenuineIN group.
• Third parties involved in a merger, acquisition, or sale of assets.

5. HOW DOES GENUINEIN KEEP PERSONAL DATA SECURE?

We use appropriate technical and organizational measures to protect Personal Data from unauthorized access, modification, or loss. Employees and data processors are bound by confidentiality. Measures are designed based on risk level and are periodically reviewed.

6. RIGHT TO REQUEST INFORMATION

a. Right to Know: You have the right to request information about categories of data collected, specific pieces of data, sources, purposes, and third parties with whom data is shared.

b. Right to Delete: You have the right to request deletion of your Personal Information, subject to certain exceptions.

c. How to Submit: Contact us at support@genuinein.com to exercise these rights.

d. No Sale of Data: GenuineIN does not sell your Personal Information.

7. OPTING OUT

You may opt-out of marketing communications by clicking "unsubscribe" in emails, deleting your account, or contacting support@genuinein.com.

8. OTHER COMMUNICATIONS

We may send necessary service-related announcements (e.g., maintenance). You cannot opt-out of these unless you deactivate your account.

9. RETENTION OF PERSONAL DATA

We retain Personal Data as long as necessary for the purposes collected, or to comply with legal obligations, resolve disputes, and enforce agreements. Generally, data is retained for up to three years from the last interaction or as long as you use the service.

10. LINKS TO THIRD PARTY SITES

Our Website contains links to other sites not controlled by GenuineIn. We are not responsible for their privacy practices.

11. GOOGLE API DISCLOSURE

GenuineIN's use of information received from Google APIs adheres to Google API Services User Data Policy, including the Limited Use requirement.

12. CAREERMCP AND AI ASSISTANT INTEGRATIONS

CareerMCP allows you to connect your GenuineIN account to compatible AI assistants and other Model Context Protocol (MCP) clients, including OpenAI products such as ChatGPT. Connecting is optional and requires you to sign in directly with GenuineIN and approve the requested OAuth permissions. The connected client does not receive your GenuineIN password.

When you ask a connected client to use CareerMCP, GenuineIN may return the profile information required to answer that request, limited by the permissions you approved. Depending on those permissions and your request, this may include profile details, education, employment experience, skills, credentials, projects, achievements, interests, and portfolio information. GenuineIN does not send CareerMCP profile data to a connected client unless an authorized request is made.

The connected client, including OpenAI where applicable, receives and processes the information returned for your request under its own terms and privacy policy. Review the connected client's privacy practices before authorizing access. GenuineIN does not authorize connected clients to sell your GenuineIN profile data or use it for unrelated advertising.

To operate and secure the connection, GenuineIN stores the connected client identifier, approved permission scopes, access-grant status, token hashes, token expiry and revocation records, and security or audit events. Raw authorization codes and refresh tokens are not stored; cryptographic hashes are stored for validation. CareerMCP access tokens expire after one hour and refresh tokens expire after 30 days unless they are rotated, revoked, or invalidated sooner.

You can deny authorization before connecting or revoke an existing CareerMCP grant. Revocation prevents the grant from being used for subsequent CareerMCP requests. You may also contact support@genuinein.com for assistance with access, revocation, deletion requests, or questions about CareerMCP data handling. OAuth and security records are retained only as needed to operate, protect, audit, and comply with legal obligations for the service, subject to the retention principles in Section 9.

13. CHILDREN'S PERSONAL DATA

We do not knowingly collect data from children under 16. If we become aware of such data, we will delete it. Contact us if you believe a child has provided data.

14. AMENDMENTS

Amendments to this Notice will be posted here. Continued use of Services constitutes acceptance. You should review this Notice periodically.

15. EFFECT OF MERGER OR ACQUISITION

In the event of a merger, acquisition, or sale, data may be transferred. You will be notified via email or a prominent notice on our Website.

16. CONTACTING GENUINEIN

If you have questions about this Privacy Notice, please contact us at support@genuinein.com.