Privacy Policy

GenCueBox collects and handles personal information strictly to operate a curated AI prompt discovery platform, authenticate users, and support community interactions. We limit the categories of information we collect to what is directly relevant to these operations:

• Account & Profile Information: Display name, email address, username handle, and avatar image URL (received through Google OAuth authentication or configured during profile setup).
• Authentication Data: User authentication tokens and session identifiers managed through Supabase Auth and Google OAuth single sign-on. GenCueBox does not store external passwords.
• Submitted Content: AI prompt text, associated AI model selections (such as ChatGPT, Midjourney, FLUX, Claude), structured prompt parameters, categorization tags, prompt titles, and user-submitted preview images.
• Platform Interactions: Likes, favorites/saved bookmarks, public view counts, and custom collection associations linked to your account identifier.
• Inquiries & Legal Notices: Support messages submitted via our contact form or official email, along with formal copyright infringement reports received under our DMCA policy.

GenCueBox is a community-driven discovery service. When you publish content or create a public profile on GenCueBox, certain elements of that information are intentionally made accessible to all visitors:

• Public Prompts: Prompt text, model tags, parameters, and preview imagery submitted for public publication are publicly visible and can be searched, browsed, and copied by other users.
• Creator Profile Fields: Your public handle, display name, profile avatar, public prompt count, and public contributions appear on your creator profile page.
• Private Data Protection: Prompts saved as personal bookmarks or favorites remain private to your account and are not displayed as a public feed.

Because public content is accessible over the open internet, it may be indexed by third-party search engines (such as Google or Bing) or captured by external web archives. Deleting a prompt from GenCueBox removes it from active display on our platform, but cannot immediately remove external caches, search snippets, or offline copies retained by third parties.

GenCueBox uses personal information strictly for legitimate operational purposes related to providing and maintaining the platform:

• Platform Provision: Creating and administering user accounts, authenticating sessions, displaying creator profiles, and managing submitted prompts.
• Catalog Search & Discovery: Indexing prompt text, calculating Prompt Completeness Scores (PCS), and organizing content across model categories and trending feeds.
• User Communication: Responding to contact form inquiries, answering support requests, and processing privacy rights requests.
• Abuse Prevention & Integrity: Detecting spam bot submissions, mitigating unauthorized scraping, enforcing our Terms of Service, and securing platform endpoints.
• Legal Compliance: Retaining records necessary to address copyright dispute notifications, maintain platform transparency, and comply with applicable statutory duties.

To provide cloud infrastructure, fast global delivery, and secure authentication, GenCueBox integrates with specialized third-party service providers. We share only the information necessary for each provider to perform its specific operational role:

We do not authorize our service providers to sell your personal information or use it for independent advertising purposes. Aside from these technical infrastructure providers, GenCueBox will only disclose personal information if required by a valid legal order, court subpoena, or to protect the vital rights and security of our platform and users.

We maintain clear, truthful standards regarding commercial data practices and artificial intelligence usage on GenCueBox:

• No Sale of Personal Information: GenCueBox does not sell your personal information, contact records, or profile details to third-party data brokers or aggregators.
• No Behavioral Ad Sharing: GenCueBox does not share your personal information with third-party advertising networks for cross-context behavioral advertising or retargeting.
• Third-Party AI Inference Status: Automated third-party AI prompt expansion and generation assistants on the prompt creation workflow are intentionally disabled ($0 external AI spend; prompts are authored directly by human creators).
• Model Training: GenCueBox does not use your personal profile data or private account information to train proprietary commercial foundation models.

GenCueBox uses client-side browser storage strictly for functional operations and session continuity. We do not deploy invasive third-party cross-site advertising tracking cookies:

• Authentication & Session Tokens: Browser localStorage and sessionStorage are used by the Supabase client SDK to store authentication session tokens so you remain signed in across page navigation.
• UI State & Preferences: Local storage is used to remember interface settings, such as mobile drawer visibility states and active filter preferences.

You can manage or clear stored browser data at any time through your web browser settings. Please note that clearing local storage will log you out of your GenCueBox session and reset your active interface preferences.

We apply factual, criteria-based retention standards rather than arbitrary fixed timelines. Personal information is retained only as long as necessary to fulfill the purposes for which it was collected:

• Account Information: Retained for the active lifespan of your user account until you request account deletion.
• Submitted Content: Public prompts and preview imagery remain accessible on the platform until you delete them or request account closure.
• Support & Communications: Customer inquiries and privacy communications are retained for as long as needed to address the request and maintain communication history.
• Legal & DMCA Records: Copyright infringement notices and counter-notices are retained in compliance with applicable statutory documentation obligations.

GenCueBox provides a globally accessible website. Our technical infrastructure and service providers (including cloud database and CDN services) operate servers in multiple regions.

If you access GenCueBox from outside the regions where our service providers maintain server infrastructure, please be aware that your personal information will be transmitted and processed across international borders to the extent necessary to deliver the web service, execute authentication requests, and serve web content.

Depending on your location and applicable data privacy laws, you may possess specific rights regarding your personal information:

• Access: The right to request confirmation of whether we process your personal information and receive a copy of that data.
• Correction: The right to request correction of inaccurate, outdated, or incomplete personal profile information.
• Deletion: The right to request erasure of your personal account information and submitted content, subject to legitimate legal exceptions.
• Restriction & Objection: The right to object to or request restriction of certain data processing activities under applicable statutory grounds.
• Withdrawal of Consent: Where processing relies on your consent, you have the right to withdraw that consent at any time.

How to Submit a Request: To exercise any applicable privacy right, please email us at gencuebox@gmail.com with the subject line "Privacy Request". We review and respond to valid requests within the timeframe mandated by applicable law. For security and to protect your account against unauthorized access, we may request reasonable verification of account ownership before fulfilling substantive data requests.

Age Policy: In accordance with our Terms of Service, GenCueBox is directed to individuals aged 13 years and older. We do not knowingly collect personal information from children under the age of 13. If you believe a child under 13 has registered or provided personal information on GenCueBox, please notify us at gencuebox@gmail.com so we can take immediate steps to remove that information and close the associated account.

Security Safeguards: GenCueBox applies industry-standard administrative, technical, and physical measures designed to safeguard personal information. These include HTTPS transport encryption, Supabase Row-Level Security (RLS) data access rules, and restricted infrastructure management access.

GenCueBox may update this Privacy Policy from time to time to reflect changes in platform features, operational practices, or applicable legal requirements. When updates are published, the revised policy will be posted on this page with the updated revision context.

Your continued use of GenCueBox following the posting of policy updates signifies your acknowledgment of the modified terms. If you have questions about this Privacy Policy or wish to inquire about our data practices, please reach out through our official channels:

• Privacy Inquiries & Requests: gencuebox@gmail.com
• Online Contact Form: GenCueBox Contact Us Page