privacy
How heygenie handles data.
The short version: the demo on this site keeps everything in your browser. The hosted service keeps case headers and meter lines for billing. The content of a case is sealed to the tenant. The layer counts and never reads sealed content.
Controller and scope
Interop FZCA, Dubai, United Arab Emirates ("Taifoon", "we"). Email: info@taifoon.io. Company and registration details are provided to counterparties on request. [registered address]
This page applies to heygenie.online, the studio, the admin dashboard, the embed, and the doors of the service a heygenie key opens. We handle personal data in line with the European Union General Data Protection Regulation (GDPR) and other applicable privacy laws.
A product that installs the helpdesk is the controller of its own users' data. We process that data on the product's behalf, to run the helpdesk, under the product's agreement with us. The product's own privacy information tells its users what it collects; this page tells you what reaches us.
What the service holds
The service works with four kinds of record:
- Cases: a question, the answer, who asked (as the hashed reference of a key), when, and the state of the case.
- Grades: the judge's verdict and score on an answer, and the asker's grade.
- Meter lines: one line per graded case with its legs: the price, the ecosystem cut, the expert's or specialist's share, the key's reference, the sale id.
- Sealed records: the trail of a case, sealed to the tenant. Readable by the tenant that holds the key. The layer keeps the sealed record, counts it, and never reads its content.
What the layer sees is counts: cases, grades and money per tenant. Small counts are shown as "under five". Never a payload.
The demo in your browser
The genie on the front page, the studio chat and the admin dashboard run the helpdesk core in your browser. The cases, grades, meter lines and sealed records they make stay in your browser:
- In the tab's session storage: your key, your tenant name and the session of the case. These are gone when the tab closes.
- In local storage: your tunings, the users you added in the admin dashboard, and small studio values. These stay in your browser until you clear them in the dashboard or clear the site's data.
None of this is sent to us or read by us. The demo sends only what section 4 describes.
The genie's answers and the judge
The genie's conversational answers are produced by a language model run on Cloudflare Workers AI. With each turn, the page sends to our Worker on Cloudflare: the product's name, up to the last twelve turns of the conversation, and the knowledge the core retrieved from the product's graph for that question. The judge's door sends the question, the answer and the same knowledge.
Our Worker keeps nothing: it has no store and does not write the prompt or the completion anywhere. Cloudflare's own privacy policy governs what it does with a request it serves. We do not use questions or answers to train models, and we do not sell or share them.
The model's words are not the graph's until a grade stands. An answer that is rejected is not charged and does not enter the graph. The judge rejects an answer that asks for a key, a password, a seed phrase or an address. Never type secrets, seed phrases or wallet addresses into a question: if you do, they have reached the model.
The hosted service and your key
A key (
tfr_…) is shown once and kept as a hash; nobody reads it back. Every record of the service carries the hashed reference of the key, never the key.For a graded case the hosted service keeps the record of the sale: the case header, the grade, the meter line with its legs, the sale id and the key's reference. That record is kept for as long as the key's billing history is kept, so that usage can be checked and disputes settled. The content of the case is in the sealed record, for the tenant.
Public graphs are open under CC BY 4.0 and hold no personal data by design. A tenant's graph stays the tenant's.
Visiting the site
When you visit, technically necessary data transmitted by your browser is processed to deliver the site and keep it secure: IP address, date and time, requested address, browser type and operating system. The site is served by Cloudflare, which keeps its own request logs under its own policy. We do not keep an IP log of our own.
The site sets no cookies and runs no analytics. Fonts are loaded from Google Fonts; your browser requests the font files from Google, which sees your IP address when it does. Your light or dark mode follows your system setting; nothing is stored for it.
Legal basis
We process personal data only when one or more of the following apply:
- Contractual necessity: processing is required to perform a contract with you, such as answering, grading and billing a case.
- Legitimate interests: the secure and stable operation of the service and its improvement, provided these do not override your rights and freedoms.
- Legal obligation: processing is necessary to comply with applicable laws.
- Consent: you have given clear consent for a specific purpose. You may withdraw consent at any time by contacting us.
Who receives data
We do not sell or rent your personal data. We share information only with:
- Service providers assisting with hosting and the model: Cloudflare (the site, the Worker, Workers AI);
- The tenant whose helpdesk you used, which holds the sealed record of your case;
- Legal authorities when required by law or valid legal requests;
- Affiliates or successors in case of a merger, acquisition or reorganisation.
All third parties handling your data must do so securely and in accordance with this page and applicable data protection laws. If personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, such as EU Standard Contractual Clauses or equivalent mechanisms.
Retention
We retain personal data only as long as necessary for the purposes described here or to comply with legal and regulatory obligations. Case headers and meter lines are kept with the key's billing history. Browser data is yours to clear. When no longer required, data is securely deleted or anonymised.
Security
We implement reasonable technical and organisational measures to safeguard data: keys stored as hashes, sealed records readable by the tenant only, a Worker without a store, and a language that refuses a broken copy of the core. No online system can guarantee absolute security, and you acknowledge that you share information at your own risk.
Your rights
Under the GDPR you have the right to access your personal data, to request correction or deletion, to object to or restrict processing, to data portability, and to withdraw consent at any time. You may lodge a complaint with your local data protection authority if you believe your rights have been infringed.
Where we process data on the basis of our legitimate interests, you may object at any time on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds or the processing serves the establishment, exercise or defence of legal claims.
To exercise your rights, write to info@taifoon.io. We answer within 30 days. A request about the content of a sealed case goes to the tenant that holds it; we cannot read it.
Children, links and changes
The service is not directed toward individuals under 13 years of age, and we do not knowingly collect data from minors. If such data is discovered, it will be deleted promptly.
The site may link to external websites or services not operated by Taifoon. We are not responsible for their privacy practices or content.
We may update this page to reflect changes in our practices, technologies or legal obligations. Updates are posted here with a new date. The terms of use say how material changes are announced.