1. Data Controller
Geopsy ("we", "us", "our") is the data controller responsible for your personal data. If you have questions about how we process your data, contact us at info@geopsy.ai.
2. Data We Collect
We collect the following categories of personal data:
- Account data: email address, name, and authentication credentials when you create an account.
- Usage data: pages visited, features used, session duration, and interaction patterns to improve our service.
- Brand data: domain names, brand names, and business information you provide for AI visibility tracking.
- Payment data: billing information processed securely through Stripe. We do not store credit card numbers.
- Technical data: IP address, browser type, device information, and cookies for security and analytics.
3. Legal Basis for Processing
We process your personal data based on the following legal grounds under GDPR:
- Contract performance: to provide the services you signed up for.
- Legitimate interest: to improve our services, prevent fraud, and ensure security.
- Consent: for marketing communications, which you can withdraw at any time.
- Legal obligation: to comply with applicable laws and regulations.
4. How We Use Your Data
- Provide, maintain, and improve the Geopsy platform.
- Process payments and manage your subscription.
- Send service-related notifications and updates.
- Analyze usage patterns to improve user experience.
- Detect and prevent fraudulent or unauthorized activity.
5. Your Rights (GDPR)
Under the General Data Protection Regulation, you have the following rights:
- Right of access: request a copy of the personal data we hold about you.
- Right to rectification: request correction of inaccurate personal data.
- Right to erasure: request deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
- Right to restrict processing: request that we limit how we use your data.
- Right to data portability: receive your personal data in a structured, commonly used, machine-readable format and transfer it to another controller.
- Right to object: object to processing based on legitimate interest or for direct marketing purposes.
- Right to withdraw consent: withdraw consent at any time where processing is based on consent.
To exercise any of these rights, email us at info@geopsy.ai. We will respond within 30 days.
6. Data Sharing & Third Parties
We share personal data only with the following categories of recipients:
- Payment processor: Stripe, for subscription billing.
- Infrastructure: Google Cloud / Firebase, for hosting and data storage.
- AI platforms: queries are sent to AI services (OpenAI, Google, Anthropic, Perplexity) to analyze brand visibility. These queries do not contain your personal data.
- Analytics: aggregated, anonymized usage data for service improvement.
We do not sell your personal data to third parties.
7. International Data Transfers
Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States, where our infrastructure providers operate. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data in accordance with GDPR requirements.
8. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we retain data for up to 90 days for backup and legal compliance purposes, after which it is permanently deleted. Anonymized analytics data may be retained indefinitely.
9. Cookies & Analytics
We use essential cookies for authentication and session management. In addition, we use Google Analytics 4 to understand how visitors interact with our website. Google Analytics collects data such as pages visited, session duration, and interaction patterns.
- Consent: Analytics cookies are only placed after you explicitly accept them via our cookie banner. You may decline or withdraw consent at any time.
- IP Anonymization: Google Analytics 4 anonymizes IP addresses by default and does not store them.
- Data Transfer: Analytics data may be transferred to the United States under the EU-U.S. Data Privacy Framework, to which Google is certified.
- Opt-out: You can clear your consent choice at any time by clearing your browser's local storage or by using the cookie settings in our application.
10. Data Security
We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews to protect your data.
11. Supervisory Authority
If you believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local data protection supervisory authority.
12. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of material changes by posting a notice on our website or sending you an email. Your continued use of the service after changes constitutes acceptance of the updated policy.