Privacy Policy
Last updated: 2026-08-12
1. What we collect
To complete a GEO audit we process the brand domain you submit, its public information, and citation samples from AI platforms. We only collect publicly accessible information and do not collect browser fingerprints or unrelated social data.
2. How data is used
All data is used only to generate GEO citation reports, extract evidence and provide fix recommendations. Reports are private by default and only reachable via a public link when you choose to share them.
3. Multi-tenant isolation
We use row-level security (RLS) for strict multi-tenant isolation. Your reports and evidence vault are invisible to other users. Public report pages are only reachable when you share them.
4. Report removal
Brand owners can submit ownership verification via the “Request removal” action on the report page; once verified, the report goes offline (HTTP 410) within 48 hours.
5. Data retention
We do not delete your data unless you explicitly ask. You may export or request deletion of personal data related to you at any time.
6. Contact
For privacy questions, submit a removal request via the report page or contact our support team.
7. GDPR (EU) rights
If you are located in the EEA/UK, you have the right to access, rectify, erase and port your personal data under GDPR. We process data with “lawful basis” of legitimate interest or consent, and honor requests within 30 days. Contact us to exercise these rights.
8. CCPA/CPRA (California, US)
If you are a California resident, you have the right to know, delete, correct and opt out of the “sale” or “sharing” of personal information under the CCPA/CPRA. We do not sell personal information. To exercise your rights, contact us or use the report removal flow.
9. Cookies & consent
We use only essential cookies to keep you signed in. We do not run third-party advertising or cross-site tracking. Where required by law (e.g. GDPR), we obtain consent before storing non-essential cookies.
10. Children’s privacy
The service is not directed to children under 16 (13 in the US). We do not knowingly collect personal data from children. If you believe a child has provided data, contact us to delete it.