Privacy Policy

1. Introduction

Welcome to Geonimo ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Generative Engine Optimization (GEO) analytics platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, password, and name when you create an account
• Project Information: Website URLs, brand names, competitor information, and custom prompts you submit
• Payment Information: Billing details processed securely through Stripe (we do not store full payment card details)
• Communications: Messages you send us through support channels

2.2 Information We Collect Automatically

• Usage Data: Pages viewed, features used, time spent on the platform
• Device Information: Browser type, operating system, IP address
• Cookies: We use essential cookies for authentication and preference storage

2.3 Information from Third Parties

• AI Provider Responses: Responses from Claude, ChatGPT, Perplexity, and Gemini
• Website Analysis: Publicly available information about websites you track

3. How We Use Your Information

We use your information to:

• Provide and maintain the Geonimo platform
• Process your queries across AI platforms (Claude, ChatGPT, Perplexity, Gemini)
• Analyze brand mentions and competitive intelligence
• Send you analytics reports and product updates
• Process payments and manage subscriptions
• Improve our services and develop new features
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. AI Traffic Tracker - Data Processing

When you use Geonimo's AI Traffic Tracker on your website, Geonimo acts as a data processor on your behalf to track visitors from AI platforms (ChatGPT, Claude, Perplexity, Google AI). As a data processor, we collect and process the following information about your website visitors:

4.1 Visitor Data We Process

• IP Address: Collected automatically for geolocation (country detection) purposes
• User Agent: Browser and device information to detect AI bots
• Page URL: The specific page visited on your website
• Referrer: The source URL (e.g., chat.openai.com) if visitor came from an AI platform
• Visit Type: Whether the visit was from an AI bot crawl or human referral traffic
• Timestamp: When the visit occurred
• Session Duration: Time spent on page (for referral traffic only)

4.2 How We Process This Data

• Store visitor data in our secure Supabase database
• Use IP addresses for country-level geolocation only (not for individual identification)
• Aggregate data to generate analytics and reports for you
• Retain raw visit data for 90 days, aggregated analytics indefinitely

4.3 Your Responsibilities as Data Controller

When you use our AI Traffic Tracker, you are the data controller and we are the data processor. You are responsible for:

• Legal Basis: Ensuring you have a legal basis to collect visitor data (e.g., legitimate interest for analytics)
• Privacy Notice: Updating your website's privacy policy to disclose use of Geonimo for AI traffic tracking
• Consent (if required): Obtaining visitor consent if required by applicable laws (e.g., GDPR in EU)
• Visitor Rights: Responding to visitor data subject requests (access, deletion, etc.)

4.4 Data Processing Agreement (DPA)

By using our AI Traffic Tracker, you accept our Data Processing Terms which include:

• We process visitor data only according to your instructions (through tracker configuration)
• We implement appropriate security measures to protect visitor data
• We assist you with data subject requests where technically feasible
• We delete or return visitor data upon termination of services (except where legally required to retain)
• We notify you of any data breaches affecting visitor data within 72 hours

4.5 Privacy-Friendly Features

• No Cookies: Our tracker does not set cookies on your visitors' devices
• Session-based: Deduplication uses sessionStorage only (cleared when browser closes)
• Minimal Data: We collect only what's necessary for AI traffic analytics
• No Cross-site Tracking: Data is isolated per website, no cross-domain tracking

4.6 Recommended Privacy Notice for Your Website

We recommend adding this disclosure to your privacy policy:

5. Data Sharing and Disclosure

We may share your information with:

• AI Service Providers: Anthropic (Claude), OpenAI (ChatGPT), Google (Gemini), Perplexity - to process your prompts
• Infrastructure Providers: Supabase (database), Vercel (hosting), Redis (caching)
• Payment Processors: Stripe for payment processing
• Analytics Tools: For product improvement (anonymized data only)
• Legal Requirements: When required by law or to protect our rights

We do not sell your personal information to third parties.

6. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (TLS/SSL) and at rest
• Secure authentication with Supabase Auth (PKCE flow)
• Regular security audits and updates
• Access controls and monitoring
• Secure API key storage

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specifically:

• Account Data: Until you delete your account
• Query Results: 30 days by default (configurable)
• Analytics Data: Aggregated data may be retained indefinitely
• Billing Records: 7 years for tax compliance

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your data in a machine-readable format
• Opt-out: Unsubscribe from marketing communications
• Withdraw Consent: Revoke consent for data processing

To exercise these rights, contact us at privacy@geonimo.com

9. Cookies and Tracking

We use cookies and similar technologies to:

• Essential Cookies: Required for authentication and security
• Preference Cookies: Remember your settings (e.g., dark mode)
• Analytics Cookies: Understand how you use our platform

You can control cookies through your browser settings. Note that disabling essential cookies may affect platform functionality.

10. Third-Party Visitor Identification

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email or LinkedIn profile. We (or service providers on our behalf) may then send communications and marketing to these emails.

Opt-Out Options:

• You may opt out of receiving this advertising by visiting https://app.retention.com/optout
• For GDPR compliance (EU visitors), you may also opt out at https://www.rb2b.com/rb2b-gdpr-opt-out

11. Children's Privacy

Geonimo is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by data protection authorities
• Encryption and security measures

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new policy on this page
• Updating the "Last updated" date
• Sending an email notification (for material changes)

Continued use of Geonimo after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

15. GDPR Compliance (EU Users)

For users in the European Union:

• Legal Basis: We process your data based on consent, contract performance, and legitimate interests
• Data Controller: Geonimo is the data controller for your personal information
• DPO: Contact our Data Protection Officer at dpo@geonimo.com
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority

15. CCPA Compliance (California Users)

For California residents, you have the right to:

• Know what personal information we collect, use, and share
• Delete your personal information
• Opt-out of the sale of your personal information (we do not sell data)
• Non-discrimination for exercising your privacy rights

To submit a request, email privacy@geonimo.com with "CCPA Request" in the subject line.