Privacy Policy

Who is responsible for your data

Geolytic.app operates https://geolytic.app and is the data controller for the personal data described here: we decide why and how it is processed. Contact: hello@geolytic.app.

What we collect and why

• Account data (email address, login credentials, Google sign-in profile basics): to create and secure your account. Legal basis: performance of a contract.
• Audit data (submitted URLs, public pages fetched, findings, scores, branding details you enter for reports): to provide the service. Legal basis: performance of a contract.
• Free audit tracking (a random browser identifier and a one-way hash of your IP address; raw IP is not stored for this): to enforce free audit limits and prevent abuse. Legal basis: legitimate interests.
• Technical and usage data (IP address, device and browser information, pages visited, logs): for security, fraud prevention and improving the service. Legal basis: legitimate interests.
• Support messages you send us: to answer you. Legal basis: legitimate interests or contract.
• Subscription status (plan, billing period, subscription identifiers received from Paddle): to apply your plan limits. Legal basis: performance of a contract.

Card and payment details are collected by Paddle, not by us.

Who we share data with

• Paddle.com, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing.
• Service providers that host our application, database and authentication, and an AI model provider that processes audit findings and page evidence to write recommendations.
• Professional advisers such as legal and accounting advisers.
• Authorities where required by law.

We do not sell personal data.

International transfers

Our providers may process data in other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

How long we keep data

Account and audit data are kept while your account is active and deleted when you delete your account or ask us to. Free audit tracking records and logs are kept only as long as needed for abuse prevention and security. Records we must keep by law are retained for the required period. Data no longer needed is deleted or anonymised.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or port your data, to object to processing, and to withdraw consent at any time. You can also complain to your local data protection authority. Email hello@geolytic.app to exercise these rights; we aim to respond within one month.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls that restrict audit data to its owner, and hashed passwords handled by our authentication provider.

Cookies and local storage

We use only essential browser storage: to keep you signed in, remember your theme and identify your browser for free audit limits. We do not use advertising cookies. You can clear this storage in your browser settings, which signs you out.