Privacy Policy

Last updated: 2026-07-21

1. Information We Collect

When you use GeoCheckTool, we collect the following information:

• Account information: A verified email address and, when you use Google sign-in, your name and profile picture
• Usage data: How you interact with the Service (pages visited, features used)
• Input data: Content you provide to the tool for processing
• Anonymous trial controls: An opaque browser identifier and a one-way HMAC of a daily network identifier, used only to enforce free-preview limits. We do not store the raw IP address in this quota table.

2. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Process your transactions
• Send important service notifications
• Improve our products and services

2A. AI Report Inputs and Outputs

AI visibility checks send the brand name, website URL, selected keywords, and optional brand facts to configured AI providers so the Service can generate measurement samples. Paid report rows may include answer excerpts, citation URLs returned by the provider, method labels, and timestamps for traceability.

We label API-probe results separately from login-state measurements. We do not treat payment records or inferred scores as proof that a consumer AI app recommended a brand.

3. Data Storage and Security

Your data is stored securely using industry-standard encryption. We use Supabase for database hosting with row-level security enabled. We do not sell your personal data to third parties.

4. Third-Party Services

We use the following third-party services:

• Google OAuth: For authentication
• Resend: To deliver requested one-time sign-in links from our verified mail subdomain
• Paddle: For payment processing, tax calculation, and transaction receipts
• Vercel: For hosting
• Supabase: For database services

5. Cookies

We use essential cookies for authentication, session management, and an opaque anonymous-trial identifier that prevents repeated free-preview abuse. We do not use that identifier for cross-site tracking. Advertising services, if enabled, may have their own consent and cookie requirements.

6. Your Rights (GDPR)

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to data processing

To exercise these rights, contact us at [email protected]. Signed-in customers may also use the persistent Help & operations request for access, export, correction, or deletion. Do not include credentials in the request.

7. Data Retention

We retain your account data as long as your account is active. Input data provided to the tool is processed in real-time and not permanently stored unless explicitly saved by you.

One-time email sign-in links expire after 15 minutes. We do not store the link token or requesting network address in plain text: both are stored as one-way keyed digests. Expired but unconsumed link records are removed after 7 days; consumed, failed, or superseded link records are removed after 30 days. These short-lived records are used only for authentication security, replay prevention, and abuse-rate limits.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page.

9. Contact

For questions about this Privacy Policy, contact us at [email protected].