LogoBrandGeo
  • Features
  • Pricing
  • Blog
  • Docs
  • About
LogoBrandGeo

Monitor how ChatGPT, Gemini and Grok talk about your brand.

Product
  • Features
  • Pricing
  • FAQ
Resources
  • Blog
  • Documentation
Company
  • About
  • Contact
Legal
  • Cookie Policy
  • Privacy Policy
  • Terms of Service
© 2026 BrandGeo. All Rights Reserved.

Privacy Policy

How BrandGeo collects, uses, stores, and deletes personal data

2026/08/06

Review required: Replace the bracketed operator, jurisdiction, subprocessors, and backup-retention fields before enabling public registration. Confirm that the domain-based contact addresses below receive mail. This document is product and engineering disclosure material, not legal advice.

1. Controller and contact

BrandGeo is operated by [legal operator name], with its registered address at [registered address]. Privacy questions and data requests should be sent to privacy@geobrand.co. The effective date of this version is 6 August 2026.

2. Data we process

Depending on how you use the service, we may process:

  • Account data, such as name, email address, authentication records, policy acceptance, and sessions.
  • Workspace data, such as brand names, websites, countries, languages, prompts, competitors, project settings, and monitoring schedules.
  • GEO results, including sampled model responses, citations, parsed metrics, errors, reports, exports, and usage/cost records.
  • Billing data, such as provider customer, subscription, price, payment status, and webhook identifiers. We do not store full payment-card numbers.
  • Communications and delivery data, such as support requests, transactional email status, suppression, bounce, and complaint events.
  • Security and operational data, such as IP address, user agent, request metadata, audit events, rate-limit records, and worker or queue health data.

Anonymous checker requests may also create a short-lived device identifier, preview token hash, website inspection data, and an expiring sample report. Do not submit personal or confidential information in prompts or websites unless you are authorized to do so.

3. Purposes and legal basis

We use this data to provide the service and requested reports, authenticate users, enforce plans and usage limits, process payments, send transactional messages, prevent abuse, secure the service, provide support, troubleshoot failures, and measure product performance. Marketing email is separate from transactional email and requires a separate opt-in where required by law.

The applicable legal basis may include performance of a contract, legitimate interests in security and service operation, compliance with legal obligations, and consent where we request it. The operator must confirm the final legal bases and jurisdictional wording before publication.

4. Providers and international transfers

We use service providers to host data, send email, process payments, run model requests, provide object storage, and monitor operations. The production subprocessor list, processing locations, contracts, and any transfer safeguards must be published at [subprocessor list URL] before production registration.

Third-party model outputs are samples and may be processed outside your country. We do not claim that a model response represents all users, search results, or an official ranking.

5. Retention and deletion

We retain data only as long as needed for the purposes above, contractual service, security, dispute handling, and legal obligations. Anonymous previews and report downloads expire according to the product's configured TTL. Account deletion pauses new work, handles active subscription state, revokes sessions, and deletes or anonymizes application data subject to legally required billing, audit, and security records.

Backups may retain deleted data until the normal rotation completes. The production backup schedule and maximum deletion delay are [backup retention period] and must be confirmed before publication. We do not promise immediate physical erasure from every backup copy.

6. Your choices and rights

Subject to applicable law, you may request access, correction, export, deletion, restriction, objection, or withdrawal of consent. Contact privacy@geobrand.co and provide enough information for us to verify the request. Account exports are not necessarily the same as a legal data-subject request; we may need to review logs, email records, and backup impact separately.

You can unsubscribe from marketing email at any time. Transactional messages needed for security, account recovery, billing, or requested reports may still be sent.

7. Security

We use access controls, encrypted secrets, signed webhooks, rate limits, tenant authorization, audit records, and encrypted transport. No online service can promise absolute security. Suspected incidents should be reported to security@geobrand.co.

8. Cookies and analytics

The service uses necessary session and security cookies. Optional analytics or marketing technologies are enabled only according to the configured product and applicable consent requirements. See the Cookie Notice for details.

9. Children and prohibited data

The service is not directed to children under the minimum age required by applicable law. Do not submit passwords, payment-card data, government identifiers, health data, or other sensitive personal data in prompts, websites, or support messages unless the service explicitly supports it and you have a lawful basis.

10. Changes and contact

We may update this policy when the service, providers, or legal requirements change. We will publish the new version and update its effective date. For questions or requests, contact privacy@geobrand.co or visit Contact.