Legal

Privacy Policy

Last updated: November 11, 2026

This policy explains what GEO.SEO collects, why, who it's shared with, and the choices you have. It covers business owners who use GEO.SEO and the customers of those businesses who use a GEO.SEO review page.

What we collect from business owners

• Account: your email address and login (handled by our login provider), and the business you set up.
• Business details you give us: name, address, phone, services, service areas, report email, and any extra facts you add (such as hours, licences or warranties).
• Public website data: when you run an audit or use GEO.SEO, we read the publicly available pages of your website, and the public pages of competitors' websites for comparison.
• Public search data: where your business appears in Google search and Google Maps results, which directories list it, and which public web pages mention it.
• Connected accounts, only if you connect them: your website platform (WordPress application password or Wix authorization, stored encrypted) and the Google data described below.
• Billing: payments are processed by Stripe. We receive your plan and subscription status, never your full card number.
• Technical data: a session cookie that keeps you signed in and links you to your business, and standard server logs. We don't use advertising or analytics trackers.

Google user data

If you choose Connect Google, GEO.SEO asks for read-only access to Google Search Console (webmasters.readonly) and Google Analytics (analytics.readonly), plus your Google account email to show which account is connected. We read, for your own website only:

• Search Console: clicks, impressions, average position, and the search phrases and pages they relate to;
• Google Analytics: visits and key events from Google search, and visits referred by AI assistants (for example ChatGPT or Perplexity), as totals by day and source.

We use this data only to show your results in your dashboard and reports, and to suggest better page titles and descriptions. For that last feature, the top search phrases for a page are sent to our AI writing provider together with your business details; they are used to write your suggestions and nothing else. We can't change anything in your Google accounts.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't sell Google data, use it for advertising, let people read it except as needed to run or secure the service or as required by law, or use it to train AI models. You can disconnect Google in your dashboard (which revokes our access) or at any time from your Google Account settings.

When Google Business Profile access becomes available, the same rules will apply to that data, and you'll choose whether to connect it.

Customers who use a review page

Some businesses use GEO.SEO's "How did we do?" page. If you use one, we record which button you choose (to give the business totals). If you send the business a private message, we store your message and any name or contact details you choose to give, and email them to that business so they can follow up. Google reviews you leave are posted on Google, not through GEO.SEO. The business is responsible for how it uses your message; contact it, or us, to have a message deleted.

How we use information

To run the service: auditing and improving your website and online presence, publishing changes you allow, drafting pages and titles for your approval, measuring search and AI visibility, sending reports and service emails, billing, support, and keeping the service secure. We don't sell personal information or use it for advertising.

Service providers

We share data only with providers that run parts of the service for us, under terms that limit their use of it:

• Netlify — hosting and data storage;
• Supabase — logins and search-tracking history;
• Stripe — payments;
• Resend — email;
• Serper — Google search and Maps results (we send search phrases such as your trade, business name and city);
• Perplexity — AI writing and AI-visibility checks, using models from Anthropic and others (we send your business details, page titles and, where relevant, search phrases);
• Google — page speed checks (your website address) and the Google APIs you connect.

We may also disclose information if required by law or to protect the service and its users.

Security & retention

Passwords and access tokens for connected accounts are encrypted and only used on our servers. We keep your data while your account is active. When you delete your account, we cancel your subscription and delete your business data, tracking history, review-page messages and login from our systems right away; copies in our providers' logs or backups expire on their own schedules. Stripe keeps billing records as the law requires.

Your choices

• Download your data or delete your account from the "Your data" section of your dashboard.
• Correct your business details or turn report emails off in your dashboard, or use the link at the bottom of any report email.
• Disconnect Google or your website platform at any time; undo any change GEO.SEO made.

Children

GEO.SEO is a service for businesses and isn't directed at children under 16.

Changes

If we change this policy in a way that matters, we'll update the date above and tell account holders by email before the change applies.

Contact

Use the contact form on this site for privacy questions or requests.