Privacy Policy — Geocatch AI

1. Who is the controller

Michal Stumpf, operating the Geocatch AI service, is the data controller responsible for your personal data. You can reach us at info@geopulsai.com.

2. What personal data we collect

Account data: name, email address, hashed password or OAuth identifier, company name.
Service data: domains you audit, keywords, competitors, workspaces and the audit results we generate for you.
Support data: messages you send us and their context.
Usage and device data: IP address, browser, device type, log timestamps, pages viewed and interactions, collected through standard server logs and product analytics.
Cookies: see section 9.

Payment card data is collected and processed by Paddle directly; we never see or store your full card number.

3. Why we use it and on what legal basis

To provide the Service (account creation, running audits, displaying results) — performance of our contract with you.
To bill you via Paddle — performance of our contract and legal obligation (tax/invoicing).
To secure the Service and prevent fraud or abuse — our legitimate interest.
To improve the Service through aggregated analytics — our legitimate interest.
To send transactional emails (sign-up confirmation, billing receipts, security alerts) — performance of our contract.
To send marketing emails, where applicable — your consent, which you can withdraw at any time.
To comply with law — legal obligation.

4. Who we share it with

We share personal data only with the categories of recipients listed below:

Paddle.com Market Limited — our Merchant of Record. Paddle handles payments, subscription management, tax compliance, invoicing, and customer service inquiries related to billing.
Hosting and infrastructure providers that run the application, database, file storage and edge functions.
Email delivery providers used to send transactional and (where applicable) marketing email.
AI and analytics providers that process content you submit in order to generate audit results.
Professional advisers (legal, accounting) where reasonably necessary.
Public authorities where we are required to disclose information by law.

These recipients act either as our processors under contract or as independent controllers (e.g. Paddle for payment processing).

5. International transfers

Some of our service providers are located outside the European Economic Area or the United Kingdom. Where we transfer personal data outside these areas, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

6. How long we keep it

We keep account and service data for as long as your account is active and for a reasonable period afterwards to handle disputes, comply with legal obligations and enforce our agreements. Billing records are kept for the period required by tax law. Server logs are kept for a short retention period for security and debugging. When data is no longer needed, it is deleted or anonymised.

7. Your rights

Subject to applicable law, you have the right to access, rectify or erase your personal data, to restrict or object to processing, to data portability, and to withdraw any consent you have given. You also have the right to lodge a complaint with your local data protection supervisory authority. To exercise any of these rights, contact info@geopulsai.com; we respond within one month.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, hashed passwords, and regular review of our infrastructure. No system can be guaranteed 100% secure; please use a strong password and keep your credentials confidential.

9. Cookies

We use essential cookies that are required to keep you signed in and to operate the Service. We may also use analytics cookies to understand how the Service is used. You can manage cookies through your browser settings; disabling essential cookies will prevent the Service from functioning.

10. Changes

We may update this Privacy Notice from time to time. Material changes will be notified by email or in-app.

11. Contact

For any privacy question or request, email info@geopulsai.com.