Privacy Policy

Last updated: June 20, 2026

We take the protection of your data seriously. Below, we explain what personal data we process when you use the GEO Audit platform (geo-audit.io, app.geo-audit.io), for what purposes, and on what legal basis.

1. Data controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

2. General information and legal bases

We process personal data only to the extent necessary to provide our platform or where another legal basis applies. The applicable legal bases include, in particular:

• Article 6(1)(b) GDPR (performance of a contract or pre-contractual measures)
• Article 6(1)(f) GDPR (legitimate interest in providing a secure and functional online service)
• Article 6(1)(a) GDPR (consent, where obtained)
• Article 6(1)(c) GDPR (legal obligation, such as statutory commercial and tax record retention requirements)

3. Hosting

We host GEO Audit with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in Germany.

• Data processed: all data collected through the platform, particularly IP addresses, metadata and communications data, and account and contract data.
• Legal basis: Article 6(1)(f) GDPR (secure and efficient provision of the service).

4. Server log files

When you visit our pages, information transmitted by your browser is collected automatically (such as your IP address, the date and time of the request, the page accessed, the amount of data transferred, browser type and version, and operating system). This data is used to provide the service technically, maintain stability and security, and is deleted after a short period.

Legal basis: Article 6(1)(f) GDPR.

5. Registration and user accounts

A user account is required to use the platform. When you register, we process the information you provide, particularly your email address, name, company name, and an encrypted, stored password. When you use the service, we also store the domains you add, GEO analyses you perform, results, and settings.

• Purpose: Provision of your account, authentication, and delivery of the contractually agreed services.
• Legal basis: Article 6(1)(b) GDPR.

6. Sign in with Google (Google OAuth)

You may optionally sign in using your Google account (Google OAuth 2.0). This is voluntary and replaces signing in with an email address and password.

Permissions used (scopes):

• openid, email, profile

Data received from Google and processed:

• Email address, name, profile picture, and unique Google account ID (sub)

Purpose of using this data:

• The data is used exclusively to create and sign in to your user account and to manage that account.

Handling Google user data (Limited Use):

• Google user data is not sold, rented, or shared with third parties except where necessary to provide the service, for security reasons, or to comply with legal obligations.
• Google user data is not used for advertising.
• Google user data is not used to train AI or machine-learning models.
• No human access occurs except with your express consent, to ensure security, to comply with applicable law, or where the data is used in aggregated and anonymized form for internal operational purposes.

Information received through Google APIs is used and shared in accordance with the Google API Services User Data Policy, including its Limited Use requirements.

Revoking access: You can revoke our app’s access at any time at https://myaccount.google.com/permissions. If you also want the link removed from your GEO Audit account, email support@geo-audit.io, and we will delete your Google account ID and profile picture.

Legal basis: Article 6(1)(b) GDPR (performance of the contract to provide sign-in) and Article 6(1)(a) GDPR (consent).

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

7. Payment processing (Stripe)

We use the payment provider Stripe to process paid subscriptions. For customers within the EU, the provider is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland.

• Data processed: payment and billing information (such as name, email address, payment method, and amount). Full credit card information is processed exclusively by Stripe and is not stored on our servers.
• Purpose: Payment processing and subscription management.
• Legal basis: Article 6(1)(b) GDPR.
• Further information: https://stripe.com/de/privacy

8. Performing GEO analyses (AI services)

The platform’s core function is to analyze a domain’s visibility in AI-powered search and answer systems. To do this, we send automatically generated analysis queries to various AI and data providers and evaluate their responses.

Service providers used:

• Google Gemini API (Google), connected directly
• DataForSEO OÜ, Tallinn, Estonia: through DataForSEO, we query ChatGPT (OpenAI), Claude (Anthropic), and Perplexity (Perplexity AI), all based in the United States, and run a Google search for Google AI Overviews. We have no direct contractual relationship with OpenAI, Anthropic, or Perplexity.

The services receive the analysis queries (prompts), your company name, industry, location, and language, your website URL, and publicly accessible content from your website (for example, page titles, headings, and page text). We do not send your email address, name, payment data, or password to these services. The following may still be personal data: your company name if it contains your name, content from your website (for example, names on a team page), and the AI answers themselves.

• Purpose: To perform the GEO analysis you requested.
• Legal basis: Article 6(1)(b) GDPR.

9. Email delivery

To send system and contract-related emails (for example, registration confirmations and password resets), we use the email service of STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Emails are sent from noreply@geo-audit.io. Invoices and payment receipts are issued by Stripe (Section 7).

• Legal basis: Article 6(1)(b) GDPR (contract-related communications) and Article 6(1)(f) GDPR (operation of the email infrastructure).

10. Contact, support, and consulting inquiries

If you contact us (such as by email at support@geo-audit.io), we process the data you provide to handle your request.

• Legal basis: Article 6(1)(b) GDPR (pre-contractual/contractual communications) or Article 6(1)(f) GDPR.

You can also request a no-obligation consultation through the GEO optimization inquiry form. We process the information you provide, particularly your first name, last name, email address, phone number, domain or website, company name, and details of your goals and requested services.

• Purpose: To process and respond to your inquiry and contact you by email or phone to provide a suitable offer.
• Recipient: The inquiry is forwarded to and handled by Webnity X (Niklas Hass).
• Legal basis: Article 6(1)(b) GDPR (pre-contractual measures) and Article 6(1)(a) GDPR (your consent given through the checkbox in the form).
• By submitting the inquiry, you consent to being contacted by email and phone to address your request. You may withdraw this consent at any time with effect for the future by emailing support@geo-audit.io or info@webnity-x.com.

10a. Third-party content and live chat in the platform

When you open certain pages of the platform, your browser loads content directly from third-party servers. These providers necessarily receive your IP address, browser information, and the address of the page you are viewing: fonts served through Google Fonts (Google), website icons (favicons) through Google’s favicon service for the domains displayed, and code libraries from the content delivery networks unpkg, jsDelivr, and cdnjs (Cloudflare). The consultation form on the website also displays your website’s favicon through Google’s favicon service while you type it. Legal basis: Art. 6(1)(f) GDPR, our interest in consistent and fast presentation.

The platform offers a live chat provided by Chatwoot, Inc., USA. The chat loads only after you expressly allow it, and after that each time you open the platform. Your IP address, browser and device information, the page you are on, and your chat messages are sent to Chatwoot; Chatwoot stores identifiers in your browser. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw your consent at any time with effect for the future by clearing the site data for app.geo-audit.io in your browser or by emailing support@geo-audit.io.

11. Cookies and local storage

We use technically necessary cookies and similar technologies (such as browser local storage) that are required to operate the platform, for example to maintain your signed-in session and temporarily store onboarding information.

• Legal basis: Article 6(1)(f) GDPR and/or Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG) (technically necessary storage).

Where audience measurement or conversion tracking (such as Google Ads conversion tracking) is used on the website, it is carried out only with your consent (Article 6(1)(a) GDPR, Section 25(1) TDDDG), which you give through the cookie banner and may withdraw at any time.

12. Retention and deletion

We retain personal data only as long as necessary for the purposes described above or as required by statutory retention obligations (particularly under commercial and tax law).

You can delete your user account at any time in your account settings. When you delete it, your account and analysis data are removed. For technical reasons, to prevent abuse, and to fulfill legal obligations, certain data (such as quota-management or invoice data) may be retained for the period necessary.

13. Transfers to third countries

Some of our service providers process data in the United States, in particular Google, Stripe, Chatwoot, and, through DataForSEO, OpenAI, Anthropic, and Perplexity. Google LLC and Stripe, LLC are certified under the EU-U.S. Data Privacy Framework; you can verify certifications at https://www.dataprivacyframework.gov/list.

14. Your rights

Under applicable law, you have the right at any time to:

• Access your personal data (Article 15 GDPR)
• Rectify your personal data (Article 16 GDPR)
• Erase your personal data (Article 17 GDPR)
• Restrict processing (Article 18 GDPR)
• Data portability (Article 20 GDPR)
• Object to processing based on legitimate interests (Article 21 GDPR)

You can withdraw consent you have given at any time with effect for the future.

To exercise your rights, simply email support@geo-audit.io.

You also have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR). In particular, the competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

15. Data security

For security, we use TLS encryption (indicated by “https://” and the lock icon in your browser) and other technical and organizational measures to protect your data against unauthorized access.

16. Updates and changes

This Privacy Policy is current as of the date stated above. We will update it whenever our data processing practices or legal requirements change.