Privacy Policy

Overview

GeoMapEngine ("we", "us", "the Service") is a local SEO automation platform operated at geomapengine.com. This Privacy Policy explains what information we collect when you use the Service — the website, dashboard, browser script, and API — why we collect it, how it is stored and shared, and the choices you have.

By using the Service you consent to the practices described here. If you do not agree, please do not use the Service.

1. Information We Collect

Account & billing information

• Name, email address, company name, and password hash when you register
• Billing details processed by Stripe — we never see or store full card numbers
• Team member invitations and workspace roles you configure

Business & location data

• Business name, address, phone, website (NAP data) you enter or import
• Business HQ coordinates, targeted cities/zones, and campaign configurations
• Content you write, upload, or generate — posts, prompts, media files, landing-page copy

Usage & technical data

• Log data (IP address, browser, pages visited, actions taken), used for security and product analytics
• Rank scan results, published post history, and report metrics generated by the Service

3. How We Use Information

• Provide, operate, and maintain the Service (scans, publishing, hydration, reports)
• Process billing and manage your subscription and entitlements
• Send transactional email (receipts, ticket replies, scan/report notifications)
• Optional product broadcasts — every message carries an unsubscribe link
• Detect abuse, secure accounts, and enforce plan limits
• Improve the product using aggregated, non-identifying usage patterns

We do not sell your personal information. Ever.

4. Third-Party Processors

A small set of vetted providers process data strictly to run the Service:

• Google APIs — Business Profile management and performance data, under Google's terms
• Stripe — payment processing (card details never touch our servers)
• AI providers — post copy and image generation; prompts and business context are sent for generation only
• Rank-data providers — geo-coordinates + keywords are queried to compute grid rankings; no personal user data is sent
• Map tile providers (OpenStreetMap, optionally MapTiler) — map imagery for the rank-grid view
• Hosting/email infrastructure — servers, queues, and transactional delivery

Each provider is bound by its own data-processing terms and may only process data as needed to deliver its service to us.

5. AI-Generated Content

Prompts, business context, and knowledge-base material you provide are sent to the configured AI provider to draft posts, landing copy, and recommendations. Generated output is stored in your workspace until you delete it. You are responsible for reviewing AI output before publishing (see our Terms).

6. Cookies & Tracking

We use essential cookies for authentication and session security, plus lightweight first-party analytics. The optional GeoMapEngine script installed on your websites does not set visitor cookies or track your visitors — it hydrates page content server-side. We do not run third-party advertising trackers.

7. Data Retention & Deletion

Cancel anytime

You can cancel your subscription at any time from Billing — no calls, no lock-in, no cancellation fees. Your plan stays active until the paid period ends, and your data remains exportable throughout.

• Account data is retained while your account is active
• Deleting a business removes its campaigns, zones, and unpublished drafts
• Disconnecting Google deletes stored OAuth tokens immediately
• Published GBP posts remain on Google until removed there — we can't unpublish content already live on third-party platforms
• On account deletion we erase personal data within 30 days. Card details are never stored on our servers — Stripe handles and deletes those per its own policy. The only exception is the minimal transaction record (invoice number, date, amount, tax) that tax law legally obligates us to retain — no profile data, no content, no identifiers beyond what the ledger requires

8. Security

HTTPS everywhere, encrypted credential storage (OAuth tokens and API keys are encrypted at rest), hashed passwords, queue isolation between tenants, and least-privilege access. No system is perfectly secure — if we ever become aware of a breach affecting your data, we will notify you promptly.

9. Your Rights & Choices

Depending on your jurisdiction (including GDPR and CCPA), you may have the right to:

• Access — request a copy of the personal data we hold about you
• Export — download your locations, posts, and reports in CSV/PDF from the workspace
• Rectify — correct inaccurate account or business data
• Delete — request deletion of your account and associated personal data
• Object / restrict — opt out of broadcasts, revoke Google access, or restrict processing

Exercise any right by emailing [email protected] — we respond within 30 days.

10. International Transfers

Data may be processed in the United States and other jurisdictions where our processors operate. By using the Service you consent to these transfers; we rely on contractual safeguards provided by our processors.

11. Children's Privacy

The Service is a business tool, not directed at children under 16, and we do not knowingly collect their data. Contact us to remove any such information.

12. Changes to This Policy

We may update this policy as the Service evolves. Material changes are announced in-app or by email at least 14 days before taking effect; the "last updated" date above always reflects the current version.