Geostar Privacy Policy

Effective Date: 3/17/2025

Last Updated: 7/22/2026

Geostar ("we," "us," or "our") values your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, share, and protect your data when you use our website, services, and application.

1. Information We Collect

We collect various types of data to enhance our services and provide a better experience. This includes:

Website visits – Information collected via cookies and tracking technologies.
Contact and audit requests – Name, email, phone number, website, referral source, campaign parameters, and any information you submit through forms.
API usage – Data related to how you interact with our APIs.
Account information – Name, email, payment details (processed via Stripe), and any other information provided upon registration.
Customer interactions – Data related to customer service requests and interactions within the app.
Usage data – Information on how you interact with our platform, including features used, session duration, and preferences.

We retain personal information only for as long as reasonably necessary to provide our services, maintain business and legal records, comply with contractual and legal obligations, resolve disputes, and enforce agreements. Customer data processed on behalf of a customer is returned or deleted according to the applicable agreement or data-processing addendum. Following account deletion, remaining active-system data is generally deleted within 90 days, subject to legal retention obligations and backup copies that expire through normal rotation.

2. How we use your data

We process your data for the following purposes:

Improving AI visibility – Helping clients optimize their presence in generative search results.
AI-assisted service delivery – We may use approved artificial-intelligence service providers to process information as necessary to research, analyze, draft, review, and deliver our services, unless an applicable customer agreement restricts that use. We do not use customer-provided confidential information or personal data to train or improve shared or proprietary AI models unless the customer expressly authorizes that use in writing. Publicly available content may be processed for research, analysis, testing, and service delivery. AI-assisted work remains subject to human review where appropriate.
Service improvement – Analyzing usage trends to optimize features.
Account management and customer support – Providing assistance and resolving issues.
Analytics, attribution, security, and fraud prevention – Monitoring platform performance, understanding traffic sources, measuring conversions, preventing misuse, and ensuring security.
Legal compliance – Ensuring adherence to GDPR, CCPA, and other applicable laws.

3. Sharing of Data with Third Parties

We do not sell or share user data with third parties, except when necessary to deliver our services:

API partners – We share data with third-party services strictly for functionality within the platform.
AI service providers – We may share information with approved AI service providers when necessary to deliver our services. Where non-public customer information is involved, we use business or API offerings with appropriate contractual, confidentiality, security, and data-use protections.
Payment processing via Stripe – We use Stripe for handling payments. Personally identifiable information related to billing is processed in accordance with Stripe's Privacy Policy.
Email and form processing via Postmark – We use Postmark to process and deliver contact, audit, and support messages.
Analytics and attribution providers – We use providers such as Google Analytics, PostHog, Ahrefs Analytics, Polynomic, and RB2B to understand website performance, attribution, and qualified business interest.

We do not share user data for advertising or marketing purposes outside of Geostar.

4. Data Security Measures

We take data security seriously and implement industry best practices, including:

Encryption at rest – Ensuring stored data remains protected.
Access controls – Restricting access to authorized personnel only.
Up-to-date security protocols – Using best-in-class measures for web applications.

Despite these efforts, no system can guarantee absolute security. Users should take precautions to safeguard their accounts.

5. Your Rights Under GDPR and CCPA

Depending on your location, you may have specific rights over your data:

For GDPR Users (EU Residents):

Right to Access – Request a copy of your personal data.
Right to Rectification – Correct inaccurate or incomplete data.
Right to Erasure ("Right to Be Forgotten") – Request deletion of your data, except where retention is legally required.
Right to Restrict Processing – Limit how we use your data in certain cases.
Right to Data Portability – Obtain your data in a structured, commonly used format.

For CCPA Users (California Residents):

Right to Know – Request details about the personal data we collect and how it is used.
Right to Delete – Ask us to delete personal information we have collected.
Right to Opt-Out – Request that your data not be sold (Geostar does not sell personal data).
Right to Non-Discrimination – We will not treat users unfairly for exercising their rights.

To exercise your rights under GDPR or CCPA, please contact us at hello@geostar.ai.

6. Data Retention Policy

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If significant changes occur, we will notify users via email or platform notifications. The "Last Updated" date at the top reflects the most recent revision.

8. Contact Information

For privacy-related inquiries, please contact us at:

📧 Email: hello@geostar.ai
🌐 Website: geostar.ai