Privacy Policy

When you create an account and use GeoBay, we collect:

• Account information: your email address and password (stored securely by Supabase Auth).
• Brand information: brand name, primary keyword, and domain name you submit for auditing.
• Usage data: audit job history, scores, and report results associated with your account.
• Behavioral analytics: page views, feature interactions, and session data collected via PostHog (see Section 5).

We use the information we collect to:

• Provide, operate, and improve the GeoBay audit service.
• Send transactional emails (account verification, password reset).
• Process payments and manage your subscription.
• Analyze product usage to improve the user experience.

We do not sell your personal information to third parties.

Running an audit requires sending data to third-party AI and search services. Specifically:

• OpenRouter — We send your brand name, domain, and probe questions to OpenRouter's API, which routes requests to AI models including OpenAI GPT and Google Gemini. OpenRouter's privacy policy applies to data processed through their platform.
• Perplexity (via OpenRouter) — Probe questions are sent to Perplexity's Sonar model for real-time web-grounded search responses.
• Serper — We send probe questions to Serper's Google Search API to retrieve Google AI Overview (AIO) results. Serper's privacy policy applies.

By using GeoBay, you consent to your brand and keyword data being transmitted to these services for the purpose of running your audit.

All payment processing is handled by Stripe. GeoBay does not store your credit card number or payment details. When you subscribe, your payment information is submitted directly to Stripe and governed by Stripe's Privacy Policy. We receive a customer ID and subscription status from Stripe to manage your access to the service.

We use PostHog for product analytics to understand how users interact with GeoBay. PostHog collects behavioral data such as page views, button clicks, and feature usage. This data is pseudonymized and used only to improve our product. You can opt out of behavioral tracking by enabling a Do Not Track header in your browser.

Your account data, brand information, and audit results are stored in Supabase, hosted on servers located in the United States. Supabase complies with SOC 2 Type II and GDPR requirements. Data is encrypted at rest and in transit.

We retain your account data and audit history for as long as your account is active. If you cancel your subscription, your data is retained for 90 days before being permanently deleted, unless you request earlier deletion.

You have the right to request deletion of all your data at any time. To do so, email us at support@geobay.ai with the subject line “Data Deletion Request”. We will permanently delete your account, email address, brand information, and all audit data within 14 business days and confirm completion by email.

You may also request a copy of your data or ask us to correct inaccurate information by contacting the same address.

GeoBay uses session cookies required for authentication (managed by Supabase Auth) and analytics cookies (PostHog). We do not use advertising or tracking cookies from third-party ad networks.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last updated” date at the top of this page. Your continued use of GeoBay after changes are posted constitutes acceptance of the updated policy.

Questions about this Privacy Policy? Contact us at support@geobay.ai.