1. Who we are

GeoFundamentals (“we”, “us”, “our”) operates the website at geofundamentals.com and provides GEO (Generative Engine Optimization) tools and services. For questions about this policy, contact us at hello@geofundamentals.com.

We are the data controller for personal data collected through this website. This policy applies to all visitors and customers of geofundamentals.com and is written in compliance with the UK GDPR and the Data Protection Act 2018.

2. What data we collect

We collect the following categories of personal data:

Contact information — your name and email address when you contact us, subscribe to citation alerts, or sign up for reports.
Tool inputs — URLs, brand names, keywords, and content you submit when using our free or paid tools. This data is processed to generate your analysis and is not stored beyond what is needed to deliver the service.
Payment information — we do not store card details. Payments are processed by Stripe, who act as an independent data controller under their own privacy policy.
Usage data — pages visited, time on site, referrer URL, and browser/device type via analytics software. This is collected in aggregate and does not identify you individually unless combined with other data.
Communications — records of any emails or enquiries you send us.

3. Legal basis for processing

We process your data on the following legal bases under UK GDPR:

Contract performance — to deliver the services you have paid for or signed up to, including running citation alert monitoring and sending your weekly report.
Legitimate interests — to analyse how our tools are used so we can improve them, and to send service-related communications to existing customers.
Consent — to send marketing emails or product updates. You can withdraw consent at any time by clicking “unsubscribe” in any email or by contacting us.
Legal obligation — where required to comply with applicable law.

4. How we use your data

To provide, operate, and improve our tools and services
To send you your GEO reports and citation alert digests
To respond to your enquiries and support requests
To send occasional product updates and GEO insights (with your consent)
To process payments for paid plans via Stripe
To detect and prevent fraud or abuse of our services
To comply with legal obligations

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

5. Third-party services

We use the following sub-processors who may handle your data on our behalf:

Vercel — website hosting and serverless functions (USA; EU-US Data Privacy Framework)
Supabase — database storage for subscriptions and citation results (EU region)
Resend — transactional email delivery
Stripe — payment processing (independent data controller)
Anthropic — content submitted to AI-powered tools may be processed by Anthropic's Claude API in accordance with their privacy policy
OpenAI — content submitted for citation checking may be processed by OpenAI in accordance with their privacy policy
Perplexity — keywords submitted for citation monitoring may be processed by Perplexity in accordance with their privacy policy

We take reasonable steps to ensure all third-party processors handle data securely and in compliance with applicable data protection law.

6. Cookies and analytics

We use analytics software to understand how visitors use our site. This may involve first-party or third-party cookies. We do not use advertising or tracking cookies for retargeting purposes. You can disable cookies in your browser settings; this will not prevent you from using our tools but may affect some site functionality.

7. Data retention

Citation alert subscriptions and results — retained while your subscription is active and for 12 months after cancellation, then deleted.
Email addresses — retained until you unsubscribe or request deletion.
Tool inputs (URLs, content) — not stored beyond the duration of a single session unless you have an active paid subscription.
Payment records — retained for 7 years as required by HMRC financial record-keeping obligations.
Support communications — retained for 2 years after the conversation closes.

8. International transfers

Some of our sub-processors (including Vercel and the AI API providers) may process data outside the UK or EEA. Where this occurs, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA), Standard Contractual Clauses, or adequacy decisions.

9. Your rights

Under UK GDPR you have the right to:

Access — request a copy of the personal data we hold about you
Rectification — ask us to correct inaccurate or incomplete data
Erasure — request deletion of your personal data (“right to be forgotten”)
Restriction — ask us to restrict processing of your data in certain circumstances
Portability — receive your data in a structured, machine-readable format
Object — object to processing based on legitimate interests or for direct marketing
Withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, email us at hello@geofundamentals.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, or disclosure. These include encrypted connections (HTTPS), access controls on our database, and use of security-vetted sub-processors. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

11. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email to active subscribers. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the site after a change constitutes acceptance of the updated policy.

Privacy Policy