Privacy Policy

1. Introduction

DSS MEDIA, LLC d/b/a GEOall ("GEOall," "we," "us") respects your privacy. This Privacy Policy explains what personal data we collect when you use geoall.com and the GEOall platform, why we use it, who processes it for us, how long we keep it, and the rights you have. DSS MEDIA, LLC is the controller of the personal data described here.

2. Information We Collect

• Account information: your name and email address when you register, or the name and email address your Google account shares with us when you sign in with Google.
• Payment information: payments are processed by Stripe. We never receive or store full card numbers; Stripe collects your payment method and billing details under its own privacy policy, and we keep a record of your subscriptions and purchases.
• Service data: the websites you scan, the brand name and city you confirm for a scan, the buyer questions and competitors you track in GEOall Pro, and the reports and scores we generate from them.
• Support and community content: support tickets and messages you send us, and comments you post on the blog.
• Technical data: our hosting providers process IP addresses and browser information in their server logs to run and secure the service. GEOall itself stores IP addresses only as one-way hashes, used to rate-limit free scans and forms, and deletes them after 24 hours. When the bot check on the free scan is active, Cloudflare Turnstile processes browser signals to tell people from bots.

3. How We Use Your Information and Our Legal Bases

We use personal data only for these purposes. For visitors in the EU, EEA and UK, the legal basis under the GDPR is shown for each:

• To provide the service you ask for (scans, audits, Pro tracking, your account, support replies) — performance of a contract.
• To process payments and keep billing records — performance of a contract and compliance with legal obligations (for example tax records).
• To keep the service secure and prevent abuse (rate limits, bot checks, fraud prevention) — our legitimate interest in protecting the service and our costs.
• To send service emails (audit reports, ticket replies, and for Pro subscribers the weekly visibility summary and score-drop alerts, which you can turn off in your dashboard) — performance of a contract.
• To improve the service using aggregated, non-identifying usage information — our legitimate interest.
• To publish public leaderboards about companies, based on how AI engines answer buying questions — our legitimate interest. This concerns businesses; where a business is named after a person (for example a law firm), you can ask us to correct or review it (see section 9).

We do not sell personal data, and we do not use it for advertising.

4. Who Processes Data for Us

We share data only with the service providers we need to run GEOall, under agreements that limit their use of it:

• Stripe — payment processing and billing.
• Vercel — website hosting and server infrastructure.
• Supabase — database, authentication and file storage.
• Resend — sending transactional and account emails.
• Google — Google sign-in (if you choose it) and the Gemini API.
• OpenAI — the ChatGPT answer engine (via the OpenAI API) and the model that extracts brand names from AI answers.
• Perplexity — the Perplexity answer engine (via the Sonar API).
• Cloudflare — the Turnstile bot check on the free scan.
• Inngest — background job processing (scans, audits and weekly tracking runs).

What we send to the AI engines is the buyer question and, for scans, the brand, website and city being tested. We do not send your name, email address or account details to them.

5. Cookies and Similar Technologies

GEOall uses only cookies that are strictly necessary for the service. We do not use analytics, advertising or tracking cookies.

• Sign-in session cookies (Supabase) keep you logged in.
• A sign-in flow cookie (up to 15 minutes) remembers where to return you after Google sign-in.
• A password-reset cookie (up to 1 hour) completes a password reset.

The site also stores a few preferences in your browser's local or session storage, which never leave your device: whether you dismissed the announcement bar, an unsent blog comment draft, and whether you already viewed a blog post in this session (so a view is counted once).

6. Data Retention

• Account data is kept while your account exists and deleted when you ask us to delete your account.
• Free website scans are deleted automatically 12 months after the scan.
• Paid audit reports are kept so your permanent report link keeps working, until you ask us to delete them.
• Pro tracking data (your questions, competitors and results) is kept while your account exists.
• Support tickets are deleted automatically 24 months after the ticket was resolved or closed and last updated.
• Rate-limiting hashes of IP addresses are deleted after 24 hours.
• Billing records are kept for as long as tax and accounting law requires.

7. International Transfers

GEOall is operated by a US company, and our service providers process data mainly in the United States. When personal data of people in the EU, EEA or UK is transferred there, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or, where a provider is certified, the EU-U.S. Data Privacy Framework and its UK extension.

8. Data Security

We use industry-standard technical and organizational measures, including encryption in transit, row-level access control in our database, role-based admin access and secure authentication, to protect personal data from unauthorized access or loss.

9. Your Rights

Depending on where you live, you have the right to access the personal data we hold about you, correct it, delete it, receive it in a portable format, restrict or object to its processing (including processing based on our legitimate interests), and withdraw any consent you have given. People in the EU, EEA and UK can also complain to their data protection authority — in Ireland, the Data Protection Commission.

California residents (CCPA/CPRA): you have the right to know what personal information we collect and how we use and disclose it (as described in this policy), to request a copy of it, to have it corrected or deleted, and not to be discriminated against for exercising these rights. We do not sell personal information or share it for cross-context behavioral advertising, and we do not use or disclose sensitive personal information beyond what is needed to provide the service. You can make a request yourself or through an authorized agent; we will verify the request with the email address on the account.

To exercise a right, email info@geoall.com from the address on your account, or use the support form. We reply within 30 days. You can cancel a subscription at any time from your dashboard. If you believe a public leaderboard or company page contains wrong information, use the "Dispute or correct a ranking" topic on the support page.

10. Children

GEOall is a business service and is not directed at children under 16. We do not knowingly collect their personal data.

11. Changes to This Policy

If we change this policy, we update the date at the top of this page. For significant changes that affect how we use your data, we will notify account holders by email.

12. Contact Us

For any privacy-related inquiries, please contact us at:

DSS MEDIA, LLC d/b/a GEOall
1500 N GRANT ST #11935
DENVER, CO, 80203, USA
info@geoall.com