Privacy policy

1. Who is responsible

DATABASE SOLUTIONS S.R.L., IDNO 1025600064774, at 59 Ștefan cel Mare, Seliștea Nouă, Călărași district, MD-4401, Republic of Moldova, is responsible for personal data used to operate Geosento accounts, security and customer support. Contact privacy@geosento.com. This policy covers visitors, customers and people whose information may appear in scanned public pages. Where we process website content solely on a business customer’s instructions, the allocation of controller and processor responsibilities must be addressed in the applicable agreement.

2. Information we process and its sources

• Account details: Google sign-in identifier, verified email, name, profile image URL when supplied, preferences and account activity. We do not receive your Google password.
• Scan information: website addresses, settings, public page text, metadata, findings, source evidence, timestamps and feedback. Content comes from the website requested for analysis and may include names or contact details published there.
• Technical information: IP address, request metadata, session identifiers, service errors and security logs. Abuse controls can use a derived identifier rather than storing the raw IP in scan usage records.
• Billing information: billing customer, transaction and subscription references, status, billing dates and plan usage. Paddle collects checkout information directly. We do not store full payment card details.
• Support: messages and contact details you provide when asking for help or exercising a right.
• Service notifications: account, scan and subscription events, email preferences, read state and limited delivery metadata. We use your verified account email for Geosento service messages.

3. Purposes and legal bases

We use account details and scan information to provide the service you request and administer your subscription, relying on performance of a contract or steps you request before a contract. We process necessary billing and compliance information to meet legal obligations.

We send account and subscription-access messages to operate your service. Optional scan-result emails and extra renewal reminders can be managed in your account, or turned off through the preference link in those emails. These messages contain no advertising or tracking pixels. Paddle sends its own receipts and required billing notices separately.

Our legitimate interests include securing the platform, preventing fraud and abuse, diagnosing failures, responding to enquiries and establishing or defending legal claims. We consider the impact on individuals and limit information to what is needed. Where consent is required for a particular optional activity, we request it separately; you can withdraw it without affecting prior lawful processing. We do not use website visits for advertising profiling or sell personal information.

4. Optional AI content analysis

When AI analysis is enabled, selected public text and scan context are sent to an external AI processing provider. You can disable this in scan or account settings. Requests disable storage as retrievable API responses; that setting does not mean that the provider never retains data for security or other applicable processing purposes. AI results are suggestions, separate from the technical score. We do not make decisions with legal or similarly significant effects about people using report scores. Do not submit sensitive or confidential content.

5. Who receives information

Access is limited to authorised personnel and service providers where necessary for hosting, infrastructure, AI analysis and support. Our hosting provider is Contabo. Google handles authentication under its Privacy policy. A Google redirect occurs when you choose to sign in.

Paddle processes checkout, tax, fraud prevention and payment information for its merchant-of-record activities under its Privacy policy. Its checkout resources are loaded when you start or resume checkout, rather than on an ordinary pricing-page visit. We may disclose information when legally required or necessary to protect legal rights. Reports are restricted to their owning account or guest session; they are not publicly published.

6. International processing

The service is operated by a company in Moldova. Authentication, AI and payment providers operate internationally and may process information outside your country, including in the United States. Where a cross-border transfer requires safeguards, the applicable legal transfer requirements must be met; this policy is not itself a transfer agreement. Contact privacy@geosento.com for information about the recipients, relevant processing locations and safeguards applicable to your data. We do not claim that every provider or request is confined to the European Union.

7. How long information is retained

• Reports and evidence: normally 90 days from creation, or the retention period shown in the service. You can delete reports earlier. Related feedback is deleted with its report.
• Accounts: while the account is maintained, until deletion, subject to necessary legal or security retention. An active subscription or pending checkout must be resolved before self-service account deletion; contact us for assistance or a statutory erasure request.
• Usage and webhook records: limited operational records are normally removed after 90 days. Removing a report does not reset monthly usage.
• Notification records: in-app events, read state and limited email delivery metadata are normally removed after 90 days. Deleting a scan removes its linked notification records. An outgoing-server acknowledgement does not confirm arrival in an inbox.
• Backups: separate local backups are retained for approximately 14 days. Deletion does not rewrite existing backups; if a backup is restored, applicable deletion requests must be reapplied.
• Logs and correspondence: retained only as needed for operations, security, the enquiry and applicable legal obligations or claims. Paddle retains its transaction records under its own obligations and policy.

Cookie and browser-storage periods are listed in the Cookie policy.

8. Your rights and how to exercise them

Depending on applicable law, you may request access, correction, deletion, restriction, portability and information about recipients, object to processing based on legitimate interests and withdraw consent for processing based on consent. These rights may have legal exceptions. Write to privacy@geosento.com. Requests are normally free; we may verify identity proportionately and respond within one month where that legal period applies. Any lawful extension and its reason will be communicated.

You can export reports in the application and delete them from My reports. For account data or information about you on a scanned website, contact us with sufficient detail to locate it. Deleting Geosento data does not remove the source website. You may complain to Moldova’s National Centre for Personal Data Protection or another competent supervisory authority, including your local EEA authority where applicable.

9. Security, children and required information

We use HTTPS, account and session access checks, request-forgery protection and restricted operational access. No system can guarantee absolute security. The service is intended for adults and is not directed to children. Contact us if a child’s information has been submitted. Account information is needed for Google sign-in and paid account features; without it you can only use the guest features that are available. This policy will be updated when processing materially changes, with additional notice where required.