Privacy Policy

• Account data: name, email address, and authentication identifiers (via Firebase Authentication / Google sign-in).
• Project data: the brands, websites, competitors, and prompts you add.
• AI API keys: the keys you provide are encrypted at rest (AES-256-GCM) and used only server-side to run your checks. They are never exposed back to your browser.
• Usage analytics: aggregate, cookieless page-view counts (no personal identifier). With your consent, Google Analytics 4 for more detailed analytics.

To provide and operate the Service, run your GEO checks, generate reports and action plans, manage your account and billing, send transactional emails, and improve the product.

• Google Firebase / Google Cloud — authentication, database, and hosting.
• AI providers (OpenAI, Anthropic, Google) — your prompts are sent to these providers using your own API keys, under their respective terms.
• Paddle — payment processing and invoicing (Merchant of Record), once billing is enabled.
• Resend — transactional email delivery.
• Google Analytics — analytics, only with your consent.

We use a minimal, cookieless audience measurement that requires no consent. Optional analytics cookies (Google Analytics) load only after you accept them in our cookie banner. You can decline at any time.

We keep your data while your account is active. You can permanently delete your account and all associated data at any time from Settings → Danger zone. Deleted data is removed from our systems.

Depending on your location (including under the GDPR), you may have the right to access, correct, export, or delete your personal data, and to withdraw consent. To exercise these rights, contact us.

We use encryption in transit (HTTPS) and at rest for sensitive secrets such as API keys. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your data.

Questions about this policy? Email youssef.belahmar@jyomer.com.