Privacy Policy

Effective Date: January 6, 2026 | Last Updated: January 6, 2026 | Version: 1.0

1. Introduction

GeoTap ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, platform, API, and related services (collectively, the "Service").

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

Account Information:

• Name
• Email address
• Organization/company name
• Job title
• Billing address
• Payment information (processed by third-party payment processors)

Profile Information:

• Professional license numbers (optional)
• Industry/profession
• Communication preferences

User Content:

• Areas of Interest (AOIs) you create
• Project names and metadata
• Files you upload
• Saved reports and analyses

Communications:

• Support requests
• Feedback and suggestions
• Survey responses

2.2 Information Collected Automatically

Usage Data:

• Features accessed and used
• Queries made to the platform
• Reports generated
• API endpoints called
• Date, time, and duration of usage

Technical Data:

• IP address
• Browser type and version
• Operating system
• Device identifiers
• Referring URLs

Location Data:

• Geographic areas queried through the Service
• General location derived from IP address

Cookies and Tracking:

• Session cookies (essential for operation)
• Preference cookies (to remember your settings)
• Analytics cookies (to understand usage patterns)

2.3 Information from Third Parties

Payment Processors:

• Transaction confirmations
• Payment status

Analytics Providers:

• Aggregated usage statistics

Authentication Providers:

• If using social login, basic profile information from that provider

3. How We Use Your Information

3.1 To Provide the Service

• Create and manage your account
• Process transactions and billing
• Provide access to platform features
• Generate reports and analyses
• Respond to support requests
• Maintain and improve the Service

3.2 To Improve the Service

• Analyze usage patterns and trends
• Identify popular features and pain points
• Develop new features and capabilities
• Optimize performance and reliability
• Conduct research and analytics

3.3 To Communicate with You

• Send service-related notifications
• Provide customer support
• Send promotional communications (with your consent)
• Notify you of changes to our terms or policies

3.4 For Security and Compliance

• Detect and prevent fraud
• Monitor for security threats
• Enforce our Terms of Service
• Comply with legal obligations
• Respond to legal requests

3.5 For Business Operations

• Process payments
• Manage subscriptions
• Maintain business records
• Conduct business analytics

4. How We Share Your Information

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

4.2 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership.

4.3 Legal Requirements

We may disclose information if required to:

• Comply with applicable laws or regulations
• Respond to valid legal process (subpoenas, court orders)
• Protect our rights, property, or safety
• Protect the rights, property, or safety of others
• Investigate potential violations of our Terms

4.4 With Your Consent

We may share information with third parties when you explicitly consent, such as:

• Integrations you authorize
• Sharing reports with designated recipients
• Participating in case studies (with permission)

4.5 Aggregated/Anonymized Data

We may share aggregated or anonymized data that cannot reasonably be used to identify you, such as:

• Overall platform usage statistics
• Regional query patterns
• Feature popularity metrics

5. Data Retention

5.1 Account Data

We retain account data for as long as your account is active, plus:

• 30 days after account deletion (to allow recovery)
• As required for legal, accounting, or business purposes

5.2 Usage Data

• Detailed usage logs: 12 months
• Aggregated analytics: Indefinitely

5.3 API Logs

• API request logs: 90 days
• Rate limit data: 30 days

5.4 User Content

• AOIs and saved projects: Until you delete them or your account is closed
• Generated reports: 90 days unless saved to your account
• Uploaded files: Until you delete them or your account is closed

5.5 Billing Records

• Transaction records: 7 years (legal requirement)

5.6 Data Deletion Requests

You may request deletion of your data by contacting us. We will delete or anonymize your data within 30 days, except where retention is required by law.

6. Data Security

6.1 Security Measures

We implement appropriate technical and organizational measures to protect your information:

Technical Measures:

• Encryption in transit (TLS 1.2+)
• Encryption at rest (AES-256)
• Secure authentication mechanisms
• Regular security assessments
• Access controls and logging
• Firewall and intrusion detection

Organizational Measures:

• Employee security training
• Background checks for employees with data access
• Incident response procedures
• Regular security reviews

6.2 Limitations

While we implement robust security measures, no system is completely secure. We cannot guarantee the absolute security of your information.

6.3 Security Incidents

In the event of a security incident affecting your data:

• We will investigate promptly
• We will notify affected users as required by law
• We will take steps to mitigate harm
• We will document lessons learned

7. Your Rights and Choices

7.1 Access and Portability

You have the right to:

• Access your personal information
• Request a copy of your data in a portable format
• See what information we have about you

7.2 Correction

You have the right to:

• Update your account information
• Correct inaccurate data
• Request we correct data on your behalf

7.3 Deletion

You have the right to:

• Delete your account
• Delete specific user content
• Request deletion of personal information

7.4 Restriction

You have the right to:

• Restrict processing of your data in certain circumstances
• Object to certain types of processing

7.5 Marketing Opt-Out

You have the right to:

• Opt out of promotional emails at any time
• Unsubscribe using the link in emails
• Contact us to update preferences

7.6 Cookie Preferences

You can control cookies through:

• Your browser settings
• Our cookie preference center
• Third-party opt-out tools

7.7 Exercising Your Rights

To exercise any of these rights, contact us at: privacy@geotap.io

We will respond to requests within 30 days.

8. Cookies and Tracking Technologies

8.1 Types of Cookies We Use

Essential Cookies:

• Authentication and session management
• Security features
• Required for the Service to function

Preference Cookies:

• Remember your settings
• Store your preferences
• Improve your experience

Analytics Cookies:

• Understand how you use the Service
• Identify popular features
• Measure performance

8.2 Third-Party Analytics

We use third-party analytics services, such as Google Analytics, to understand usage patterns. These services collect information using cookies and similar technologies.

You can opt out of Google Analytics at: https://tools.google.com/dlpage/gaoptout

8.3 Do Not Track

We currently do not respond to "Do Not Track" browser signals. However, you can control tracking through cookie settings.

9. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn we have collected information from a child under 16, we will delete it promptly.

If you believe we have information from a child under 16, please contact us at: privacy@geotap.io

10. International Data Transfers

10.1 Data Location

Our primary servers are located in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States.

10.2 Transfer Safeguards

For international transfers, we implement appropriate safeguards including:

• Standard contractual clauses
• Data processing agreements
• Technical security measures

10.3 EU/EEA Users

If you are in the European Economic Area, we process your data under the following legal bases:

• Contract: To provide the Service you requested
• Legitimate Interests: To improve and secure the Service
• Consent: For marketing communications
• Legal Obligation: To comply with applicable laws

11. California Privacy Rights

11.1 CCPA Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect and how it's used
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

11.2 We Do Not Sell Personal Information

We do not sell personal information as defined by the CCPA.

11.3 California Contact

To exercise your CCPA rights, contact us at: privacy@geotap.io

We will verify your identity before processing requests.

11.4 Shine the Light

California Civil Code Section 1798.83 permits California residents to request information about disclosure of personal information to third parties for direct marketing. We do not disclose personal information to third parties for their direct marketing purposes.

12. Changes to This Privacy Policy

12.1 Updates

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our website
• Sending an email notification
• Displaying a notice in the Service

12.2 Effective Date

Changes become effective on the date posted unless otherwise specified.

12.3 Your Continued Use

Your continued use of the Service after changes are posted constitutes acceptance of the updated Privacy Policy.

13. Contact Us

For questions, concerns, or requests regarding this Privacy Policy:

Email: privacy@geotap.io

Mail:
GeoTap
Attn: Privacy Team

We will respond to inquiries within 30 days.

14. Additional Disclosures

14.1 Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to review their privacy policies.

14.2 Third-Party Services

We integrate with various third-party services (payment processors, analytics, etc.). Their use of your information is governed by their respective privacy policies.

14.3 Government Data

When you use the Service to query government data sources, those queries may be logged by the respective government agencies. We do not control government agency data practices.

Document Version 1.0 - January 6, 2026