ClassicGEOPrivacy Policy
Last updated: 19 August 2026
Draft. The operator details on this page have not been completed yet. Please contact us before relying on it.
This explains what ClassicGEO collects, why we collect it, and who else sees it.
1. Who we are
TODO_LEGAL_ENTITY_NAME, TODO_REGISTERED_ADDRESS, is the data controller for the information described here. Contact: classicgeowork@gmail.com.
2. What we collect
Account information
When you sign in with Google we receive your email address, name and profile picture. We do not receive your Google password.
What you ask us to scan
The website addresses you submit, the questions generated for your market, the competitor set discovered for you, and the results of each scan. Scans read publicly available web pages.
Billing information
We never see or store your card details. Payment is handled by Polar, which acts as merchant of record. We store only your plan, subscription status, billing period dates and Polar’s identifiers for your subscription.
Usage
Aggregate, cookieless analytics about page views via Vercel Analytics. This does not track you across sites and sets no advertising cookies.
Cookies
We set one kind of cookie: the session cookie that keeps you signed in after you authenticate. It is strictly necessary for the service to work, it is not used for advertising or cross-site tracking, and it is cleared when you sign out. Because we set no analytics or advertising cookies, there is no consent banner to click.
3. Why we use it
- To run scans and show you the results — this is the service itself.
- To enforce plan allowances and prevent spend abuse.
- To take payment and comply with tax and accounting obligations.
- To contact you about your account, billing or a service problem.
Our legal bases are performance of our contract with you (running the service, billing), our legitimate interests (security, preventing abuse, improving the product) and legal obligation (tax records).
4. Who we share it with
We do not sell your data. We share it with the processors needed to run the service:
| Who | What they receive |
|---|---|
| Supabase | Account and scan data (database and authentication) |
| Vercel | Application hosting and cookieless analytics |
| Polar | Your email and subscription details, for payment and invoicing |
| Authentication, if you sign in with Google |
4.1 AI answer engines
Running a scan means sending questions to third-party AI providers and recording their answers. Those questions contain your brand name, your domain and terms describing your market. Depending on your plan, the providers are:
Perplexity · OpenAI · xAI · Anthropic · Google
These are commercial API endpoints, and each provider’s own terms and retention policy apply to what we send them. We do not send them your account credentials, your billing details, or any personal data beyond what the question itself contains.
4.2 Data processing agreement
If you need a data processing agreement covering the processors above, write to classicgeowork@gmail.com and we will provide one.
5. International transfers
Our processors and the AI providers above operate outside your country, including in the United States. Where required we rely on Standard Contractual Clauses or an equivalent transfer mechanism offered by each provider.
6. How long we keep it
Scan history is kept while your account is open, because a trend is only meaningful across time. Delete your account and we delete your profile and scan data. Billing and tax records are kept as long as the law requires, typically several years, and are held by Polar as merchant of record.
7. Your rights
Depending on where you live you may have the right to access, correct, export or delete your data, to object to or restrict certain processing, and to complain to your data protection authority.
You can delete your account and its data yourself from the dashboard. For anything else, write to classicgeowork@gmail.com and we will respond within one month.
8. Security
Data is encrypted in transit and at rest by our hosting and database providers. Access to production data is limited to the people who need it. No system is perfectly secure, and we will tell you and the relevant authority about a breach affecting your data as the law requires.
9. Children
The service is for businesses and is not directed at anyone under 18. We do not knowingly collect their data.
10. Changes
We will update this page when our processing changes and revise the date at the top. Material changes will be notified to you directly.