Privacy Policy

Last updated: 13 June 2026

This policy explains how [Your legal/trading name] ("Geostorm", "we", "us") collects and uses personal data when you use the Geostorm service at geo-storm.co.uk (the "Service"). We are the data controller for that personal data. For any privacy question, contact us at [privacy@geo-storm.co.uk].

1. What we collect

Account data — your name, email address, organisation name, and a securely hashed version of your password (we never store your password in plain text).
Content you add — the websites, keywords, and related details you enter, and the audit, semantic, visibility, ranking and report data the Service generates from them.
Billing data — your plan, credit usage, and subscription status. Card payments are processed by Stripe; we do not see or store your card details.
Technical data — IP address, browser type, and server logs, used for security and to operate the Service. We store your login session token in your browser's local storage; we do not use tracking or advertising cookies.

2. How and why we use it (legal bases)

To provide the Service (performance of our contract with you) — accounts, authentication, running audits, billing.
To secure and improve the Service (our legitimate interests) — preventing abuse, diagnosing faults.
To take payment (contract / legal obligation) — via Stripe.
Where you have consented — e.g. optional communications.

3. Service providers (sub-processors)

We share data with these providers only as needed to run the Service. Some are based outside the UK/EEA (e.g. the USA); where that is the case, transfers are made under appropriate safeguards such as Standard Contractual Clauses.

Render — application hosting and database storage.
Cloudflare — DNS, content delivery and security.
Stripe — payment processing.
OpenAI, Perplexity, Google (Gemini & Programmable Search) — to generate audit recommendations, content drafts, semantic analysis, AI-visibility checks and search-ranking data. We send the keywords and page content needed for these features; we do not send your password or payment details.

4. Website auditing

When you add a website to the Service, we fetch its publicly available pages (and files such as robots.txt and sitemap.xml) to analyse them. You must only add websites you own or are authorised to audit (see our Terms of Service).

5. Retention

We keep your account and content data for as long as your account is active, and for a reasonable period afterwards to meet legal, accounting and security obligations. You can ask us to delete your account and associated data at any time.

6. Your rights

Under UK data protection law you have the right to access, correct, delete, restrict or object to the processing of your personal data, and the right to data portability. To exercise these, contact [privacy@geo-storm.co.uk]. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

7. Security

We protect your data with measures including HTTPS encryption in transit, hashed passwords, hashed session tokens, and access controls that limit each customer to their own organisation's data. No system is perfectly secure, but we work to protect your information.

8. Children

The Service is for business use and is not intended for anyone under 18. We do not knowingly collect data from children.

9. Changes

We may update this policy from time to time. We will post the updated version here and change the "last updated" date.

10. Contact

[Your legal/trading name]
[Your business address]
[privacy@geo-storm.co.uk]