This Privacy Policy explains how [Legal entity name] (“Geoclarity”, “we”, “us”) collects, uses and shares personal information when you visit www.geoclarity.net, create an account, contact us or use the Geoclarity geocoding API (together, the “Services”).
- We do not keep the addresses or coordinates you send to the API. Once we return a response, we retain only a request count.
- We do not sell personal information.
- Analytics cookies are off unless you accept them.
- You can ask us to access, correct or delete your information at any time.
1. Who we are
Geoclarity is operated by [Legal entity name], a limited liability company registered in the State of Wyoming, United States, and operated from the European Union. Its registered address is [Registered address].
For the information described in this policy we are the “controller”, meaning we decide how and why it is used. The one exception is the content of API requests, covered in section 3, where we act on our customers' instructions.
If you have a question about this policy or your information, email contact@geoclarity.net.
2. Information we collect
Account information
When you create an account we collect your email address and a password. Passwords are stored only in hashed form by our authentication provider, and we cannot see them. If you sign in with Google, we receive your Google account email address, name and profile picture. To keep accounts secure, we also record when you sign in and the IP address and browser used.
Sales inquiries and correspondence
If you send us a sales inquiry, we collect your name and business email address and, if you provide them, your company, intended use case, expected request volume and message. If you email us or book a call, we keep the correspondence and the details you give when booking. Calls are scheduled through Calendly, which processes your name, email address and chosen time for us.
API usage
For each API key we keep a count of the requests made, which we use to apply plan limits, prepare invoices and plan capacity. We do not keep the content of requests. See section 3.
Billing information
For paid plans we collect the billing contact's name and email address, your company name, billing address and, where applicable, tax identification number, and we keep records of invoices and payments. Paid plans are invoiced and paid by bank transfer, so we do not collect or store payment card details.
Website usage
If you accept analytics cookies, Google Analytics collects information about how you use our website: the pages you view, how you arrived, your approximate location (derived from your IP address) and your device and browser type. If you do not accept, these tools are not loaded. See section 5.
Technical data
As with most websites, our hosting provider processes your IP address, browser type and the pages you request in order to deliver the site and protect it from abuse. Our website also loads fonts from Google Fonts, which means your browser sends your IP address to Google when a page loads.
3. API request data
When our customers call the API, they send us addresses or coordinates and we return geocoding results. Depending on how a customer uses the API, a request can relate to an identifiable person, for example the location of a driver's vehicle. We handle this data as follows:
- We process each request only to compute and return the response.
- We do not keep the content of requests, or the results, after the response has been returned.
- We do not keep a log of the IP addresses that call the API. They are used only in the moment, to return the response and protect the service.
- We do not use request data to build profiles, for advertising, or for any purpose other than providing the API.
- Requests and responses are encrypted in transit using TLS.
For this data our customer is the controller and we are its processor (or “service provider” under US state privacy laws). The customer's own privacy policy explains how it uses location data. If you are an end user of one of our customers and want to exercise your privacy rights, please contact that customer directly. Because we do not keep request data, we hold no record of your location to provide or delete.
Customers who need a Data Processing Addendum can request one at contact@geoclarity.net.
4. How we use information
| Purpose | Information used | Legal basis |
|---|---|---|
| Create and manage your account and provide the Services | Account information, API usage | Performance of our contract with you |
| Apply plan limits, invoice, collect payment and keep financial records | API usage, billing information | Contract; legal obligation |
| Respond to inquiries and discuss plans with prospective customers | Sales inquiries and correspondence | Steps taken at your request before a contract; our legitimate interest in responding to you |
| Send service messages, such as security notices and changes to our terms | Account information | Contract; legitimate interests |
| Send occasional product updates to customers, which you can opt out of at any time | Account information | Legitimate interests |
| Keep the Services secure and prevent abuse | Account information, technical data | Legitimate interests |
| Understand how our website is used and improve it | Website usage | Consent |
| Comply with the law and enforce our terms | Any of the above, as needed | Legal obligation; legitimate interests |
The legal bases shown apply where the EU or UK General Data Protection Regulation (GDPR) governs our use of your information. We do not use personal information for automated decisions that have legal or similarly significant effects on you.
7. International transfers
The company is registered in the United States, and some of our providers process personal information in the United States and other countries outside the European Economic Area. Your information may therefore be processed outside the country where you live, including in countries whose data protection laws differ from yours.
Account information and API usage counts are stored in the United States. The API runs on Amazon Web Services, and Enterprise customers can ask for their API traffic to be served from infrastructure in the EU.
When we transfer personal data from the European Economic Area, the United Kingdom or Switzerland, we rely on a recognized transfer mechanism, such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision, including the EU–US Data Privacy Framework where the recipient is certified. You can ask us for a copy of these safeguards at contact@geoclarity.net.
8. How long we keep information
| Information | How long we keep it |
|---|---|
| API request content | Not kept |
| API usage counts | While your account is open, and afterwards as part of our billing records |
| Account information | Until you close your account, then deleted within 90 days |
| Sales inquiries and correspondence | Up to 24 months after our last contact with you |
| Billing and tax records | 7 years, or longer where the law requires |
| Website analytics | Up to 14 months |
We may keep information for longer where we need it to comply with the law, resolve a dispute or enforce our agreements.
9. Security
We protect personal information with measures appropriate to the risk, including encryption in transit, hashed passwords, access rules that restrict each account to its own records, and access limited to the people who need it to do their work. No system is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the relevant authorities as the law requires.
10. Your rights and choices
Wherever you live, you can ask us what personal information we hold about you, and ask us to correct or delete it. Email contact@geoclarity.net. We will respond within 30 days, and may need to verify your identity first.
European Economic Area, United Kingdom and Switzerland
You have the right to access your personal data, to have it corrected or erased, to restrict or object to our use of it, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time, which does not affect processing that has already taken place. You can also complain to your local data protection authority, although we would appreciate the chance to resolve your concern first.
United States
Depending on the state you live in, you may have the right to know what personal information we hold about you, to receive a copy, to correct or delete it, and to appeal if we decline your request. We do not sell personal information or share it for cross-context behavioral advertising. We will not treat you differently for exercising your rights. You may use an authorized agent to make a request, and we will ask for proof of their authority.
Emails
You can opt out of product updates with the link in any such email or by contacting us. We will still send essential service messages.
11. Children
The Services are intended for businesses and are not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.
12. Links to other sites
Our website links to services we do not control, such as LinkedIn and Calendly. Their own privacy policies apply to the information you give them.
13. Changes to this policy
We may update this policy. We will post the new version here and change the “Last updated” date. If a change materially affects how we use your information, we will notify you by email or with a notice on our website before it takes effect.
14. Contact
[Legal entity name]
[Registered address]
contact@geoclarity.net