Privacy Policy

1. Scope

This Privacy Policy explains how GEO Lens Diagnosis collects, uses, stores, shares, and protects personal data and business data when you access the website, register an account, create brand profiles, run diagnosis tasks, view reports, share reports, purchase or use credits, request support, or interact with administrators.

2. Information we collect

Depending on how you use the service, we may collect and process:

• Account information: name, email address, login state, role, account settings, authentication records, security events, and user preferences.
• Brand and business information: brand names, official domains, aliases, competitors, industry, market, business descriptions, product or service information, uploaded materials, and diagnosis direction.
• Diagnosis information: generated or confirmed questions, selected platforms, rounds, mode, task status, collection progress, raw answers, citations, references, metric snapshots, report assets, retest baselines, and export records.
• Wallet, membership, and order information: credit balance, reservations, settlement, recharge, membership benefits, refunds, reversals, invoices, receipts, ledger entries, and administrator adjustments.
• Sharing and access information: report share links, passwords or access-token state, expiry settings, access count, access time, visitor request metadata, and necessary security logs.
• Technical information: IP address, browser, device, operating system, locale, referral, error logs, performance logs, audit logs, and abuse-prevention signals.
• Support information: messages, screenshots, order IDs, report links, issue descriptions, and other information you submit when requesting help.

3. How we use information

We use information to:

• Create and manage accounts, sessions, permissions, and security controls.
• Create brand profiles, diagnosis tasks, retests, reports, shares, and exports.
• Collect AI platform answers, compute metrics, generate report assets, rebuild reports, and recover failed or missing data.
• Process credits, reservations, settlement, recharge, refunds, invoices, receipts, support, and disputes.
• Maintain service security, detect abuse, audit administrator actions, and troubleshoot incidents.
• Improve product experience, diagnosis quality, reporting logic, reliability, and operational workflows.
• Comply with accounting, tax, security, legal, or regulatory obligations where applicable.

4. Third-party services and processors

To provide diagnosis and operations, we may use third-party providers for AI answer collection, LLM processing, payment, email delivery, hosting, storage, monitoring, analytics, and security. We transmit only the information reasonably necessary for the corresponding service.

Third-party AI platform answers and cited sources may come from public web content, model-generated output, search results, or platform-specific retrieval systems. Accuracy, freshness, and availability depend on those platforms.

For report data source and interpretation boundaries, see Report Disclaimer and Data Sources.

5. Report sharing

Report shares may be protected by password, access token, expiry, and status controls. Anyone with a valid share link and password or access token may be able to view the corresponding report. You should manage share links, passwords, exports, and recipients carefully.

We may record access counts, access time, request metadata, and security events to operate report sharing, detect abuse, and support audit or dispute handling.

6. Storage, security, and backups

The current production deployment stores business data in server-side databases and report storage controlled by the service operator. The single-server version uses SQLite and performs regular backups for disaster recovery, pre-deployment protection, restore rehearsal, and operational continuity.

We use reasonable technical and organizational measures, including access controls, secret management, file permissions, service isolation, audit logs, and backup controls. However, no internet service can be guaranteed to be absolutely secure.

7. Retention and deletion

We retain information for as long as needed to provide the service, maintain reports and history, process orders and credits, support disputes, comply with accounting or legal obligations, and protect the service.

You may request deletion of account, brand, diagnosis, report, or share data. Certain order, recharge, refund, reversal, invoice, audit, and ledger records may be retained where necessary for accounting, tax, compliance, security, or dispute handling. See Data Deletion Policy for details.

8. International access

If you access the service from outside the server location or submit information about businesses in different markets, your information may be processed in locations where we or our service providers operate, subject to appropriate operational and security controls.

9. Changes to this Policy

We may update this Privacy Policy as the product, payment channels, collection providers, storage architecture, or legal requirements change. Material updates may be announced through the website, in-app notice, email, or other reasonable methods.

10. Contact

For privacy questions, data processing requests, or deletion requests, contact us through Contact.