Last updated: 13 September 2026
1. Introduction
This policy explains how GEO-BROO Digital Private Agency (“GeoBroo”, “we”, “us”) handles personal data when you use GeoBroo Visibility Checker. We are the data controller for this data.
2. What we collect
Account data. Your email address, your username, and a securely hashed password. If you sign in with Google, we receive your email address and name from Google — we never receive or store your Google password.
Usage data. The domains you analyse, the reports you generate, your credit balance, and the dates of these actions.
Payment data. We do not collect or store card numbers. Payments are handled by Freemius, who send us your email address, the plan purchased, and a transaction identifier so that we can add credits to your account.
Technical data. Standard server logs, including IP address and browser type, kept for security and troubleshooting.
3. Why we use it
| Purpose | Legal basis |
|---|---|
| Creating and running your account | Performance of a contract |
| Delivering the reports you request | Performance of a contract |
| Processing payments and adding credits | Performance of a contract |
| Sending account emails (password reset, receipts) | Performance of a contract |
| Keeping the Service secure and preventing abuse | Legitimate interests |
| Complying with tax and accounting obligations | Legal obligation |
| Marketing emails, if you opt in | Consent |
We do not sell your personal data, and we do not use it for advertising profiling.
4. Who we share it with
We share only what is necessary, with:
- Freemius — payment processing and invoicing.
- DataForSEO — receives the domain or URL you ask us to analyse, in order to return SEO data. It does not receive your identity.
- AI providers (OpenAI, Anthropic, Google) — receive the generated questions and the domain being checked. They do not receive your identity.
- Our hosting provider — stores the site and its database.
- Email delivery service — sends account emails.
Some of these providers are located outside the European Economic Area. Where that is the case, transfers are made under appropriate safeguards, such as Standard Contractual Clauses.
We may also disclose data where required by law.
5. A note on the domains you analyse
When you enter a domain, we send it to our data providers to produce the report. Please note that entering a domain does not make it private to you — the same domain may be analysed by other users, and the underlying data comes from publicly observable sources. Your report history itself is private to your account.
6. How long we keep it
- Account data: while your account exists, and for up to 12 months afterwards.
- Reports: while your account exists, so you can reopen them without charge.
- Payment records: as required by Cyprus tax law, generally 6 years.
- Server logs: typically 30 days.
7. Your rights
If you are in the EEA or UK, you have the right to access your data, correct it, delete it, restrict or object to its processing, receive a copy in a portable format, and withdraw consent where processing is based on consent.
To exercise any of these, email us at the address below. We will respond within one month. You also have the right to complain to your local data protection authority, or to the Office of the Commissioner for Personal Data Protection in Cyprus.
8. Cookies
We use cookies that are necessary for the Service to function — keeping you logged in and maintaining your session. If we add analytics or marketing cookies, we will ask for your consent first.
9. Security
Passwords are stored hashed, never in plain text. Connections are encrypted with HTTPS. Access to the administrative side of the Service is restricted. No system is perfectly secure, but we take reasonable measures to protect your data and will notify you and the relevant authority of a breach where required.
10. Children
The Service is not intended for anyone under 18, and we do not knowingly collect data from children.
11. Changes
We may update this policy. Material changes will be posted here with a revised date, and where required we will notify you by email.
12. Contact
Data protection enquiries: guy.getweb@gmail.com
GEO-BROO Digital Private Agency, Cyprus