Privacy Policy

Effective Date: July 8, 2026Last Updated: July 8, 2026

1. INTRODUCTION

This Privacy Policy describes how GEO Studio ("we," "us," or "our") collects, uses, processes, stores, shares, and protects information in connection with your access to and use of the GEO Studio platform, website, applications, APIs, and client-side software (collectively, the "Service").

GEO Studio is an AI Visibility (Generative Engine Optimization or "GEO") software-as-a-service (SaaS) platform designed to help businesses analyze, score, and optimize how generative search engines and artificial intelligence models (such as ChatGPT, Claude, Gemini, Perplexity, and others) discover, interpret, and cite their web properties.

By registering for an account, verifying a domain, or using any part of the Service, you acknowledge that you have read and understood this Privacy Policy.

2. SCOPE

This Privacy Policy applies to all users of the Service, including account owners, administrators, organization team members, and visitors (collectively, "Users"). It covers:

  • Information collected when you create and manage an account.
  • Data processed and generated when you crawl, analyze, and run AI simulation sweeps on websites.
  • Integrations you choose to connect, such as Google Search Console.
  • The deployment and runtime tracking of our optional optimization SDK.

This Policy does not apply to the privacy practices of third-party AI providers (such as OpenAI, Anthropic, Google, and Perplexity) or payment processors (such as Razorpay), which govern data under their own respective privacy terms.

3. INFORMATION WE COLLECT

We collect several categories of information to provide, maintain, secure, and improve our Service.

3.1 Account Information

We collect information required to establish and manage your subscription and organization:

  • Identifiers: Name, email address, password hashes, and profile settings.
  • Organization Details: Organization name, team member invitations, authorized account roles, access configurations, and active login sessions.

3.2 Billing and Transaction Information

To manage paid subscriptions, we process billing details through our payment gateway partner, Razorpay:

  • Details Collected: Billing address, country of residence, subscription tier, payment status, and tax identifiers (such as GST details for businesses in India).
  • Payment Exclusions: We never store complete credit/debit card numbers or bank account credentials on our servers. All transactions are securely routed and handled directly by Razorpay.

3.3 Domain Configuration and Verification Records

We collect setup data when you add websites to your dashboard:

  • Domain names and target website URLs.
  • Ownership verification records, such as unique DNS TXT tokens or HTML meta tags injected into your target pages.

3.4 Google Search Console Integration Data

If you choose to authenticate and link Google Search Console (GSC) to your domain dashboard, we access:

  • Domain performance metrics: total click counts, impressions, Click-Through Rate (CTR), and average search position.
  • Search analytics: specific search query keywords, search queries grouped by page, and landing page URLs.
  • Access parameters: Google OAuth tokens, token refresh codes, and integration profiles.

3.5 AI Engine Probing Inputs

  • User-configured ranking check queries and custom prompts designed to evaluate how AI engines respond to your brand topics.
  • Optional user-supplied API keys for third-party AI models (stored using encryption).

4. WEBSITE CRAWLING AND ANALYSIS

GEO Studio performs automated crawls of target websites to evaluate technical structure and generative search readiness.

4.1 Crawl Scope and Boundaries

  • Public Access Only: Our crawler only requests and processes publicly accessible web pages. It does not log in, bypass authentication screens, fill out input forms, or access restricted pages.
  • Crawl Directives & robots.txt: Our crawler retrieves and parses your website's robots.txt file to audit your crawler settings and surface any blockages as optimization findings. Because GEO Studio is a diagnostic audit tool, we crawl pages on your verified domain even if search engine robots are disallowed, in order to analyze their HTML structure and report visibility blocks directly to you. For unverified domains (e.g. during initial setup/validation), robots.txt exclusions are strictly honored.
  • File Analysis: The crawler retrieves and reads structural files (such as sitemap.xml, robots.txt, and llms.txt) to assess site discoverability.

4.2 Data Points Scraped

The crawler extracts the following public metadata and code structures from your site:

  • Page titles, meta descriptions, and header tags (H1 through H4 hierarchies).
  • Public page body text and prose layout structures.
  • Structured data, JSON-LD scripts, canonical tags, and Open Graph tags.
  • Internal link routing structures, outbound URLs, image references, and image alt-attributes.

5. AI PROCESSING AND ANALYTICS

Website code and content gathered during a crawl are processed through our analysis systems to produce optimization metrics.

5.1 Semantic Analysis & Structure

  • We partition crawled website text into structured logical segments ("chunks").
  • We calculate semantic representations of these chunks to evaluate how they align with semantic topics and AI search intent.
  • We analyze text structures to classify and associate topics, entities, and keywords.

5.2 Scoring and Recommendations

  • We process crawl metrics and semantic structures through our scoring engine to generate Page-Level and Site-Level optimization scores.
  • We generate actionable fix lists ("Findings"), AI visibility estimates, citation probability forecasts, and ranking histories.

6. AI RANKING CHECKS

When you trigger a ranking check or run an AI simulation sweep, the platform queries third-party AI providers (such as OpenAI, Anthropic, Google, and Perplexity) on your behalf.

  • Data Transmitted: We transmit only the minimum necessary information to these providers, consisting of your specific search query, target keywords, and instructions. We do not attach your personal account details, email, billing details, or customer PII to these queries.
  • Execution Policies: The data sent to these AI platforms is processed under each provider's own terms of service and privacy policies. Where supported by our API agreements, we configure connections to leverage enterprise-level data processing terms, but third-party processing is governed by their own policies which may change over time.
  • Probing Output Storage: The raw text responses, SERP citations, and engine citation states returned by these platforms are stored in your database history to track progress.

7. GOOGLE SEARCH CONSOLE INTEGRATION

GEO Studio accesses Google Search Console data solely to populate search performance statistics and cluster visibility trends.

  • Google API User Data Policy: Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
  • Limited Use Commitment: We will not sell, transfer, or share Google Search Console data with third-party advertising networks, data brokers, or marketing platforms.
  • Use Limitations: We use GSC data strictly to render search analytics (clicks, impressions, keywords) in your dashboard, map queries to visibility clusters, and calculate projected performance. GSC data is accessed via Google OAuth and remains isolated within your secure organization workspace.

8. SDK AND WEBSITE DEPLOYMENT

GEO Studio provides an optional client-side JavaScript SDK to allow users to apply approved technical fixes directly on their web properties.

  • User Consent and Control: The SDK only injects improvements (such as custom JSON-LD schemas, meta descriptions, or title tags) that have been explicitly approved by an authorized user in the GEO Studio interface. It does not apply alterations without manual configuration or auto-approval rules enabled by you.
  • Zero Visitor Tracking: The SDK does not set tracking cookies on your visitors' browsers, does not log visitor PII, and does not record visitor browser histories.
  • Telemetry and Monitoring: The SDK transmits basic, non-personally identifiable telemetry back to our servers (such as host domain names, active fix IDs, execution timestamps, and heartbeat signals) solely to verify that deployed adjustments are active and functioning correctly.

9. COOKIES AND SIMILAR TECHNOLOGIES

We use cookies to maintain your login state and protect the security of our application. We restrict our cookie usage to functional necessities:

  • Authentication and Session Cookies: We set cookies (such as access and refresh tokens) to authenticate your user session and maintain your logged-in state as you navigate the dashboard.
  • Security Mechanisms: Certain authentication flows use security mechanisms, such as state parameters, to protect against cross-site request forgery.
  • No Third-Party Ad Tracking: We do not deploy advertising, marketing, or behavioral tracking cookies on the GEO Studio dashboard. Furthermore, our optional client-side SDK does not load third-party marketing or profiling cookies onto your website visitors' devices.

10. HOW WE USE INFORMATION

We use the collected and generated information for the following business purposes:

  • To create, maintain, secure, and manage your account and organization settings.
  • To execute website crawls and compile structural and technical audits.
  • To generate GEO element scores, citation probabilities, and technical recommendations.
  • To query third-party AI models to check rankings and verify search visibility.
  • To process payments, verify invoices, and manage subscription limits.
  • To provide customer support and diagnose system performance issues.
  • To monitor the health, uptime, and deployment status of our JavaScript SDK.
  • To comply with legal obligations and enforce our terms of service.

11. LEGAL BASIS FOR PROCESSING (GDPR)

For individuals residing in the European Economic Area (EEA), our legal basis for collecting and processing personal data under the General Data Protection Regulation (GDPR) depends on the context of the collection:

  • Contractual Necessity: We process your Account and Billing data to perform our contract with you (e.g., establishing your workspace and processing transactions via Razorpay).
  • Legitimate Interests: We process technical crawl data, generated scores, and SDK health statistics based on our legitimate interest in providing AI optimization tools and ensuring system integrity.
  • Consent: When you connect Google Search Console, we process your data based on your explicit OAuth consent. You can revoke this consent at any time through your Google account security settings or by disconnecting the integration.

12. SHARING INFORMATION

We share your information only with trusted service providers who help us run the platform:

  • Amazon Web Services (AWS): To host our servers, databases, queue infrastructure, and storage buckets.
  • Razorpay: To process payment card information and coordinate subscription renewals under secure compliance protocols.
  • AI Providers (OpenAI, Anthropic, Google, Perplexity): To transmit ranking prompts and retrieve search citations. Only the minimum query parameters are shared; no user account PII is attached.

We do not share Google Search Console analytics or customer website data with external advertising networks.

13. BUSINESS TRANSFERS

In the event that GEO Studio undergoes a business transition, such as a merger, acquisition by another company, reorganization, dissolution, or sale of all or a portion of our assets, your personal data and collected website/integration data may be among the assets transferred. You acknowledge and agree that such transfers may occur and are permitted by this Privacy Policy, and that any acquirer of our assets may continue to process your information as set forth in this Policy.

14. LEGAL DISCLOSURE & COMPLIANCE REQUESTS

We cooperate with government and law enforcement officials and private parties to enforce and comply with the law. We may disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate to respond to claims and legal process (including, but not limited to, subpoenas or court orders), to protect the property and rights of GEO Studio or a third party, to protect the safety of the public or any person, or to prevent or stop activity we may consider to be, or to pose a risk of being, illegal, unethical, or legally actionable.

15. INTERNATIONAL TRANSFERS

Our platform operations and servers are hosted primarily in the United States and other international regions through AWS cloud infrastructure.

If you access the Service from the European Union, India, or other regions with laws governing data collection and use, please note that your information may be transferred to and processed in countries that may not have the same level of data protection laws as your jurisdiction. We take appropriate safeguards (such as standard contractual clauses) to protect personal data during these cross-border transfers.

16. DATA RETENTION

We retain data only as long as necessary to fulfill the purposes outlined in this policy:

  • Account and Workspace Configuration: Retained for the lifetime of your active subscription. If you delete your account, this data is removed or anonymized within a reasonable period consistent with operational and legal requirements.
  • GSC Performance Data: Google Search Console performance data (such as clicks, impressions, and search query keywords) is cached and pruned automatically on a rolling 16-month retention cycle, matching the historical retention window of Google Search Console itself.
  • Crawl History and Reports: Kept to show historical progress; older report records are pruned or consolidated over time.
  • Integration Tokens: Instantly deleted from our databases if you disconnect Google Search Console or remove a domain.

17. SECURITY

We implement administrative, technical, and organizational safeguards, including encryption where appropriate, access controls, credential protection, monitoring, and secure transmission of data to secure database records and third-party credentials.

No method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, while we strive to protect your data, we cannot guarantee its absolute security.

18. YOUR RIGHTS

Depending on your location, you have legal rights regarding your personal data.

18.1 Rights under GDPR (EEA and UK)

If you reside in the EEA or UK, you have the right to:

  • Access, correct, update, or request deletion of your personal data.
  • Object to processing, restrict processing, or request data portability.
  • Withdraw consent at any time for consent-based processing (e.g., Google integrations).

18.2 Rights under CCPA / CPRA (California)

If you are a California resident, you are entitled to:

  • Know what categories of personal information we collect, the sources, and how we share it.
  • Request deletion of collected personal information.
  • Opt-out of any prospective "sale" or "sharing" of personal information (as defined under California law). Note: GEO Studio does not sell or share your personal data.
  • Non-discrimination for exercising your CCPA rights.

18.3 Rights under India's Digital Personal Data Protection (DPDP) Act 2023

If you are located in India, you possess the right to:

  • Request a summary of personal data being processed and the processing activities.
  • Seek correction, completion, or erasure of personal data.
  • Nominate any other individual to exercise these rights in the event of death or incapacity.
  • Register a grievance with our designated Grievance Officer.

19. CUSTOMER RESPONSIBILITIES

As a condition of using the Service, you represent and warrant that:

  • You only submit URLs and request crawls for domains that you own or have explicit authorization to manage.
  • You do not use the Service to run crawls, audits, or deployments on websites where you have no legal ownership or management credentials.
  • You are responsible for securing your workspace credentials and ensuring team members have appropriate roles.

20. WHAT GEO STUDIO DOES NOT DO

To ensure transparency with users, partners, and AI crawlers, we commit to the following exclusions:

  • No Data Selling: We do not sell or rent user or customer data to third-party data brokers or marketing lists.
  • No AI Foundation Model Training: We do not use your crawled website content, text chunks, custom prompts, or report audits to train base foundation AI models.
  • No Unapproved Deployments: Our JavaScript SDK will not deploy metadata or content changes to your site without your explicit user approval.
  • No Private Crawling: We do not bypass authentication, encryption, or access controls. For verified domains, we may analyze pages referenced by you for diagnostic purposes even where robots.txt disallows crawler access, in order to provide audit findings.
  • No Ad Injection: We do not inject advertisements or affiliate links into customer websites.
  • No End-User Visitor Tracking: We do not track or build profiles of visitors accessing your target websites.

21. OWNERSHIP OF CONTENT & INTELLECTUAL PROPERTY

For the avoidance of doubt, the Customer retains sole, exclusive, and complete ownership, control, and all intellectual property rights over:

  • Their target websites, domain assets, source code, and underlying content.
  • All website text and code gathered during a platform crawl.
  • All generated reports, audit logs, scores, action items, recommendations, and exported datasets produced by the Service.

GEO Studio claims no ownership rights over any of the Customer's data, websites, or reports. GEO Studio receives only the limited, non-exclusive, revocable license to crawl, parse, score, and store these assets solely to provide the Service to the Customer's workspace.

22. AI & SCORING DISCLAIMER

GEO Studio provides analytical assessments and forecasts of website visibility across third-party networks:

  • Analytical Estimates Only: GEO scores, category metrics, readiness ratings, and citation probabilities are purely statistical estimates, projections, and mathematical approximations based on data available at the time of calculation.
  • No Performance Guarantees: We do not warrant, represent, or guarantee that implementing recommendations, fixes, or SDK adjustments will result in increased search placement, indexing, citations, traffic, or visibility on any third-party AI or search platform.
  • Dynamic Third-Party Models: Third-party AI platforms (such as OpenAI, Anthropic, Google, and Perplexity) frequently retrain, update, and alter their models, algorithms, and retrieval systems. Consequently, scoring results, citations, and visibility metrics are highly dynamic and will change over time.
  • Snapshot Observations: Reports represent historical observations at the specific date and time of the crawl and are not real-time guarantees of live search engine behaviors.
  • Decision-Support Tool: GEO Studio's reports and recommendations are intended to support informed decision-making and should not be relied upon as the sole basis for technical, legal, financial, or business decisions.

23. CHANGES TO THIS POLICY

We may update this Privacy Policy to reflect changes in our platform features, integration policies, or legal requirements. When we make updates:

  • We will modify the "Last Updated" date at the top of this policy.
  • For material changes, we will provide a prominent notification within the dashboard or email the primary account owner.
  • Continued use of the Service after changes are posted constitutes your acceptance of the updated Privacy Policy.

24. CONTACT INFORMATION

For questions, data requests, or rights inquiries, please contact our privacy compliance team:

  • Company Name: GEO Studio (LIT AI Labs)
  • Registered Address: 610, Venus Atlantis Corporate Park, 100 Feet Road, Prahlad Nagar, Ahmedabad, Gujarat, India - 380015
  • Privacy Email: help@geostudio.app

Grievance Officer (DPDP Compliance - India)

For inquiries or complaints related to data processing under the DPDP Act 2023, please contact our designated Grievance Officer: