Privacy policy

The controller is MoodySEO (trading name of the sole trader identified in the legal notice), SIRET 91211809800025, 184 rue Marcel Hartmann, 94200 Ivry-sur-Seine, France.

Contact for any question or rights request: contact@geopromptly.com.

Account data: email address, hashed password (never readable by us), interface language, creation and sign-in dates.

Service usage data: project names, domains and URLs you import, selected topics, personas, generated instructions, credits consumed and operation history.

Technical data: server logs required for operation and security (timestamp, request type, errors). Payment data: name, billing address and country are processed by our payment provider; we never have access to card numbers.

No advertising analytics, no marketing trackers and no automated profiling with legal effects are used.

Providing the service and managing accounts and projects: performance of the contract.

Billing, accounting and fraud prevention: performance of the contract and legal obligations.

Service emails (address confirmation, password reset, account notifications): performance of the contract. No promotional email is sent without separate consent.

Security, abuse prevention and reliability improvements: legitimate interest, limited to what is necessary.

Application hosting: Lovable, delivered through Cloudflare.

Database, authentication and email queue: managed Supabase infrastructure located in the European Union.

Transactional email delivery: Mailgun, through our sending domain notify.geopromptly.com.

Payment, invoicing and taxes: Paddle.com Market Limited, Merchant of Record for our orders, controller for billing data and recipient of the data required for the sale.

Instruction generation and validation: Anthropic (language models), using only the project data required for generation.

Public data sourcing: DataForSEO and Bright Data, to query search results and public pages. These providers receive no account data.

Some providers (notably language model providers, email delivery and data sourcing) may process data outside the European Union.

Such transfers rely on the European Commission's standard contractual clauses or an equivalent mechanism, and are limited to the data strictly necessary for the feature concerned.

Account and project data: kept for the life of the account, then deleted when the account is deleted.

Technical logs: twelve (12) months maximum. Accounting records and invoices: ten (10) years, as legally required.

Logged service emails (delivery status): twelve (12) months.

Database access is partitioned per user at the database engine level (row-level security policies): one account technically cannot read another account's projects.

Traffic is encrypted in transit (HTTPS), passwords are stored as hashes, and service keys are never exposed to the browser.

You have rights of access, rectification, erasure, restriction, objection and portability, and the right to withdraw consent where it is the legal basis.

You can delete your account at any time from settings, which erases your account and project data. For any other request, email contact@geopromptly.com: we answer within one month at most.

You may lodge a complaint with the French CNIL (www.cnil.fr) or the data protection authority of your country of residence.

The service only uses strictly necessary cookies and local storage: keeping your session signed in, your chosen language and display preferences.

No advertising, third-party analytics or cross-site tracking cookie is set. These necessary cookies require no consent banner; if an analytics tool is added in future, a prior consent banner will be implemented.