Privacy Policy

Effective Date: 1 June 2026
Published by: GEO Roadmap Limited, 72 Taharoto Road, B:HIVE Building (Level 1), Takapuna, Auckland 0622, New Zealand
Contact: legal@georoadmap.ai

GEO Roadmap Limited (“we”, “us”, “our”) is committed to protecting the privacy of our Subscribers and the individuals whose information passes through our Platform. This Privacy Policy explains what information we collect, how we use it, and the rights available to you.

We comply with the New Zealand Privacy Act 2020 and its Information Privacy Principles. We also observe the substantive requirements of the European Union General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA), and the APEC Privacy Framework, to the extent these apply to the personal data of our Subscribers and their contacts.

1. Information We Collect

1.1 Account and Billing Information

When a Subscriber registers, we collect: business name, contact name, email address, agency domain, and billing information (processed by our third-party payment processor; we do not store full payment card details).

1.2 Platform Usage Data

We collect information about how Subscribers use the Platform, including: Client Domains submitted for audit, Discovery Session inputs and transcripts, Roadmaps generated, credits used, and session and device data.

1.3 Client Domain Data

When a Subscriber submits a Client Domain, our Platform accesses publicly available information from that domain (HTML structure, metadata, structured data markup, robots.txt, and related files). We do not collect or store any personal data belonging to end users of the Client Domain.

1.4 Communications

If you contact us by email or through the Platform, we retain a record of that correspondence.

2. How We Use Your Information

• To verify agency eligibility and manage your account;
• To generate Audits, Discovery Sessions, and Roadmaps as requested;
• To process subscription payments and manage billing;
• To provide customer support;
• To improve the Platform’s scoring methodology and output quality using aggregated, de-identified data;
• To send service-related communications (product updates, billing notices). You may opt out of non-essential communications at any time;
• To detect fraud, abuse, or security incidents.

3. What We Do Not Do With Your Data

The following is an explicit and binding statement of our data use restrictions:

• We do not sell, rent, or trade Subscriber data or Client Domain data to any third party.
• We do not use Client Domain data submitted by Subscribers to prospect for, solicit, or contact those Client Domains independently or on behalf of any other entity.
• We do not share identifiable Subscriber data or Client Domain data with any third party except as described in clause 4 (Service Providers) or as required by law.
• We do not use Platform data to generate competitive intelligence for any entity other than the Subscriber that submitted the data.

These restrictions apply to all personnel, contractors, and service providers who access Platform data on our behalf, and are enforced through contractual obligations.

4. Service Providers and Data Processors

We engage third-party service providers (“processors”) to support the operation of the Platform. These include cloud infrastructure providers, payment processors, AI model API providers, and customer support tooling. Each processor is selected on the basis of demonstrated data security standards and is bound by a data processing agreement restricting their use of data to the services they provide to us.

We require all processors to maintain appropriate technical and organisational security measures and not to process personal data for any purpose beyond our documented instructions.

A current list of our key sub-processors is available on request at legal@georoadmap.ai.

5. International Data Transfers

Given that GEO Roadmap serves a global Subscriber base, personal data may be processed in jurisdictions other than the Subscriber’s home country. Where data is transferred outside of the European Economic Area, the UK, or other jurisdictions with transfer restrictions, we rely on: Standard Contractual Clauses (EU/UK SCCs), adequacy decisions where applicable, or other lawful transfer mechanisms.

New Zealand has been granted adequacy status by the European Commission, meaning transfers of personal data from the EU to GEO Roadmap (as a New Zealand entity) are lawful without additional safeguards on the initial transfer.

6. Data Retention

We retain account and billing data for as long as the Subscriber account is active and for seven years thereafter for legal and tax compliance purposes. Platform Output data (Audits, Discovery transcripts, Roadmaps) is retained for the duration of the subscription and deleted within 90 days of account closure unless the Subscriber requests earlier deletion. Aggregated, de-identified usage data may be retained indefinitely for platform improvement purposes.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• The right to access a copy of the data we hold about you;
• The right to correct inaccurate data;
• The right to erasure (“right to be forgotten”) subject to legal retention obligations;
• The right to restrict or object to processing;
• The right to data portability;
• The right to withdraw consent where processing is based on consent;
• For California residents (CCPA): the right to know, delete, and opt out of sale (we do not sell personal information).

To exercise any of these rights, contact us at legal@georoadmap.ai. We will respond within 20 working days (NZ Privacy Act standard) or 30 calendar days (GDPR standard), whichever applies to your jurisdiction.

8. Security

We implement industry-standard technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These include encryption in transit and at rest, access controls, and regular security reviews. No system is completely secure; in the event of a notifiable data breach, we will comply with applicable notification obligations.

9. Cookies and Tracking

The Platform uses cookies and similar technologies for session management, security, and analytics. A cookie notice is presented on first access. You may manage cookie preferences through your browser settings, though disabling certain cookies may affect Platform functionality.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or prominent notice on the Platform. The current version is always available at georoadmap.ai.

11. Contact and Complaints

For privacy-related enquiries, contact us at legal@georoadmap.ai. If you are not satisfied with our response, you may lodge a complaint with the New Zealand Privacy Commissioner (privacy.org.nz), your national data protection authority (for EU/UK residents), or the relevant authority in your jurisdiction.