Privacy policy

Controller

The data controller is the owner of geoplusacademy.com. Contact for any privacy matter: privacidad@geoplusacademy.com.

What data we process and why

• Account and access. Your email, language and currency, to create your account and send you the login link (we don't use passwords). Basis: performance of the contract or, if you only use the free lessons, your request.
• Course progress. Which lessons you marked as done and when. Basis: performance of the contract.
• Subscription and billing. Your subscription status and your Stripe customer and subscription IDs. Card details are handled by Stripe and never reach our servers. Basis: performance of the contract and tax obligations.
• GEO lab. The name and domain of your brand and of up to three competitors, your prompts and the weekly results. Basis: performance of the contract. Don't include personal data in your prompts.
• Free audit. The URL you audit and its report, kept for 24 hours so the analysis isn't repeated. Basis: your request.
• Security. The IP address of each request, to limit abuse (for example, the number of links or audits per hour) and in the server logs. Basis: our legitimate interest in protecting the service.
• Statistics. We use our own cookieless analytics, hosted on our server, which counts visits in aggregate without identifying you. Basis: legitimate interest.

Providers

• OVHcloud: the server (VPS) that runs the site, the database, email and analytics, in the European Union.
• Stripe (Stripe Payments Europe, Ireland): payments, invoices, taxes and the customer portal. It may transfer data to the US under the EU-US Data Privacy Framework and standard contractual clauses.
• Cuéntica (Spain): accounting and invoicing.
• OpenAI, Perplexity and Google (Gemini): the lab sends them your prompts and receives their answers to check whether they cite your brand. We don't send them your email or account data. These providers may process data in the US with equivalent safeguards.

We don't sell your data or use it for advertising.

How long

• Your account, progress and lab, for as long as you have an account. If you delete it, they're erased within 30 days.
• Login links expire after 15 minutes; sessions after 30 days without use.
• Billing data, 6 years, as commercial and tax law requires.
• Server logs, 14 days. Audit reports, 24 hours.

Your rights

You can ask for access, rectification, erasure, objection, restriction and portability of your data by writing to privacidad@geoplusacademy.com from your account email. If you're not satisfied with our answer, you can complain to the Spanish Data Protection Agency (aepd.es) or the authority where you live.