Privacy policy

§ 01Scope and data controller

This policy covers personal data processed through the geodog.co website, the GeoDog app and related services (together, the "Service"). It is based on Türkiye's Law No. 6698 on the Protection of Personal Data (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR).

GeoDog ("GeoDog", "we") is the data controller for your personal data. For any privacy request, write to privacy@geodog.co.

§ 02Data we process

Depending on how you use the Service, we may process the following categories of data:

• Account data: name, email address, an irreversibly hashed form of your password, language preference.
• Workspace and project data: project names, the brands and keywords you track, competitor lists, team members and roles.
• Search data: the brand or keyword you enter, the market and answer language you choose, the generated questions and the answers returned by AI providers.
• Billing data: subscription plan, status and period. Card details are held by the payment provider and never reach us.
• Technical and security data: shortened values derived from your IP address, browser information, session records and limited logs used to prevent abuse.
• Communication data: messages you send us through the contact form or by email.

§ 03Purposes and legal bases

We process your data only for specific, explicit and legitimate purposes:

• Providing the Service and managing your account and searches — performance of a contract (KVKK Art. 5/2-c; GDPR Art. 6/1-b).
• Fair use of free searches, preventing fraud and abuse, and security — legitimate interest (KVKK Art. 5/2-f; GDPR Art. 6/1-f).
• Billing, accounting and legal obligations — compliance with a legal obligation (KVKK Art. 5/2-ç; GDPR Art. 6/1-c).
• Answering support requests and sending essential service notices — performance of a contract and legitimate interest.
• Marketing and newsletter emails — only with your explicit consent (KVKK Art. 5/1; GDPR Art. 6/1-a), which you can withdraw at any time.

§ 04Your searches and AI providers

GeoDog's core function is to ask AI assistants questions about the brand or keyword you enter and measure the answers. Your search text and the questions derived from it are therefore sent to the API services of OpenAI, Google, Anthropic and Perplexity.

We send these providers only the text needed for the analysis — never your name, email address or account details. The providers' API terms state that submitted data is not used to train their models; see each provider's policies for details.

We recommend not entering personal or confidential information in the search box.

§ 05Service providers and international transfers

To run the Service, we share data with the following providers, strictly limited to their role:

• Vercel — hosting of the web application.
• Cloudflare — content delivery, security and search-processing infrastructure.
• Supabase — database and authentication.
• Resend — delivery of transactional emails.
• Polar — payments and subscription management (merchant of record).
• Google — tag management and, only with your consent, analytics measurement (Google Tag Manager, Google Analytics).
• OpenAI, Google, Anthropic, Perplexity — performing the search analysis.

Some of these providers are located outside Türkiye, so your data may be transferred abroad. We make such transfers with safeguards that comply with KVKK Art. 9 and the relevant GDPR provisions (standard contracts and, where required, explicit consent). We never sell your data or share it for advertising.

§ 06Retention

We keep your data only as long as needed for its purpose:

• Account and project data: for as long as your account is open; deleted or anonymised within a reasonable time after account deletion.
• Search results: for the life of your account so you can view them.
• Guest (no-account) searches: deleted after a limited period unless moved into an account.
• Billing records: for the period required by tax and commercial law.
• Security logs: for the short period needed to prevent abuse.

§ 07Your rights

Under KVKK Art. 11 and the GDPR you have the right to:

• Learn whether your data is processed and, if so, request information about it.
• Ask for incomplete or inaccurate data to be corrected.
• Ask for your data to be deleted or destroyed.
• Learn which third parties your data has been transferred to.
• Receive your data in a structured, commonly used format (portability).
• Withdraw consent for consent-based processing and object to processing.
• Claim compensation if you suffer damage from unlawful processing.

§ 08How to make a request

To export your data or delete your account, use the options in your account settings. For anything else, simply write to privacy@geodog.co from the email address registered to your account.

We resolve requests within 30 days at the latest. If you are not satisfied with our answer, you can complain to the Turkish Personal Data Protection Authority or the data protection authority in your country.

§ 09Children

The Service is intended for businesses and professionals and is not designed for people under 18. If we learn that a child's data has been processed, we delete it.

§ 10Changes to this policy

We may update this policy from time to time. We announce significant changes by email or in-app notice before they take effect. The current version is always published on this page.