Geonome.ai Privacy Policy

Last updated: September 21, 2026

This Privacy Policy explains what information Geonome.ai collects, why we collect it, how we use and share it, and the choices and rights available to you.

Geonome.ai is operated by Geonome AI, with its principal place of business at No. 1190/1, FD 225, 4th Floor, HSR Layout, Sector 3, 22nd Cross Road, Bengaluru 560102, India. In this Privacy Policy, "Geonome," "we," "our," and "us" refer to Geonome AI.

Geonome.ai is an analytics platform designed to help businesses monitor and analyse how their brands, products, websites, competitors, and related topics are represented, mentioned, cited, or otherwise surfaced in answers and results generated by supported AI systems and AI-powered search services.

This Privacy Policy applies to the Geonome.ai website, application, and related services collectively referred to as the "Services."

By using the Services, you acknowledge that you have read this Privacy Policy. Where applicable law requires consent for a particular activity, we will request that consent separately.

1. What We Collect and Why

Account Information

When you create or use a Geonome account, we may collect your:

  • Name;
  • Email address;
  • User and account identifiers;
  • Organisation or company name;
  • Workspace membership and user role;
  • Account status; and
  • Authentication information.

We use this information to create and administer your account, authenticate you, provide access to the Services, communicate with you, maintain account security, and provide support.

Google Sign-In

If you sign up or sign in using Google, we request only basic Google Sign-In permissions: openid, userinfo.email, and userinfo.profile. Through those permissions, we may receive your Google Account identifier, name, email address, and profile image.

We use this information to authenticate you, create and administer your account, associate your activity with the correct account, provide account-related functionality, and protect the security of the Services.

We do not use information received through Google Sign-In to build advertising audiences or for targeted or personalised advertising.

If you separately subscribe to marketing communications, we may use the email address you provide for that purpose. You may unsubscribe from marketing communications at any time.

We may share Google Sign-In information with service providers that support authentication, hosting, security, and operation of the Services, but only as reasonably necessary for them to provide those services to us.

Google Sign-In information is retained in accordance with the retention provisions of this Privacy Policy. You may request deletion of information associated with your Geonome account by contacting privacy@geonome.ai.

Geonome's use of information received from Google APIs will comply with the Google API Services User Data Policy.

Product and Monitoring Information

When you configure or use the Services, we may collect and process information that you provide to configure, operate, and use the Services, including but not limited to:

  • Inputs such as prompts, queries, topics, and monitoring instructions;
  • Entities and parameters such as brand, organisation, product, and competitor names, domains, URLs, countries or regions, languages, platforms, and models;
  • Settings, preferences, tags, reporting parameters, and workspace configurations;
  • Outputs generated by the Services, including reports, dashboards, insights, annotations, saved results, and exports;
  • Feedback, corrections, and other information you submit; and
  • Other information and operational data reasonably necessary to provide, maintain, secure, and improve the Services.

We use this information to run the monitoring requested by you, generate reports and dashboards, analyse brand and domain visibility, identify trends, calculate performance indicators, and provide and improve the Services.

Information submitted through the Services may contain personal information if you choose to include information relating to an identifiable individual. You are responsible for ensuring that you have the authority to submit and process that information.

Geonome is not designed to process sensitive personal information through prompts or monitoring configurations. You should not submit government identification details, complete financial credentials, health information, biometric information, confidential personal information, or personal information that is unnecessary for the monitoring purpose.

Some Service features may involve sharing or transmitting relevant inputs, configurations, technical information, and generated results with third-party AI, search, data, infrastructure, and other service providers that help us provide, operate, secure, and improve the Services.

AI Answers and Public-Source Information

To provide the Services, we may obtain and analyse:

  • AI-generated answers and search results;
  • Citations and source references;
  • Source URLs, domains, and page titles;
  • Publication and website information;
  • Publicly available text, snippets, and metadata; and
  • Related information available through AI-powered services, search tools, websites, and other public or lawfully available sources.

We use this information to generate visibility analytics, citation analysis, source analysis, trends, benchmarks, reports, and other product features.

Publicly available content may incidentally include names or other information relating to individuals.

Billing, Subscription, and Transaction Information

When you view localized pricing, start or administer a free trial, add or update a payment method, purchase or renew a subscription, manage billing, cancel a subscription, or request a credit or refund, Geonome, Paddle, and their relevant payment and service providers may process information such as:

  • Billing-contact name and email address;
  • Organisation or legal-business name;
  • Country, postal or PIN code, and billing address;
  • Tax-registration information, including applicable GST or VAT details;
  • Paddle customer, address, business, subscription, transaction, invoice, refund, and adjustment identifiers;
  • Subscription items, trial and billing-period dates, subscription status, renewal and cancellation information, and payment state;
  • Invoice, refund, credit, chargeback, dispute, and billing-support information;
  • Limited payment-method information made available by Paddle, such as payment-method type, card brand, last four digits, and expiry; and
  • Fraud, abuse-prevention, tax, regulatory, and security information.

When Paddle.js is loaded on a pricing or checkout page, Paddle may automatically receive your IP address and use it to estimate your country or region, localize or preview currency and pricing, estimate applicable taxes, present an appropriate checkout, and support fraud prevention and security. This is approximate location information and not precise GPS location. Geonome does not necessarily receive or store the IP address solely because Paddle processes it for these purposes.

Complete payment credentials are collected and processed directly by Paddle and its payment providers. We do not receive or store customers' full payment-card numbers, card security codes, or complete bank-account credentials.

Geonome may receive billing, subscription, transaction, payment-status, refund, and related information from Paddle through its checkout, APIs, webhooks, customer portal, and support processes. We may maintain local billing and subscription records to grant and enforce product access, administer subscriptions, provide customer and billing support, reconcile transactions, maintain accounting and tax records, prevent fraud and abuse, handle disputes and chargebacks, and support audits.

Paddle acts as the merchant of record and authorised reseller for transactions it processes and handles payment collection, applicable tax calculation and remittance, invoicing, refunds, chargebacks, and related transaction administration. Paddle processes personal information for its merchant-of-record activities as a separate controller under its Privacy Notice.

Usage, Device, and Security Information

When you access or use the Services, we may automatically collect information such as:

  • IP address;
  • Browser type and version;
  • Device type;
  • Operating system;
  • Application version;
  • Referring page or website;
  • Pages, features, and reports accessed;
  • Dates and times of access;
  • Session and analytics identifiers;
  • Interaction events;
  • Request and response metadata;
  • Error and crash information; and
  • Security and authentication events.

We may derive an approximate country, region, or city from your IP address. We do not use this information to determine your precise physical location.

We use this information to operate and secure the Services, prevent abuse, authenticate users, diagnose errors, maintain availability, improve performance and usability, understand how features are used, and investigate security incidents.

Website Analytics, Advertising, and Cookies

We may use cookies, pixels, local storage, software development kits, and similar technologies to operate, secure, analyse, improve, and market the Services.

These technologies may collect information such as online identifiers, IP addresses, browser and device information, pages visited, referring websites, interactions, clicks, campaign information, and conversions.

Payment, pricing-localization, and checkout technologies provided by Paddle or another disclosed merchant of record may process IP addresses, browser and device information, approximate location, pricing and checkout interactions, and related transaction information when a pricing or checkout page is loaded. Their use may be governed by the provider's own privacy notice and applicable choices or consent requirements.

We may use the following categories of technologies:

  • Essential and security technologies to authenticate users, maintain sessions, prevent abuse, and provide core functionality;
  • Preference and functionality technologies to remember settings and improve usability;
  • Analytics and performance technologies to understand use of the Services, diagnose problems, measure performance, and improve features;
  • Advertising and marketing technologies to measure campaigns, reach or create advertising audiences, retarget website visitors, deliver or measure advertisements, and understand the effectiveness of our marketing; and
  • Email-measurement technologies to understand whether marketing messages were delivered, opened, or interacted with.

Where required by applicable law, we will obtain consent or provide the required choice or opt-out mechanism before using non-essential analytics, advertising, or similar technologies.

You can control or delete cookies using your browser or device settings. Disabling essential cookies may prevent parts of the Services from functioning correctly.

The restriction on using Google Sign-In information for targeted or personalised advertising continues to apply regardless of the other advertising and analytics activities described in this section.

Business Contact and Prospect Information

We may obtain business contact information such as:

  • Name;
  • Professional email address;
  • Job title;
  • Organisation;
  • Professional profile; and
  • Publicly available business information.

We may obtain this information from business websites, professional directories, referrals, events, social or professional networks, and third-party marketing or business-data providers, where permitted by applicable law.

We use this information to identify and contact potential business customers, agencies, partners, and other organisations that may be interested in Geonome, conduct business-to-business marketing and outreach, and maintain records of our communications and marketing preferences.

You may ask us to stop sending marketing communications at any time by using the unsubscribe mechanism provided in the communication or by contacting privacy@geonome.ai.

Communications and Information You Provide

We may collect information contained in:

  • Support requests;
  • Emails and contact-form submissions;
  • Chat messages;
  • Feedback;
  • Survey responses;
  • Newsletter registrations;
  • Sales and business communications; and
  • Other correspondence with us.

We use this information to respond to you, provide support, maintain records of our communications, understand customer needs, improve the Services, and send administrative, product, or marketing communications.

You may unsubscribe from marketing emails using the unsubscribe facility in the message. You may still receive service-related communications necessary to operate your account or provide the Services.

Aggregated and De-Identified Information

We may create, use, retain, and share aggregated, anonymised, or de-identified information that cannot reasonably identify you or another individual.

We may use this information for:

  • Analytics and statistical analysis;
  • Research;
  • Benchmarking;
  • Market and industry insights;
  • Identifying trends;
  • Security and performance analysis;
  • Product development;
  • Improving the Services;
  • Developing new features, products, or services; and
  • Publishing reports, statistics, or insights that do not identify individual users or customers.

2. Legal Bases Where European Data-Protection Law Applies

Where the European Union General Data Protection Regulation, the United Kingdom General Data Protection Regulation, or another law that requires us to identify a legal basis applies to our processing, we rely on one or more of the following legal bases, as appropriate:

  • Performance of a contract or steps taken at your request before entering into a contract: to create and administer accounts, authenticate users, provide requested monitoring and analysis, operate workspaces, administer trials and subscriptions, process transactions, and provide support;
  • Legitimate interests: to operate, secure, maintain, analyse, and improve the Services; prevent fraud, abuse, and security incidents; understand use of the Services; communicate with customers and business contacts; conduct appropriate business-to-business outreach; and establish, exercise, or defend legal claims, provided that those interests are not overridden by applicable data-protection rights and interests;
  • Consent: where we ask for consent for optional marketing communications, non-essential cookies or similar technologies, or other processing for which applicable law requires consent; and
  • Legal obligations: to comply with applicable tax, accounting, regulatory, law-enforcement, and other legal requirements.

The legal basis that applies depends on the information, purpose, and context of the processing. Where we rely on consent, you may withdraw it at any time, without affecting processing carried out before withdrawal. Where we rely on legitimate interests, you may have the right to object to the processing as described in Section 5.

3. When We Share or Disclose Information

We do not sell personal information for money. We may disclose personal information to service providers and other recipients as described below. Depending on applicable law and how a recipient uses the information, certain disclosures for advertising or analytics may be considered a "sale," "sharing," targeted advertising, or a similar regulated activity even when no money is exchanged.

We may share or disclose information in the following circumstances.

Service Providers

We use service providers to help us operate the Services. These may include providers supporting:

  • Cloud hosting and storage;
  • Databases;
  • Authentication;
  • Email delivery;
  • Analytics;
  • Advertising and campaign measurement;
  • Error monitoring;
  • Customer support;
  • Security;
  • Software development; and
  • Other business and technical operations.

These providers may process information only as reasonably necessary to provide their services to us, subject to applicable contractual, confidentiality, security, or data-protection obligations.

AI, Search, and Data-Service Providers

To provide the Services, we may use third-party service providers and automated systems to obtain, process, and analyse responses and publicly available information from AI-powered services, search tools, websites, and related sources.

Information processed for this purpose may include customer-provided inputs, monitoring configurations, technical information, and service-generated data relevant to providing monitoring, analysis, reporting, security, and related features.

We may collect and analyse the resulting AI-generated answers, citations, source URLs, page and domain information, and related publicly available content or metadata.

Merchant of Record and Payment Providers

For transactions processed through Paddle, Paddle acts as the merchant of record, authorised reseller, and seller for the transaction. Information necessary to localize pricing, offer or administer a trial, process and administer a purchase or renewal, manage billing, calculate and remit taxes, prevent fraud, issue invoices, handle refunds and chargebacks, and provide transaction support may be collected directly by, shared with, or received from Paddle and its payment, invoicing, banking, tax, identity-verification, fraud-prevention, and other service providers.

Paddle processes personal information for these activities as a separate controller under its Privacy Notice. We may use another disclosed merchant of record for future transactions, in which case that provider may process information under its own terms and privacy notice.

Advertising and Analytics Providers

Advertising, analytics, email, and campaign-measurement providers may receive information such as:

  • Online identifiers;
  • Cookie and pixel information;
  • IP addresses;
  • Browser and device information;
  • Website and product interactions;
  • Campaign information;
  • Conversions; and
  • Email delivery, opening, and link-interaction information.

They may use this information to provide analytics, measure marketing performance, reach or create advertising audiences, deliver or measure advertisements, and provide related services.

Where applicable law treats this activity as a sale, sharing, targeted advertising, or a similar regulated activity, we will provide any legally required notice, consent mechanism, or opt-out right.

Information received through Google Sign-In will not be used to build advertising audiences or for targeted or personalised advertising.

Affiliates and Group Companies

We may share information with affiliates or group companies that we may have in the future where reasonably necessary to operate, support, secure, develop, or administer the Services or our business, provided that their processing remains consistent with this Privacy Policy.

Legal and Protective Disclosures

We may disclose information where reasonably necessary to:

  • Comply with applicable law, regulation, legal process, court order, or lawful governmental request;
  • Investigate suspected fraud, abuse, or unlawful activity;
  • Protect the security and integrity of the Services;
  • Enforce our agreements;
  • Establish, exercise, or defend legal claims; or
  • Protect the rights, safety, and property of Geonome, our users, or others.

Incorporation, Financing, Acquisition, or Sale

Information may be disclosed or transferred in connection with:

  • The incorporation or restructuring of the business operating Geonome;
  • An investment or financing process;
  • Due diligence;
  • A merger or acquisition;
  • A reorganisation;
  • A sale of the business or its assets;
  • An insolvency proceeding; or
  • A similar business transaction.

Information may be shared with professional advisers, potential investors, purchasers, successor entities, or other relevant participants where reasonably necessary for the transaction and subject to appropriate confidentiality or legal protections.

If a transaction results in material changes to how your personal information is processed or makes it subject to a materially different privacy policy, we will provide notice before those changes take effect where required by applicable law.

At Your Direction

We may disclose information when you direct us to do so, authorise a disclosure, or otherwise consent to the disclosure.

Aggregated and De-Identified Information

We may use and share aggregated, anonymised, or de-identified information for the purposes described in this Privacy Policy, provided that the information cannot reasonably identify an individual.

4. Retention and Deletion

We retain personal information only for as long as reasonably necessary to provide and secure the Services, fulfil the purposes described in this Privacy Policy, comply with applicable law, resolve disputes, and protect our legitimate legal and business interests.

Account and Product Information

Account information and information associated with your workspace may be retained while your account remains active.

If you close your account or submit a valid deletion request, we will delete or anonymise the relevant personal information within a reasonable period, unless continued retention is necessary for:

  • Providing a service requested by you;
  • Legal, tax, accounting, or regulatory requirements;
  • Security and fraud prevention;
  • Establishing, exercising, or defending legal claims;
  • Resolving disputes;
  • Enforcing our agreements; or
  • Other purposes permitted or required by applicable law.

Billing and Tax Records

Billing, invoice, subscription, transaction, accounting, tax, refund, credit, chargeback, dispute, fraud-prevention, and audit information may be retained after an account, workspace, or organisation is closed or deleted for the period reasonably necessary or required under applicable tax, accounting, corporate, payment, fraud-prevention, dispute-resolution, and other laws and obligations.

Logs and Security Records

Technical, authentication, access, processing, and security logs may be retained for as long as reasonably necessary for security, troubleshooting, abuse prevention, auditing, service integrity, and legal compliance.

Backups

Information deleted from active systems may remain temporarily in secure backups until those backups are overwritten or deleted through our normal backup cycle.

We will not restore deleted information from a backup except where reasonably necessary for security, disaster recovery, service integrity, or legal compliance.

Aggregated and De-Identified Information

Information that has been aggregated, anonymised, or de-identified so that it can no longer reasonably identify an individual may be retained for longer periods, including indefinitely, for the purposes described in this Privacy Policy.

5. Your Choices and Rights

Depending on your location and applicable law, you may have rights concerning your personal information.

These may include the right to:

  • Request information about the personal information we process about you;
  • Access or obtain a copy of your personal information;
  • Correct, complete, or update inaccurate or incomplete information;
  • Request deletion of your personal information;
  • Withdraw consent where processing is based on consent;
  • Object to or request restriction of certain processing;
  • Request portability of certain information;
  • Opt out of certain targeted advertising, sales, or sharing;
  • Unsubscribe from marketing communications;
  • Nominate another individual to exercise rights where applicable law provides that right; and
  • Submit a privacy concern or grievance; and
  • Lodge a complaint with a competent data-protection authority or regulator where applicable law provides that right.

These rights may be subject to limitations and exceptions under applicable law.

To exercise a privacy right, withdraw consent where applicable, request account deletion, or submit a grievance, contact us at privacy@geonome.ai.

Please provide the email address associated with your account and enough information for us to identify the account and understand the request.

We may request additional information reasonably necessary to verify your identity or authority and to protect personal information from unauthorised access or disclosure.

We will respond within the period required by applicable law. We may decline or limit a request where permitted by law, including where we cannot verify the requester, the request would adversely affect another person's rights, or continued processing or retention is legally permitted or required.

6. How We Protect Information

We use reasonable and appropriate technical and organisational measures designed to protect personal information against unauthorised access, acquisition, loss, misuse, alteration, destruction, or disclosure.

These measures may include access controls, authentication safeguards, encryption where appropriate, logging, monitoring, backups, vulnerability management, restrictions on personnel access, and contractual protections for relevant service providers.

No internet transmission, software system, or storage environment is completely secure. We therefore cannot guarantee absolute security.

You are responsible for protecting your account credentials and for notifying us promptly if you believe your account has been accessed without authorisation.

7. International Processing

We and our service providers may access, process, and store information in the European Economic Area, India, the United States, and other countries where we or they operate. Content-delivery networks and similar providers may process limited network, device, and request information in additional locations.

The privacy and data-protection laws of those countries may differ from the laws applicable in your location.

Where applicable law requires safeguards for an international transfer, we will take reasonable steps to implement the required contractual, organisational, or other safeguards.

8. Automated Analysis

Geonome uses automated systems, algorithms, and statistical methods to obtain and analyse AI-generated answers, citations, source domains, visibility results, trends, and performance indicators relating to brands, businesses, products, websites, or topics.

Geonome is not designed to use personal information to:

  • Assess an individual's creditworthiness;
  • Make lending, employment, insurance, housing, healthcare, or similar decisions;
  • Evaluate sensitive personal characteristics of an individual; or
  • Make decisions based solely on automated processing that produce legal or similarly significant effects on an individual.

Reports, scores, trends, and insights generated by Geonome are intended to support business and marketing analysis. Customers remain responsible for how they interpret and use those insights.

9. Children's Information

Geonome is a business-oriented service and is not intended for individuals under 18 years of age.

We do not knowingly permit individuals under 18 to create accounts or knowingly collect personal information directly from them.

If you believe that an individual under 18 has provided personal information to us, contact privacy@geonome.ai so that we can review and, where appropriate, delete the information.

Customers must not use the Services to submit or process children's personal information unless they have obtained all legally required authorisations and made any necessary arrangements with us.

10. Changes and Contact

We may update this Privacy Policy to reflect changes to the Services, our practices, technology, providers, or applicable law.

When we update the Privacy Policy, we will revise the "Last updated" date at the top. If we make material changes, we will provide additional notice or obtain consent where required by applicable law.

Questions, privacy requests, account-deletion requests, consent withdrawals, and grievances may be sent to:

Geonome AI
No. 1190/1, FD 225, 4th Floor
HSR Layout, Sector 3, 22nd Cross Road
Bengaluru 560102, India

Privacy and grievance contact: privacy@geonome.ai