Privacy Policy

Who we are

GeoNexa is a product of Nexora AI Consultancy FZ-LLC, a Free Zone company registered with the Ras Al Khaimah Economic Zone Authority (RAKEZ), United Arab Emirates (licence 47033418). In this policy, “we” and “GeoNexa” mean that company. For any privacy question, email hello@geonexa.ai.

What we collect

• Free scans (no account). When you run a scan without signing up, we process the website URL you enter and the scan result. We do not ask for, or store, your email for a free scan.
• Account data. If you create an account, we store your email address and an authentication record. We never see or store your password in readable form — authentication is handled by Supabase.
• Project data. The brands, websites, and buyer questions you choose to track, plus the scan results and reports we generate for them.
• Billing data. If you subscribe to a paid plan, payment is processed by Stripe. We store a customer and subscription reference, not your card number — Stripe holds card details, not us.
• Usage analytics. We use Vercel Web Analytics, which is cookieless and does not build a profile of you or track you across other sites. It tells us aggregate things like which pages are visited, nothing that identifies you personally.

How a scan works, data-wise

To measure your visibility, we send buyer-style questions and your brand or domain name to the AI engines we track — ChatGPT (OpenAI), Perplexity, Gemini (Google), Claude (Anthropic), and DeepSeek — and read what they answer. We send the question and the brand name, not your account email or any personal detail about you. Each engine processes that request under its own terms.

Why we use it

• To run the scans and generate the visibility scores, rankings, and fix plans you asked for.
• To send scheduled reports and account or service emails you have opted into.
• To take payment and manage your subscription.
• To keep the service secure and understand, in aggregate, how it is used.

We do not sell your data, and we do not use it to train our own models or advertise to you.

Who processes data for us

We rely on a small set of vendors, each for one job:

• Supabase — authentication and database.
• Vercel — hosting and cookieless analytics.
• Stripe — payment processing.
• Postmark — sending your reports and account emails.
• OpenAI, Anthropic, Google, Perplexity, DeepSeek — the AI engines a scan queries.

How long we keep it

Account and project data is kept for as long as your account is active. If you cancel, your data drops to the free tier and projects over the free limit are locked read-only rather than deleted, so you can return to them. Ask us to delete your account and we will remove your data, subject to any records we must keep for legal or accounting reasons.

Your rights

Wherever you are — and specifically if you are in the UK, the EU, or another region with data-protection law — you can ask us to access, correct, export, or delete your personal data, and to stop sending you non-essential email. Email hello@geonexa.ai and we will act on it. You can also unsubscribe from reports at any time from the email itself.

International transfers

We operate from the UAE and our vendors operate globally, so your data may be processed in the United States, the European Union, and elsewhere. We only use vendors that offer appropriate safeguards for that transfer.

Changes

If we change this policy we will update the effective date above and, for material changes affecting account holders, notify you by email.