Privacy Policy

Effective: March 19, 2026 | Last updated: March 19, 2026 Applies to: getgeoforge.com and all GEOforge products

1. Who We Are

GEOforge is an AI-powered Generative Engine Optimization (GEO) platform operated by Hop AI. We help businesses measure, build, and grow their brand's presence in AI-generated responses across platforms including ChatGPT, Perplexity, Gemini, Claude, Microsoft Copilot, and Google AI Overviews.

Our products include BaseForge, SignalForge, ContentForge, and CiteForge, accessible via the web platform at getgeoforge.com.

GEOforge / Hop AI acts as the Data Controller for personal data collected through our website and platform. For data processed on behalf of our clients (such as brand knowledge bases and content), clients act as Data Controllers and GEOforge acts as a Data Processor.

2. Data We Collect

We collect different types of information depending on how you interact with GEOforge.

Account & Identity Data Full name and email address (provided when invited to the platform); role and permission level within your organisation's account; encrypted passwords (bcrypt hashed — we never store plain-text passwords); session tokens and authentication credentials.

Brand & Business Data Brand name, website URL, description, and strategic goals; competitor names and domains you configure for monitoring; knowledge base documents, files, and content you upload; content topics, drafts, and published articles generated within the platform; CMS integration credentials (e.g., WordPress application passwords, Webflow API tokens).

Usage & Technical Data Log data including IP address, browser type, operating system, pages visited, and time spent; API request logs, error reports, and performance metrics; LLM usage logs including token counts, model used, and cost data (no prompt content stored long-term); AI crawler event data tracking how bots index your published content; Share of Voice (SoV) measurement data from LLM query results.

Communications Data Messages you send to our support team via email; demo request and enquiry form submissions; billing and invoicing correspondence.

We do not collect payment card details directly — all payments are processed by our third-party payment provider. We do not sell your data or use it for advertising targeting.

3. How We Use Your Data

We use your data for the following purposes:

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, our processing of your personal data is based on the following legal grounds:

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We share data with third parties only in the following limited circumstances.

Service Providers (Processors) We use vetted third-party service providers who process data on our behalf under strict contractual obligations, including: cloud hosting providers for platform infrastructure and secure data storage; AI/LLM providers to power content generation and analysis features (e.g., Anthropic, OpenAI, Google) — only the minimum necessary data is sent, and we use de-branded queries where possible; payment processors to handle subscription billing; analytics tools for platform performance monitoring (anonymised or aggregated where possible); and email delivery services for transactional and support communications.

CMS Integrations When you connect GEOforge to your WordPress site, Webflow collection, or Google Drive, content and credentials are shared with those platforms as directed by you. These integrations are governed by those platforms' own privacy policies.

Legal Requirements We may disclose your data to law enforcement, regulators, or courts when required by law, or when necessary to protect the rights, property, or safety of GEOforge, our clients, or others.

Business Transfers In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. We will notify you before such a transfer occurs.

6. AI & LLM Processing

GEOforge's core functionality relies on Large Language Models (LLMs). Here's how we handle data in the context of AI processing:

Note: AI-generated content may not always be accurate. You are responsible for reviewing, editing, and approving all AI-generated content before it is published.

7. Cookies & Tracking Technologies

We use cookies and similar tracking technologies on getgeoforge.com and within the GEOforge platform.

You can manage cookie preferences through our cookie consent banner or your browser settings. Disabling non-essential cookies will not affect your core use of the GEOforge platform.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law:

Data Type Retention Period
Account & profile data Duration of subscription + 30 days after cancellation
Brand knowledge base & content Duration of subscription + 30 days after cancellation
Published content records Duration of subscription (content on your own CMS is not deleted by us)
LLM usage logs 90 days for debugging; aggregated cost data retained longer
SoV measurement history Duration of subscription + 30 days
Support communications 3 years from last interaction
Billing & invoicing records 7 years (legal requirement)
Security & access logs 12 months

When a subscription ends, we will delete or anonymise your data within 30 days unless you request earlier deletion or we are legally required to retain it longer.

9. Your Privacy Rights

Depending on your location, you may have the following rights:

To exercise any of these rights, email us at privacy@getgeoforge.com with your name, account email, and the right you wish to exercise. We will respond within 30 days.

10. Security

We implement industry-standard security measures to protect your data, including: TLS 1.2+ encryption for all data in transit; bcrypt password hashing; JWT-based authentication with appropriate expiry policies; role-based access controls scoped to individual brand accounts; rate limiting on sensitive API endpoints; regular security reviews and access audits; and secure, access-controlled cloud storage for all uploaded files and knowledge base content.

No method of internet transmission or electronic storage is 100% secure. In the event of a data breach affecting your rights, we will notify you as required by applicable law.

11. International Data Transfers

GEOforge is operated by Hop AI, based in the European Union. Our infrastructure may involve service providers in various countries including the United States. When we transfer personal data outside the EEA or UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission and Enterprise Data Processing Agreements with all major LLM and cloud providers.

12. Children's Privacy

GEOforge is a professional B2B platform intended solely for use by businesses and individuals aged 18 and over. We do not knowingly collect personal data from children under the age of 18. If you believe a minor has provided us with personal data, please contact us at privacy@getgeoforge.com and we will promptly delete that information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date, notify platform users via email or in-app notification at least 14 days before the changes take effect, and where required by law, request your renewed consent.

14. Contact Us

GEOforge / Hop AI privacy@getgeoforge.com getgeoforge.com

We aim to respond to all privacy-related enquiries within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with your relevant supervisory authority. For UK users, this is the Information Commissioner's Office (ICO) at ico.org.uk.