Privacy Policy

GEO BUBBLES ("we", "us", or "our"), located at , operates the website geobubbles.com and the GEO BUBBLES platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our Service, in compliance with the Swiss Federal Act on Data Protection (FADP / nDSG), the EU General Data Protection Regulation (GDPR), and other applicable data protection laws.

1. Data Controller

GEO BUBBLES

Email: privacy@geobubbles.com

2. Data We Collect

2.1 Account Data

When you register, we collect:

• Email address
• Name (if provided)
• Password (stored securely hashed — we never store plaintext passwords)
• Profile information you choose to add (company name, avatar)

2.2 Usage Data

We automatically collect:

• Pages visited, features used, and interactions within the platform
• Chat queries and AI interactions (to provide the Service)
• Device type, browser type, operating system
• IP address (anonymized where possible)
• Date and time of access

2.3 Google Search Console Data

If you connect your Google Search Console account, we access search performance data (queries, pages, clicks, impressions, CTR, position) via the Google API. We store this data to provide analytics and reporting features. We do not share this data with third parties.

2.4 Payment Data

Payments are processed by Stripe, Inc. We do not store credit card numbers or full payment details.

2.5 Contact Form Data

When you submit our contact form, we collect your name, email address, company (optional), subject, and message. This data is used solely to respond to your inquiry.

2.6 AI Support Chatbot ("Bubbly")

Our websites offer an AI support assistant called "Bubbly", available to both visitors and signed-in users. Using the chatbot is entirely voluntary, and you alone decide what personal information you disclose in the chat. Please do not enter passwords, payment card details, health data, or other sensitive information into the chat.

• Your messages, the assistant's replies, timestamps, and a session identifier
• The page and website from which the conversation was started, plus basic browser information
• The email address you provide when you send us a message or ask to be contacted by a human
• Your thumbs up / thumbs down rating of a conversation, if you give one
• If you are signed in, your account email so the assistant can answer account-specific questions (plan, limits, sites)

Chat conversations are transcribed and retained as support tickets in our support system so that our team can follow up on your request and improve the quality of our support. Conversations may be reviewed by our support staff. To generate replies, your messages are transmitted to our AI model providers; these providers do not use the content to train their models.

The chatbot only provides information and support. It does not make automated decisions that produce legal effects concerning you or similarly significantly affect you (GDPR Art. 22). You can reach a human at any time via the "Message us" tab in the chat window.

3. How We Use Your Data

We use your personal data for the following purposes:

• Providing the Service: Account management, authentication, delivering analytics and AI-powered insights
• Communication: Responding to inquiries, sending transactional emails
• Support and AI assistance: Operating the Bubbly chatbot, triaging incoming requests, and improving answer quality
• Improvement: Analyzing usage patterns to improve features and user experience
• Security: Detecting and preventing fraud, abuse, and unauthorized access
• Legal compliance: Meeting our legal obligations under applicable law

4. Legal Basis for Processing (GDPR Art. 6)

• Contract performance (Art. 6(1)(b)): Processing necessary to provide the Service
• Legitimate interest (Art. 6(1)(f)): Analytics, security, and service improvement
• Legitimate interest (Art. 6(1)(f)): Retaining support chat transcripts to answer your request, detect abuse, and rate-limit misuse of the chatbot
• Consent (Art. 6(1)(a)): Optional cookies and analytics
• Legal obligation (Art. 6(1)(c)): Where required by law

5. Cookies and Tracking

5.1 Essential Cookies

We use strictly necessary cookies to maintain your session, authenticate your account, and remember your preferences. These cookies cannot be disabled.

5.2 Analytics Cookies

We use Google Analytics 4 (GA4) to understand how visitors interact with our website. GA4 collects anonymized usage data. You can opt out via our cookie consent banner.

5.3 Your Cookie Choices

When you first visit our site, a cookie banner allows you to accept or reject non-essential cookies.

6. Data Sharing and Third Parties

We share personal data only with the following categories of recipients:

• Hosting & Infrastructure: Cloud infrastructure providers in the EU/EEA
• Payment Processing: Stripe, Inc.
• Analytics: Google LLC
• AI Processing: AI model providers for chat and chatbot functionality
• Support & chatbot infrastructure: Providers that store support transcripts and deliver our support emails
• Google APIs: When you connect Google Search Console

We do not sell your personal data. We do not share your data with third parties for their own marketing purposes.

7. International Data Transfers

Where data is transferred to countries without an adequate level of data protection, we ensure appropriate safeguards including EU-US Data Privacy Framework, Standard Contractual Clauses (SCCs), and Swiss-US Data Privacy Framework.

8. Data Retention

• Account data: Retained for the duration of your account.
• Usage and analytics data: Retained for up to 26 months (GA4 default).
• In-platform AI chat history: Retained while your account is active.
• Support chat transcripts and support tickets: Retained for up to 24 months after the conversation is closed.
• Contact form submissions: Retained for up to 12 months after resolution.
• Payment records: Retained as required by Swiss law (up to 10 years).

9. Your Rights

Under the GDPR and Swiss FADP, you have the right to:

• Access your personal data and obtain a copy
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten")
• Restrict processing of your data
• Data portability — receive your data in a structured, machine-readable format
• Object to processing based on legitimate interest
• Withdraw consent at any time

To exercise your rights, contact us at privacy@geobubbles.com. We will respond within 30 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit (TLS/HTTPS) and at rest
• Secure password hashing
• Row-level security policies on database tables
• Regular security reviews
• Access controls and principle of least privilege

11. Children's Privacy

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children.

12. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the competent supervisory authority.

• Switzerland: Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch
• EU/EEA: Your local data protection authority

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on our website or sending you an email.

14. Contact

For questions or concerns about this Privacy Policy or our data practices, contact us at:

GEO BUBBLES

Email: privacy@geobubbles.com