Privacy Policy and Marketing Notice
Effective date：23 September 2026
This policy explains how GEO Score (“we”) collects and uses personal data, in line with the Personal Data (Privacy) Ordinance (Cap. 486).
1. Data we collect
- When you run a check: the URL you enter, brand and industry (if provided), IP address, browser and device information, referring page and time of use.
- When you buy: email address, name (if given on the checkout page), payment amount and status. Card details are handled by Stripe; we never receive card numbers.
- When you subscribe to the GEO playbook: email address and where you subscribed.
- When you browse the Site: usage data collected through cookies and similar technologies (see section 3).
2. How we use it
- To provide checks and reports, and deliver purchased reports by email;
- To prevent abuse (such as usage limits) and keep the Site secure;
- To analyse and improve the service;
- For marketing, including the online advertising described in section 3 and sending the GEO playbook to subscribers.
3. Cookies, tracking and online advertising
The Site may use cookies and similar technologies (such as the Meta Pixel, Google Analytics and Google Ads tags) to measure usage and show you relevant ads on platforms such as Facebook, Instagram and Google.
These ads may be based on how you used the Site — for example pages viewed, the kind of website you checked and whether you bought a report. For example, visitors who used the free check but did not buy may later see ads for the Site.
After a payment, we may send Meta the transaction amount, time and a hashed (irreversible) form of your email address from our server (Meta Conversions API) to measure ad performance; Meta does not receive your original email address or any card details.
You can delete or block cookies in your browser settings, and adjust the ads you see in your Facebook and Google ad preferences.
4. Direct marketing
- We only send promotional emails to people who subscribe to the GEO playbook. The email you give when buying a report is used only to deliver the report and for transactional notices; it will not receive promotional emails unless you subscribe separately.
- Every promotional email includes an unsubscribe link, and you can ask us to stop at any time by email.
- We do not sell your personal data.
5. Disclosure and service providers
We disclose only the data needed for the purposes above to providers that help run the service: Google Cloud / Firebase (hosting and storage), Stripe (payments), Resend (email delivery), Meta and Google (advertising and analytics). We may also disclose data to law-enforcement or regulatory bodies where required by law.
6. Transfers outside Hong Kong
These providers may process or store data outside Hong Kong (for example in Japan or the United States).
7. Retention
Check records are generally kept for no more than 24 months; transaction records are kept as required by Hong Kong law (for example tax records). After that, data is deleted or kept in a form that does not identify you.
8. Security
Data is accessed only through the Site’s server code and sent over encrypted connections. The admin area is password-protected.
9. Access and correction
Under the Personal Data (Privacy) Ordinance you may request access to and correction of your personal data we hold. Email 416aistudio@gmail.com.
10. Changes
We may update this policy from time to time; changes take effect when published on this page.