GEO privacy policy

Last updated 11 October 2026

GEO is a Shopify app that shows store owners how AI assistants (like ChatGPT, Gemini and Perplexity) recommend their store, suggests fixes, and shows which sales came from AI. This page explains what data we use, why, and how we look after it.

What we collect

• Your store details: shop name, domain, plan, and your products (titles, descriptions, types, tags, prices, images) so we can write questions and fixes.
• Orders that came from AI: the order number, total, currency, product titles and quantities, and the visit source (referrer, landing page and utm tags) that shows it came from an AI assistant. We also keep daily order and visit totals so we can show AI as a share of your sales.
• Visits from AI: when a shopper agrees to analytics cookies, our web pixel records visits that arrive from an AI assistant: the referrer, the page path with its utm tags, and a hashed browser id used only to avoid counting the same visit twice.

We never collect your customers' names, email addresses, phone numbers or addresses. We do not sell any data, and we never use one store's data for another store.

Free product check

Anyone can check a product on our website without installing GEO. To run the check we send the text of that public product page to Claude (Anthropic) and the questions to ChatGPT, Gemini and Perplexity through our data provider. We keep the product link, what we read from the page and the AI answers, and delete them after 30 days. We also keep a scrambled (hashed) version of your IP address so we can limit how many free checks one person runs, and delete it after a day.

Each report has its own link that isn't listed anywhere, but anyone you share the link with can see the report.

If you ask for the full report by email: we keep your email address, the words you agreed to and when, and which report you asked for, so we can email you that report (a PDF) once. If you also tick the box for tips and then confirm from that email, we send occasional tips on getting recommended by AI. We never put you on the tips list without both. Every email has an unsubscribe link, and you can also reply to any email to stop them.

We delete your address, and our record of the reports we emailed you, 30 days after you unsubscribe (counted from your last request), or 2 years after you last asked for a report or clicked a link in our emails. After that we keep only a scrambled code (a hash) of an address that unsubscribed, so we never email it tips again by mistake. We also keep a record of each report we emailed, with a scrambled (hashed) IP address for a day, to limit how many reports one person can ask for, and delete that record after 90 days.

Your browser keeps a small cookie (geo_check_leads) for 30 days, only on the check pages, so the report page can show where your report went. It holds the address you typed, signed so it can't be changed, and only your browser sends it.

We never sell your email address. We share it only with Resend, which sends our emails for us. We don't upload it to Facebook, Google or any other advertising service.

Why we use it

Your store's data: only to run GEO for you: to check AI answers about your products, write suggested fixes for you to approve, and show the clicks, orders and revenue that came from AI. We don't use it for advertising or anything else.

Free product check: to run the check, to email you the report you asked for, and to send occasional tips if you ticked the box and confirmed. We don't use your email address for anything else, and never for advertising.

Shoppers' choices

Our web pixel only runs when the shopper allows analytics in your store's cookie banner (Shopify's customer privacy settings). If they say no, we record nothing about their visit.

How long we keep it

• We remove the hashed browser id from visit records after 90 days.
• Everything else is kept while GEO is installed, so you can compare against your starting point.
• When you uninstall, Shopify tells us to delete your store's data (usually 48 hours later) and we do. As a backup we delete it ourselves 30 days after uninstall.
• If a shopper asks your store to delete their data, we delete any of their orders from our records.

How we protect it

All data is encrypted in transit (HTTPS and encrypted database connections) and at rest. Each store's data is kept separate, and only the GEO app can read it.

Services we use

• Railway (Singapore): runs the app.
• Supabase (Tokyo): stores the data.
• Treg: fetches public AI answers to buyer questions. It gets the questions only, never customer data.
• Anthropic (Claude): reads AI answers and drafts fixes from your product details. It never gets customer data.
• Resend: sends your monthly email report, and free check reports (and tips, for people who asked for them). It gets the email address and the email.

Your rights and contact

You can ask us what we hold about your store, or ask us to delete it, at any time using the contact details on GEO's Shopify App Store listing. Uninstalling GEO also deletes everything.

If you asked for a free check report by email, you can ask us for the email address we hold about you, or ask us to delete it, the same way or by replying to any of our emails.