Privacy Policy

Effective date: 2026 · Privacy version 1.3.0
Operator: GeoSummit AI LLC, a Nevada limited liability company (“GeoSummit”, “we”, “us”, or “our”)

This Privacy Policy describes how we collect, use, share, and protect personal information when you visit https://geosummit.ai (the “Site”), contact us, download white papers or other materials, or use our automated website visibility audit services (“Services”), including the free check and free-beta paths at audit.geosummit.ai when enabled. Paid Easy Pack, Full package, or checkout-based options may be offered after the free beta window. It supplements our Terms of Service, which govern your use of the Services.

Plain English. We run checklist-style audits on public website URLs you submit. Free checks do not require email or payment. We do not sell your personal information. Audit scoring is rule-based on our systems—not a black-box “mystery grade” from a third-party chat model using your Customer Data.

1. Scope and who this applies to

This policy applies to Site visitors, individuals who contact us or submit forms, people who request white papers or research materials, and business customers who request or order audit deliverables (“Customers”), including free checks and free-beta download-only audits. We offer Services primarily to businesses in the United States and its territories. The Site is not directed at children under 13, and we do not knowingly collect personal information from children.

Privacy rights for residents of U.S. states and territories are described in Section 12A. If you are a Nevada resident, additional rights regarding the sale of covered information appear in Section 13. A non-exhaustive schedule of comprehensive state privacy laws appears in Section 13A. California notice-at-collection summary appears in Section 3A.

2. Definitions

• “Customer Data” — URLs, business names, addresses, phone numbers, industry codes, messages, and other information you submit for an audit (same meaning as in our Terms).
• “Deliverables” — free top-fix results, PDF audit reports, HTML implementation guides, AI implementation briefs, implementation hub files, and related ZIP package contents we generate for your audit request or order.
• “Services” — automated website visibility assessments, competitor benchmarking where applicable, and export of Deliverables using methodology version 0.4.7 (or the methodology version stamped on your run).
• “Covered information” — personally identifiable information about a consumer collected through the Site or Services and maintained in accessible form, as defined in Nevada Revised Statutes (NRS) Chapter 603A.
• “Consumer” — a person who seeks or acquires goods or services through the Site, as defined under NRS 603A.310.
• “Operator” — GeoSummit AI LLC, the entity that owns and operates the Site and Services.
• “Personal information” — information that identifies, relates to, describes, or could reasonably be linked with a particular individual or household, as defined under applicable U.S. state privacy law.

3. Information we collect

We collect the following categories of information:

• Identifiers and contact information: name, email address, phone number, company name, and message content you provide through forms, email, research/RFI requests, or optional white-paper / free-pack / exit-intent sample-pack email gates (when you choose to provide them).
• Business and audit data: target URLs, business addresses, phone numbers, industry sector selections (optional), market area, competitor context, optional order tier, optional email if you contact us or request delivery, and other Customer Data needed to run an audit. Free checks and free beta deliverables may download in-browser; email is not required for the default free path.
• Payment information: if paid checkout is enabled after free beta, billing details and transaction metadata processed by Squarespace Commerce or another payment processor we designate. We do not store full payment card numbers on our systems. Free beta does not require payment.
• Technical and usage data: IP address, browser type, device information, pages viewed, referral source, and similar diagnostics, collected through Squarespace analytics, server logs, or similar tools if enabled on the Site or audit host.
• Public crawl data: text, structure, images references, links (including brand profile / sameAs links), and technical signals from publicly accessible web pages at URLs you submit (including competitor URLs where applicable). This is generally public website content, not private account data, but we process and store it as needed to produce Deliverables and operate quality checks.
• Deliverables and audit outputs: scores, reports, fix guides, AI briefs, quality-check metadata, and methodology/content version stamps generated for your request or order.
• Optional voice support data: when you use Talk to support, microphone audio and conversation text processed as described in Section 5A.
• Abuse-prevention signals: rate-limit counters and related technical identifiers (often hashed or truncated) used to protect public endpoints from spam or overload.

We do not intentionally collect government ID numbers, precise geolocation of consumers, biometric templates, or payment card full PAN/CVV on GeoSummit systems. Do not submit health records, children’s data, or other highly sensitive personal data in free-text fields unless necessary for a legitimate business contact message—and prefer business contact details only.

3A. Notice at collection (California and similar)

At or before collection, we inform you that we collect the categories above for the business purposes in Section 5, retain them as in Section 10, and share them with service providers as in Sections 7–8. We do not sell personal information or share it for cross-context behavioral advertising. For California residents, categories align with CCPA/CPRA “identifiers,” “commercial information,” “internet or other electronic network activity,” and (when checkout is enabled) “financial information” processed by payment processors. We do not use or disclose sensitive personal information to infer characteristics for advertising.

4. Sources of information

We collect information from:

• You directly — contact forms, research/RFI forms, white-paper or free-pack email fields, checkout, email correspondence, and Customer Data submitted for audits (including through audit.geosummit.ai when that service is enabled).
• Automated crawls — our audit pipeline fetches and analyzes public URLs you authorize us to scan.
• Service providers — payment processors, hosting, email delivery, voice support (when enabled), and analytics platforms that process data on our behalf.
• Your use of the Site and audit host — cookies, local storage, and similar technologies described in Section 9.

5. How we use information

We use collected information to:

• Respond to inquiries and provide the Services you request (including free checks and free beta downloads).
• Run automated audits, generate Deliverables, and—when you provide an email—deliver them to that address or return them to your browser.
• Process payments, prevent fraud, and resolve chargebacks when paid products are enabled.
• Operate, secure, debug, and improve the Site and audit methodology (including aggregated or de-identified analysis where practicable).
• Enforce rate limits, prevent abuse, and protect the integrity of public audit endpoints.
• Comply with law, enforce our Terms, and protect our rights and users.
• Send service-related notices about your order, delivery issues, or material changes to this policy.
• Product and marketing communications: When you use the Services (including free checks, free pack email, sample-pack or white-paper email gates, paid products, research/RFI forms, or other contact paths), we may send you GeoSummit product updates, educational content, offers, and related marketing about our Services. We do not sell your email to third parties for their independent advertising. You may unsubscribe from marketing messages as described in Section 10 and via the contact below (transactional or delivery notices may still be sent when needed to fulfill a request you made).

5A. Optional website voice support

When the optional Talk to support control is enabled on the Site, you may start a short voice or typed support conversation. That feature uses the xAI Grok Voice Agent API. To open a session, our audit host (audit.geosummit.ai) mints a short-lived credential for your browser; your microphone audio and conversation text are processed by xAI to provide the support reply. We do not sell that audio or transcript for advertising. Use is optional — you may email contact@geosummit.ai or call (702) 983-8672 instead. Voice support is product assistance only and is not legal, tax, or regulated professional advice. Session minting may be rate-limited to prevent abuse. xAI processes data under its own terms and privacy policy for the duration of the session.

5B. Free audit pack email

When free in-page audits and free pack email are enabled on audit.geosummit.ai, you may optionally provide an email address to receive a free pack (top easy technical checklist fixes and related free-shaped files only — not a full paid hub). That email is used to:

• Deliver the free pack (required consent for delivery), typically via a batched send about every fifteen (15) minutes when enabled; and
• GeoSummit product and marketing communications as described in Section 5 — by requesting a free pack or otherwise using the free audit service with a contact email, you agree we may send product updates, educational content, and related offers about our Services.

We do not sell free-pack emails to third parties for their independent advertising. Operational retention for free-pack delivery support is up to about 30 days after send (or as needed to resolve a delivery dispute) for queue/job records, then deleted or retained only as a salted hash for abuse prevention; contacts we retain for ongoing product communications are kept as described in Section 10 until you unsubscribe or request deletion. You may request deletion or unsubscribe via contact@geosummit.ai. Production free-pack email is not enabled until operator configuration is complete.

5C. White papers and optional email gates

White papers and related PDFs may be available by direct download on the Site. Where an optional email gate is enabled, we use the address to send the paper link or related research materials you requested, and we may also send GeoSummit product updates and related marketing as described in Section 5. Direct download, when offered, remains available without email.

5D. Exit-intent sample pack email

On the marketing Site, an optional exit-intent form may offer to email you product sample links (for example links to redacted product examples, proof materials, or a free audit entry point). When that path is operator-enabled, the address you provide is used to:

• Deliver sample / product-example links you requested (required consent checkbox), typically via a batched send about every fifteen (15) minutes when automated delivery is on; and
• GeoSummit product and marketing communications as described in Section 5 — providing your email through this form or otherwise using the Services means we may send product updates, educational content, and related offers about our Services.

We do not sell these addresses to third parties for their independent advertising. We do not attach a full paid hub via this path — links and product samples only. Operational queue retention is up to about 30 days after send (or as needed to resolve a delivery dispute), then deleted or retained only as a salted hash for abuse prevention; contacts retained for product communications follow Section 10 until you unsubscribe or request deletion. You may request deletion or unsubscribe via contact@geosummit.ai. Production automated sample-pack email is not enabled until capture feature flags are explicitly turned on. Until then, the form may fall back to a mailto draft to our support inbox, and product examples remain available on the Site without email.

6. Automated processing

When you submit a URL for an online audit through audit.geosummit.ai (or a Squarespace form that redirects there), processing runs on Google Cloud Run in the United States. We process your submitted URL, optional email address, and generated Deliverables in ephemeral memory and temporary storage for the duration of the request (subject to free-pack email retention if you opt into that path). Completed free web audits are not written to our long-term customer workbook by default; PDF and HTML outputs are returned to your browser or sent to the email you provide. We do not use your audit submission to train third-party AI models.

Not consumer credit or employment screening. Automated scores are on-page readiness checklists for GEO/AEO hygiene. They are not consumer credit scores, insurance underwriting, employment background checks, or “profiling” used to deny consumer financial products under the Fair Credit Reporting Act.

Incomplete crawls. If robots rules, bot protection, login walls, or technical errors prevent a full read, we may return limited guidance or an incomplete scorecard rather than inventing results. That limited output still constitutes processing of the URL and any identifiers you submitted.

7. How we share information

We may share information with the following categories of recipients:

• Service providers and processors — parties that host the Site, process payments, deliver email, provide optional voice support, or provide analytics, acting on our instructions (see Section 8).
• Professional advisors — lawyers, accountants, or insurers when needed for legitimate business purposes under confidentiality obligations.
• Legal and safety — law enforcement, regulators, or others when required by law or to protect rights, safety, and security.
• Business transfers — a successor entity in connection with a merger, acquisition, reorganization, or sale of assets, subject to this policy’s protections.

We do not sell covered information as “sale” is defined under NRS 603A.333 (exchange of covered information for monetary consideration to a person who licenses or sells it to additional persons). We also do not sell personal information for monetary or other valuable consideration under comprehensive state privacy laws, and we do not share personal information for cross-context behavioral advertising.

Your use of third-party AI tools. If you copy an AI implementation brief or other Deliverable into ChatGPT, Claude, Gemini, Grok, or another third-party tool, that use is governed by that tool’s terms and privacy policy. We do not control those services.

8. Service providers and processors

We use service providers to operate the Site and deliver Services. Current categories include: Squarespace (Site hosting and contact forms), Squarespace Commerce payment processors, Google Cloud Run (ephemeral customer audit processing at audit.geosummit.ai), xAI Grok Voice Agent API (optional browser voice support when enabled — ephemeral tokens minted by audit.geosummit.ai; audio/transcripts processed by xAI per their terms). These providers process information only to perform services for us and are contractually or operationally required to protect it. Disclosure to a processor for this purpose is not a “sale” under Nevada law or comprehensive state privacy laws that exclude service-provider disclosures.

We may update processors over time; material changes will be reflected in an updated version of this policy.

9. Cookies, analytics, and similar technologies

The Site may use cookies, local storage, pixels, and similar technologies operated by Squarespace or other analytics or security providers to understand how visitors use the Site, remember preferences, and protect against abuse. These tools may collect information about your online activities on the Site and, depending on provider configuration, related technical identifiers.

You can control cookies through your browser settings. Disabling cookies may affect Site functionality. We do not use covered information for cross-context behavioral advertising through data brokers, and we do not sell Site analytics data.

Do Not Track / Global Privacy Control. Industry “Do Not Track” browser signals are not uniformly standardized. Where a recognized Global Privacy Control (GPC) or similar opt-out preference signal is legally required to be honored for sale/share/targeted advertising, we treat it as an opt-out request for those activities. Because we do not sell or share personal information for cross-context behavioral advertising, GPC does not change our core audit processing of URLs you submit.

10. Data retention

We retain information only as long as reasonably necessary for the purposes described above, including:

• Contact and inquiry records: up to 730 days after last interaction, unless a longer period is needed for an active relationship or legal obligation.
• Customer Data and Deliverables (retained engagements): up to 365 days after delivery or last order activity, unless your agreement or law requires longer retention.
• Online audit sessions (audit.geosummit.ai): ephemeral by default — request data and generated Deliverables exist for the duration of processing and download; we do not persist completed free web audits to long-term customer storage unless you separately order a retained engagement or opt into free-pack email delivery (Section 5B).
• Crawl snapshots: up to 90 days for report generation, quality review, and offline validation, then deleted or aggregated where practicable.
• Payment records: as required by tax, accounting, and payment-processor rules.
• Internal maintainer audit logs: exception and process logs under our development runtime (audit_errors.log, process_audit.jsonl) for up to 12 months to operate, debug, and validate the audit pipeline. New entries use hashed URL correlators instead of full customer URLs where designed. These logs are not sold or shared with third parties for marketing or model training.
• Public audit endpoint abuse protection: per-IP request counters on audit.geosummit.ai (hashed or truncated identifiers only; no full URL storage in rate-limit tables by design) for up to one hour to prevent abuse.
• Free-pack email: as described in Section 5B.

We may retain information longer when required by law, to resolve disputes, enforce agreements, or maintain security logs. We may retain de-identified or aggregated statistics that cannot reasonably identify you. You may request deletion as described in Section 12, subject to legal exceptions.

11. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information, consistent with the nature of our Services and NRS 603A.210–603A.215 (as applicable). Measures may include access controls, encrypted transport (HTTPS), least-privilege operational access, and limiting storage of sensitive payment data to qualified processors.

No method of transmission or storage is completely secure. We cannot guarantee absolute security. If you believe your interaction with us is no longer secure, contact us immediately at contact@geosummit.ai.

Security incidents. If we become aware of a breach of security system affecting personal information that requires notification under applicable law (including Nevada security-breach statutes where they apply), we will investigate and provide notices to affected individuals and/or regulators as required.

12. Your choices and rights

Depending on where you live and the nature of your relationship with us, you may have rights to access, correct, delete, or receive a copy of personal information we hold about you. For residents of U.S. states and territories, see the detailed notice in Section 12A.

To submit a request, email contact@geosummit.ai with enough detail for us to verify your identity and locate your records. We will respond within the time required by applicable law, and in any event within 60 days of receiving a verifiable request unless a shorter period applies or an extension is reasonably necessary (in which case we will notify you).

We may deny requests where permitted by law (for example, when information is needed to complete a transaction, detect security incidents, or comply with legal obligations).

12A. U.S. states and territories — privacy rights

This section applies to personal information of individuals in the fifty (50) United States, the District of Columbia, and the inhabited U.S. territories of Puerto Rico, Guam, the U.S. Virgin Islands, American Samoa, and the Northern Mariana Islands who visit the Site or use the Services. Many Customers are businesses that submit business website URLs; personal information may still include contact details of individuals. Rights described here apply to personal information as defined under applicable law.

Categories of personal information we collect and the purposes for which we use them are described in Sections 3–6 above (identifiers and contact information; business and audit data; payment information when checkout is enabled; technical and usage data; public crawl data; and Deliverables). Sources and sharing are described in Sections 4, 7, and 8. Retention is described in Section 10.

To the extent provided by applicable state or territorial law, you may have the right to:

• Know / access — confirm whether we process your personal information and obtain a copy or categories of personal information we hold about you.
• Correct — request correction of inaccurate personal information we maintain about you.
• Delete — request deletion of personal information we collected from or about you, subject to legal exceptions.
• Data portability / copy — receive a portable copy of personal information you provided, where required.
• Opt out of sale, sharing, or targeted advertising — where those rights apply. Because we do not sell or share personal information for cross-context behavioral advertising, you may still contact us to confirm our practices.
• Limit use of sensitive personal information — where required. Our free path does not require payment cards or government IDs; we process business and audit data you submit and technical data needed to run the Services. We do not use sensitive personal information to infer characteristics for advertising.
• Appeal — appeal our decision if we deny a privacy request, where applicable law requires an appeal process. Email the same address with “Privacy Appeal” in the subject line.
• Non-discrimination — we will not discriminate against you for exercising privacy rights under applicable law (for example, by denying Services or charging different prices solely because you exercised a right), except as permitted by law.

How to exercise rights. Email contact@geosummit.ai with your name, the email address or other identifier you used with us, your state or territory of residence, and a clear description of your request. We will use commercially reasonable means to verify your identity. We will respond within the time required by applicable law, and in any event within 60 days unless a shorter statutory period applies or we notify you of a permitted extension.

Authorized agents. You may designate an authorized agent to submit a request on your behalf. We may require written proof of authorization and verification of your identity (see also Section 14).

Territories. Residents of the District of Columbia, Puerto Rico, Guam, the U.S. Virgin Islands, American Samoa, and the Northern Mariana Islands are included in this Section 12A to the extent territorial or federal law provides privacy rights related to personal information we process.

California “Shine the Light.” California Civil Code § 1798.83 permits California residents to request certain information about disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing. To make a request, email contact@geosummit.ai with “Shine the Light” in the subject line.

13. Nevada residents — sale opt-out (NRS 603A.345)

A “verified request” means a request for which we can reasonably verify your identity using commercially reasonable means. Please include your name, email address used with us, and a clear statement of your request.

13A. Comprehensive state privacy laws (non-exhaustive schedule)

Several U.S. states have enacted comprehensive consumer privacy laws. As of the effective date of this policy, those laws include (without limitation) the California Consumer Privacy Act as amended by the California Privacy Rights Act (CPRA/CCPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), the Virginia Consumer Data Protection Act (VCDPA), the Utah Consumer Privacy Act (UCPA), the Texas Data Privacy and Security Act (TDPSA), Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, and any other U.S. state comprehensive consumer privacy law in effect. If you are a consumer resident of such a state, the rights in Section 12A apply to the extent required by that law. This schedule is informational and non-exhaustive; it does not limit rights you may have under other applicable law.

14. Authorized agents and complaints

You may designate an authorized agent to submit a privacy request on your behalf. We may require written proof of authorization and verification of your identity. If you believe we have not handled your information in accordance with applicable law, you may contact your state or territorial attorney general or consumer protection office, the Nevada Attorney General’s office (for Nevada-related matters), or consult your own advisor.

15. International users, children, and third-party sites

The Site and Services are intended for users in the United States and its territories. If you access the Site from outside the U.S., you understand that information may be processed in the U.S. where laws may differ from those in your jurisdiction. We do not target the Site at the European Economic Area, United Kingdom, or Switzerland as a consumer-facing offering; if you are located there and still submit information, you do so at your own initiative.

The Site is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will take appropriate steps to delete it. Where a comprehensive state law sets a higher age threshold for certain processing of minors, we do not knowingly sell or share personal information of consumers we know are under that age.

The Site and Deliverables may link to third-party websites (including Credly, social profiles, documentation, or competitor sites surfaced in benchmarks). We are not responsible for third-party privacy practices. Review their policies before providing information to them.

Public pages you ask us to crawl may contain personal information of third parties (team bios, testimonials, contact forms). You represent that you have the right to authorize a public crawl of submitted URLs. We process that public content to produce Deliverables; we do not scrape private authenticated areas you do not make available without login.

16. Changes to this policy

We may update this Privacy Policy by posting a revised version on the Site with an updated effective date and privacy version number. For material changes, we will also provide notice by email to active Customers where we have an email address, or by a prominent notice on the Site before the change takes effect.

Your continued use of the Site or Services after the effective date of an update constitutes acknowledgment of the revised policy, except where further consent is required by law.

17. Governing law and relationship to Terms

This Privacy Policy is governed by the laws of the State of Nevada, United States, without regard to conflict-of-law rules. Disputes relating to privacy practices that are subject to our Terms of Service arbitration clause are handled as described in those Terms.

18. Contact and notices

Privacy and data requests:
GeoSummit AI LLC
9436 W. Lake Mead Blvd Suite 5 PMB 1104, Las Vegas, NV 89134, United States
Email: contact@geosummit.ai

General questions: contact@geosummit.ai · (702) 983-8672

Return to GeoSummit AI LLC