Privacy, in practical terms.

Information you provide.

The workspace processes account email and authentication information, website URLs, optional text and competitor domains, report content, buyer questions, answers, citations and saved report snapshots. Do not submit confidential, sensitive or third-party personal information without appropriate authority. Use public material for investigations.

The free crawler check.

When you use the free Crawler & HTML score on the homepage, GEOrank fetches the address you enter (plus its robots.txt, sitemap.xml and llms.txt files, and the page again as each AI crawler) and shows you the result. It does not store the page or the result. To enforce the daily limits it keeps, for 24 hours, a one-way hash of your IP address and the checked website's host name. No account, cookie or email is needed, and the hash cannot be turned back into your IP address.

AI crawler analytics.

If you connect a site, the snippet you install forwards only requests from recognised AI bots (such as GPTBot, ClaudeBot or ChatGPT-User). GEOrank stores the page path without its query string, the bot name and category, the time and the HTTP status, for up to 100,000 visits per site per month. It does not receive or store IP addresses or any information about human visitors. Disconnecting a site deletes its stored visits.

Where processing happens.

Vercel serves the website and API. Supabase handles accounts and saved workspace data. Anthropic receives submitted prompts and relevant website/context material to generate reviews and answers; its search/fetch tools may retrieve public sources. When you ask buyer questions of other AI engines, the question text, including your brand and competitor names, is sent to that engine's provider: OpenAI (ChatGPT), Google (Gemini) and DeepSeek, whose search service also receives the search queries the model writes. Google PageSpeed receives website URLs for requested performance checks. Upstash supports rate limiting using account/request identifiers.

Requests may be processed outside Australia. Provider policies apply to their services; GEOrank does not promise zero provider retention or training restrictions beyond the applicable provider agreement. Server-side provider credentials are not public sample content.

Sessions and local browser storage.

Authentication uses a session cookie. The browser also stores interface preferences and may retain local report history. Shared-device users should sign out and clear site data when appropriate. Clearing browser data does not delete saved account reports or retained backups.

Storage, retention and requests.

Saved reports are account scoped. Application-data backups are encrypted and retained separately; there is currently no automatic backup pruning. The recent-report list is not a retention limit. Deleting a live record does not imply immediate deletion from older backups, and full identity/password recovery is not part of the application backup.

Contact Stainaz to request access, correction or deletion and to clarify what can be removed from active storage and retained copies. Do not assume a self-service deletion control or fixed completion deadline. No automatic live-data deletion is introduced by this notice.

Public samples and contact.

The public sample was captured expressly for GEOrank’s owned brand. It is separate from saved customer reports and private research. We do not make private workspaces public to demonstrate the product.

Privacy and support enquiries: Stainaz contact page or sylvia.simango@stainaz.com.au. No response-time SLA is advertised.