Privacy Policy

1. Who We Are

GeoNeo is an AI visibility intelligence platform operated by New Digital Noise Limited ("NDN Group", "we", "us", "our"), a company incorporated in Hong Kong. GeoNeo tracks how brands are represented across AI engines including ChatGPT, Gemini, Claude, Perplexity, Grok, DeepSeek, Kimi, Qwen, Hunyuan, and others.

Our registered address is: New Digital Noise Limited, Hong Kong SAR.

For privacy enquiries: privacy@geoneo.ai  ·  General: info@geoneo.ai

2. Data We Collect

2.1 Information you provide directly

• Email address — collected when you request your full GEO scan report or create an account
• Brand / company name and website URL — entered to initiate a scan
• Industry / sector — optionally provided to improve scan accuracy
• Payment information — processed securely via Stripe; we do not store card details
• Communications — emails, WhatsApp messages, or enquiries you send us

2.2 Information collected automatically

• Usage data — pages visited, scan frequency, features used, session duration
• Device & browser information — IP address, browser type, operating system, referral source
• Cookies — see Section 5 for details
• Analytics data — via Google Analytics (GA4), including page views and conversion events

2.3 Scan data

When you run a GEO scan, we query multiple AI engines using your brand name and related terms. The queries and responses are logged to generate your GEO score and report. This scan data is associated with your account or email address.

3. How We Use Your Data

• To provide, operate, and improve the GeoNeo platform and your GEO scan reports
• To process payments and manage your subscription or credits
• To send you your scan results and report by email
• To send product updates, new features, or relevant GEO insights (you may opt out at any time)
• To respond to your enquiries and provide customer support
• To analyse usage patterns and improve our scanning methodology
• To comply with legal obligations and enforce our Terms of Service

We process your data on the following legal bases: (a) performance of a contract (providing the service you requested); (b) legitimate interests (improving our platform, preventing fraud); (c) consent (marketing communications); (d) legal obligation.

4. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We may share data with:

• Stripe — payment processing (PCI-DSS compliant)
• Google — analytics (GA4) and cloud infrastructure
• Amazon Web Services (AWS) — hosting on servers located in Singapore (ap-southeast-1)
• AI engine providers (data processors) — brand name and query strings are sent to third-party AI engines as part of the scan. No account-level personal data (name, email, payment) is included in these queries. Providers and their applicable data processing terms are listed in Section 4A below.
• Professional advisors — legal, accounting, or compliance when required
• Law enforcement / regulators — when required by applicable law in Hong Kong, Singapore, or other relevant jurisdictions

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to the same privacy protections.

4A. AI Engine Data Processors

GeoNeo sends brand queries (brand name, competitor names, topic prompts) to the following AI engine providers acting as data processors. No personal identifiers (name, email, IP address) are included in these queries. Each provider maintains their own data processing terms:

We rely on legitimate interest bases under applicable law when processing brand queries through these providers. Queries do not contain personal data as defined under PDPO or PDPA. We are actively reviewing and executing formal DPAs with providers where available.

5. Cookies & Tracking

We use the following types of cookies:

• Essential cookies — required for login sessions, scan state, and security
• Analytics cookies — Google Analytics (GA4) to understand how users interact with GeoNeo
• Preference cookies — to remember your language, scan history, and display preferences

You can control cookies through your browser settings. Disabling essential cookies may prevent the platform from functioning correctly. We do not use third-party advertising cookies.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specifically:

• Account data — retained while your account is active, plus 12 months after closure
• Scan results and reports — retained for 24 months, then anonymised or deleted
• Payment records — retained for 7 years for tax and legal compliance
• Email enquiries — retained for 3 years

You may request deletion of your data at any time (see Section 7).

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request erasure of your personal data ("right to be forgotten")
• Portability — receive your data in a structured, machine-readable format
• Objection / Restriction — object to or restrict certain types of processing
• Opt-out of marketing — unsubscribe from marketing emails at any time via the link in any email or by contacting us

To exercise any of these rights, email us at info@geoneo.ai. We will respond within 30 days. We may need to verify your identity before processing your request.

This policy is designed in accordance with the Hong Kong Personal Data (Privacy) Ordinance (PDPO, Cap. 486) and Singapore's Personal Data Protection Act (PDPA). It is also aligned with the principles of the EU General Data Protection Regulation (GDPR) for users in the European Union, though GeoNeo primarily serves the Asia-Pacific market.

8. International Data Transfers

GeoNeo operates primarily from Hong Kong and Singapore. Our servers are hosted on AWS in Singapore (ap-southeast-1). When you use GeoNeo, your data may be processed in Singapore, the United States (via Google and Stripe), and other countries where our service providers operate.

We ensure that any international transfers are subject to appropriate safeguards. Specifically:

• USA providers (OpenAI, Google, Anthropic, xAI, Perplexity, Brave) — transfers rely on standard contractual clauses (SCCs) or equivalent data processing addenda accepted via provider account terms.
• China-based providers (DeepSeek, Qwen, Hunyuan, Kimi) — brand queries only (no personal data) are sent to these providers. We continue to monitor applicable cross-border data transfer requirements under China's PIPL and relevant HK / SG guidance.
• Singapore (AWS ap-southeast-1) — primary data hosting region; data remains in Singapore except where transferred to providers above.

8A. PDPO & PDPA Compliance Summary

Hong Kong — PDPO (Cap. 486): GeoNeo complies with the six Data Protection Principles (DPPs): (DPP1) data collected for lawful purpose; (DPP2) data not used beyond original purpose; (DPP3) data accurate and not held longer than necessary; (DPP4) data protected with appropriate security; (DPP5) information on policies and practices available upon request; (DPP6) data subject access and correction rights honoured within 40 days.

Singapore PDPA compliance documentation is in preparation and will be published upon appointment of a Singapore Data Protection Officer. In the interim, users in Singapore may direct enquiries to privacy@geoneo.ai.

9. Security

We implement industry-standard security measures including:

• HTTPS/TLS encryption for all data in transit
• Encrypted storage for sensitive data at rest
• Access controls limiting data access to authorised personnel only
• Regular security reviews and penetration testing

No method of transmission over the internet is 100% secure. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities as required by law.

10. Children's Privacy

GeoNeo is a business intelligence platform intended for use by organisations and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us at info@geoneo.ai and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page and update the "Last updated" date above.

For material changes, we will notify you by email (if you have an account) or by a prominent notice on our platform at least 14 days before the change takes effect.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: info@geoneo.ai
• Company: New Digital Noise Limited, Hong Kong

We aim to respond to all privacy enquiries within 5 business days.