Draft for counsel, not final legal text. This page sets out the structure and the points the Privacy notice must cover. Wording, governing law and every bracketed item need review by a lawyer before launch.
Privacy notice · draft · version 2026-09-draft-1
Privacy
What we collect
| Data | Why | Kept for |
|---|---|---|
| Email, password hash, company, use case | Your account | Until you close the account |
| API key hashes | Authenticating requests. We never store the key itself. | Kept after revocation as an audit record |
| Request log: time, endpoint, status, result count, hashed IP | Usage, limits, abuse prevention, support | 35 days |
| Usage counters | Enforcing your plan's quota | Short retention after the period ends |
| Billing: Stripe customer and subscription ids | Payments. Card details are held by Stripe, never by us. | As required for tax records |
Who we share it with
Stripe (payments), our email provider (account emails), Cloudflare (network security) and our hosting provider. We do not sell personal data.
Your rights
You can see, correct, export or delete your data. Write to dispatch@geomemo.ai. [GDPR and UK GDPR basis, controller details, international transfers: counsel.]
People named in the news
GeoMemo Dispatch returns news articles, which name people. We do not build profiles of individuals from them. [Counsel: position for data subjects named in articles.]