Trust
Trust and data. What we store, and where.
What GEO Style stores, where it runs, which providers handle it for us, and how to delete it. If a security questionnaire asks something this page doesn't answer, write to hello@geostyle.io.
Updated
At a glance
- Stockholm, Sweden
- Frankfurt, Germany
- A global network
- By single-use email link. There are no passwords.
- Reading answers and drafting: OpenAI and Anthropic, in the United States. No EU-only route yet.
- 12 providers, each with what it gets and where.
- While your account is open. You can set how long each brand's answers are kept.
- Settings, then Delete account, removes it from the live database at once. Backup copies expire on the backup schedule.
Hosting
Where it runs. Each part, and where.
| Part of GEO Style | Where |
|---|---|
| API, answer collection and its queue | Stockholm, Sweden |
| Web app (server functions) | Frankfurt, Germany |
| Web app (pages and images) | A global network |
Data
What we store. From your account to the tools you connect.
Account
Your account: email address and name. Sign-in is by email link; there are no passwords.
Brands
Your brands: name, website, competitors, Brand Kit, Source KB facts and personas.
Tracked questions and answers
The questions you track, the answers collected for them, the sites they cite, and what we work out from them. To score how credible cited pages look (E-E-A-T), we read them from their public sites each week: your competitors' homepages and the pages of theirs your answers cite most, as we already do to spot their changes, and the 20 pages on other sites your answers cite most, only where the site's robots.txt allows. A score is deleted after 30 days unless the page is read again.
Ask GEO Style
Questions you ask Ask GEO Style and its answers, kept per person and brand and deleted on your plan's retention schedule. Each question, and the brand data read to answer it, is sent to Anthropic. When the weekly agent is on, the brand data it reviews each week is sent to Anthropic the same way, and its suggestions are kept with the brand for its editors. Voice input uses your browser's own speech service, which in Chrome sends your speech to Google; GEO Style never receives audio, only the text.
Connected tools
From tools you connect: what they send, such as visits from Google Analytics. Their access tokens are stored encrypted.
Shopify orders
Shopify (if you share orders): each order's products, quantities, prices, currency, date and the site the visit came from. Never the shopper's name, email, phone, address or the order number; orders are stored under a one-way code and deleted after 13 months or when you disconnect.
Buyer conversations
From Gong, Intercom, Zendesk or HubSpot, if you connect them: only the generalized questions buyers asked, without names or contact details, with the tool and dates they came from and a one-way hash of each conversation's ID so it is read once. Conversation text is never stored.
Rendered pages
Rendered pages for AI crawlers, if you turn them on: a copy of each chosen page of your public site as a browser shows it, without scripts, stored with Cloudflare and replaced daily. A copy is deleted when you turn this off or remove the page, and within a day of deleting the brand or your account.
AI processing
Where AI processing happens. Which provider sees what.
Two kinds of calls go to AI providers, and they carry different data.
1. Asking the assistants your questions
Each tracked question is sent to ChatGPT, Gemini, Perplexity and Claude through their APIs. Microsoft Copilot and Google's AI pages are asked only when we offer them, typed in by our own browser without signing in. What goes out is the question and, for a country-specific question, the country. Nothing else about your account is sent.
2. Reading answers and writing for you
To read answers, rank competitors, suggest prompts and draft content, we send OpenAI and Anthropic the answer text, your brand and competitor names and, for drafts, your Brand Kit and approved Source KB facts. If you connect Gong, Intercom, Zendesk or HubSpot, OpenAI also gets the buyer's side of those conversations, after contact details and known names are removed, to find the questions buyers ask. Both process it in the United States. There is no EU-only route for this processing yet.
Providers
Sub-processors. The providers that handle data for us.
| Provider | What for | What they get | Where |
|---|---|---|---|
| API hosting | Runs the API, answer collection and its queue | Everything GEO Style stores | Stockholm, Sweden |
| Web app hosting | Serves the web app | Requests between your browser and the API | Frankfurt, Germany, and a global network for pages |
| OpenAI | ChatGPT answers; reading answers, ranking competitors, matching similar prompts; finding buyer questions in connected conversations | Your tracked questions; answer text, brand and competitor names; the buyer's side of conversations from tools you connect, de-identified, and the questions found in them | United States |
| Anthropic | Claude answers; drafts, briefs and suggestions; Ask GEO Style | Your tracked questions; Brand Kit, approved Source KB facts, prompts; questions asked in Ask GEO Style and the brand data read to answer them, and the brand data its weekly agent reviews | United States |
| Gemini answers; public facts about a brand from the Knowledge Graph; public details of the YouTube videos answers cite, from the YouTube Data API | Your tracked questions; brand name; for YouTube, only the IDs of cited videos | Google's global infrastructure | |
| Perplexity | Perplexity answers | Your tracked questions | United States |
| SerpAPI | Finding competitors through web search; the pages that rank for the searches behind your answers, when you ask; Google's People Also Ask questions for your tracked questions, for prompt demand and prompt suggestions | Brand name, category and search terms; the searches assistants ran for your questions, or a short version of a question when they ran none, and their country | United States |
| DataForSEO | Google Ads search volumes for your tracked questions, for prompt demand; backlinks and a domain rank for your site, your competitors and the sites your answers cite, and the sites that link to your competitors and not to you, on Pro and Enterprise | Search terms: the searches assistants ran for your questions, or a short version of a question when they ran none, with their country and language. Domain names: your site's, your competitors' and the cited sites'. Nothing else | Estonia |
| Stripe | Payments | Name, email and card details (Stripe holds the card; GEO Style never sees it) | Stripe's global infrastructure |
| Google Workspace | Sending email | Your email address and the message | Google's global infrastructure |
| WorkOS | Single sign-on and user provisioning, for organizations that turn it on | Names, email addresses and group membership from the organization's identity provider | United States |
| Cloudflare | Bot check on sign-in forms; storing files attached to support requests, and rendered copies of pages if you turn that on | Browser signals and IP address; the attached files; rendered copies of your public pages | Cloudflare's global network |
Only when you connect them: Google Analytics, Adobe Analytics, Google Search Console, Slack, Linear, Jira, WordPress, Webflow, Contentful, Sanity, Ghost, Strapi, Drupal, Wix, Framer, Shopify, Gong, Intercom, Zendesk, HubSpot. We receive from these, or send to them, only what the connection is for.
Retention and deletion
How long we keep it, and how to delete it.
How long we keep it
We keep your data while your account is open. You can set how long each brand's answers are kept, and clear older ones, under Brands, then the brand, then Data retention.
Deleting your data
Settings, then Delete account, removes your account and its brands, prompts, answers and everything worked out from them from the live database at once. Cancel a paid plan under Billing first. To remove one brand, open it under Brands and delete it. Disconnecting a conversation tool deletes its access token, its conversation records and the questions found only in it. Copies in database backups expire on the backup schedule.
Security
Security. Sign-in, access and who to write to.
Sign-in is by single-use email link, and a bot check guards the sign-in forms.
Each brand has its own members and roles. Only its members can read it, and GEO Style staff when giving support.
Report a security issue to hello@geostyle.io.
A data processing agreement is available on request from the same address.
A security questionnaire asks something this page doesn't answer?
Write to hello@geostyle.io.
Get started
Try it on your own brand. The first answers arrive shortly after setup.
GEO Style reads your site, suggests competitors and drafts the questions to track.
Sign-up opens soon. Request access and we will set you up.