Privacy policy
This policy describes the personal data GEO/AEO Scanner processes, why, and with which providers.
Last updated :
Controller
BLOCKTORING SÀRL, Vevey, Suisse. Contact: contact@geoaeoscanner.com.
Data processed
- Account: email, optional name, plan and usage.
- Subscription: Stripe customer and subscription identifiers, plan, status and subscription dates. Card details are entered at Stripe and never reach us.
- Audits: analysed URLs, results, reports, monitors and alerts.
- Visibility measurement: the questions entered and the answers of the engines queried.
- Contact form: name, email, message and IP address (abuse prevention).
- Test without an account: the analysed address is not stored; only a salted hash of your IP address is kept for 2 days to limit the number of tests.
- Hosting technical logs (IP address, date, request).
- Anti-robot check (sign-up, sign-in, contact): technical signal sent to Cloudflare Turnstile, without advertising cookies.
Purposes and legal bases
- Provide the service and manage your account (performance of contract).
- Billing subscriptions and bookkeeping (performance of contract, legal obligation).
- Send monitoring alerts and account emails (performance of contract).
- Answer your messages (legitimate interest).
- Security and abuse prevention (legitimate interest).
Providers (processors)
- Supabase (database, authentication, server functions; Zurich region, Switzerland).
- Netlify (website hosting).
- Stripe (subscription payments, invoices, customer portal).
- OpenRouter, and through it Anthropic, OpenAI, Google, Perplexity and Mistral: only for AI analysis and visibility measurement (analysed content and questions sent).
- Browserless: only for the real-browser test (loading the audited URL).
- Resend: alert and contact emails, when enabled.
- Cloudflare (Turnstile): anti-robot check on forms.
Transfers outside Switzerland and the European Union
Some providers are based in the United States. Transfers rely on the safeguards required by applicable law (standard contractual clauses or adequacy decisions).
Retention
Account data and audits are kept while the account is active, then deleted when you ask for the account to be deleted. Contact messages are kept as long as needed to handle the request.
Billing data is kept for the legal retention period of accounting records.
Your rights
You have the rights of access, rectification, erasure, restriction, portability and objection. To exercise them: contact@geoaeoscanner.com. You can also contact the competent data protection authority (FDPIC in Switzerland, CNIL in France).
Payment
Online payments are processed by Stripe, acting as payment service provider. We only receive the payment status, the subscription and billing details; never your card number.