# Privacy policy | GEO/AEO Scanner

Source: https://geoaeoscanner.com/en/confidentialite

Cette page existe en français.

[Home](https://geoaeoscanner.com/en/) Privacy policy

# Privacy policy

This policy describes the personal data GEO/AEO Scanner processes, why, and with which providers.

Last updated : 31 October 2026

## Controller

BLOCKTORING SÀRL, Vevey, Suisse. Contact: contact@geoaeoscanner.com.

## Data processed

- Account: email, optional name, plan and usage.
- Subscription: Stripe customer and subscription identifiers, plan, status and subscription dates. Card details are entered at Stripe and never reach us.
- Audits: analysed URLs, results, reports, monitors and alerts.
- Visibility measurement: the questions entered and the answers of the engines queried.
- Contact form: name, email, message and IP address (abuse prevention).
- Test without an account: the analysed address is not stored; only a salted hash of your IP address is kept for 2 days to limit the number of tests.
- Hosting technical logs (IP address, date, request).
- Anti-robot check (sign-up, sign-in, contact): technical signal sent to Cloudflare Turnstile, without advertising cookies.

## Purposes and legal bases

- Provide the service and manage your account (performance of contract).
- Billing subscriptions and bookkeeping (performance of contract, legal obligation).
- Send monitoring alerts and account emails (performance of contract).
- Answer your messages (legitimate interest).
- Security and abuse prevention (legitimate interest).

## Providers (processors)

- Supabase (database, authentication, server functions; Zurich region, Switzerland).
- Netlify (website hosting).
- Stripe (subscription payments, invoices, customer portal).
- OpenRouter, and through it Anthropic, OpenAI, Google, Perplexity and Mistral: only for AI analysis and visibility measurement (analysed content and questions sent).
- Browserless: only for the real-browser test (loading the audited URL).
- Resend: alert and contact emails, when enabled.
- Cloudflare (Turnstile): anti-robot check on forms.

## Transfers outside Switzerland and the European Union

Some providers are based in the United States. Transfers rely on the safeguards required by applicable law (standard contractual clauses or adequacy decisions).

## Retention

Account data and audits are kept while the account is active, then deleted when you ask for the account to be deleted. Contact messages are kept as long as needed to handle the request.

Billing data is kept for the legal retention period of accounting records.

## Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection. To exercise them: contact@geoaeoscanner.com. You can also contact the competent data protection authority (FDPIC in Switzerland, CNIL in France).

## Payment

Online payments are processed by Stripe, acting as payment service provider. We only receive the payment status, the subscription and billing details; never your card number.