Privacy Policy.

Who we are

GEAFirst is a platform for Generative Engine Advertising (GEA), with a managed service for companies that want us to run their campaigns. Our website is geafirst.com and runs the GEAFirst app, which you reach through the sign in and sign up links on that website. We are responsible for the processing of personal data as described in this privacy policy.

What data we collect

On our website, we only collect personal data that you voluntarily provide to us:

• Contact and enquiry forms: when you send us a message or an enquiry about our platform or managed service, we collect your name, company name, email address, the service you are interested in, and the message you write.

On the website we do not collect any data automatically beyond standard server logs (IP address, browser type, pages visited) that are retained for security and performance purposes only.

App accounts

When you create an account in the GEAFirst app, we process the following data:

• Account data: your name, email address and the workspace or company details you provide.
• Workspace content: the information you enter or generate in the app, such as campaign details, keywords, intent research and ad copy.
• Authentication: sign in is handled by a third party authentication provider acting on our behalf. We do not store your password ourselves.
• Usage data: technical information about how the app is used, such as log data, timestamps and the features you use, so we can keep the app secure, fix problems and improve it.
• Payments: where paid plans are available, payments are processed by a payment provider. We do not store your full card details; we receive only the information needed to manage your subscription, such as your plan and payment status.

We process this data to provide the app to you under our agreement with you, and to keep it secure and working properly.

How we use your data

We use the data you provide exclusively to:

• Respond to your enquiry or message
• Provide, secure and support your app account and, if you use it, our managed service
• Improve our platform and services based on the feedback and context you share

We do not use your data for automated decision-making, profiling, or any purpose beyond providing our services and communicating with you.

Who we share your data with

We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share data with the following categories of service providers, solely to operate our website and app and to communicate with you:

• Hosting provider: our website and its data are hosted on servers within the European Union
• Email service provider: used to send and receive emails, such as replies to your enquiries and messages about your account
• Authentication provider: used to handle sign in to the app
• Payment provider: used to process payments for paid plans, where available

All service providers are contractually bound to process your data only on our behalf and in accordance with applicable data protection law.

Cookies

Our website uses a single functional cookie to store your cookie consent preference. We do not use tracking cookies, advertising cookies, or third-party analytics cookies without your explicit consent.

The GEAFirst app uses cookies that are strictly necessary to sign you in and keep your session secure.

You can withdraw your consent at any time by clearing your browser cookies. This will cause the cookie notice to reappear on your next visit.

How long we keep your data

We retain contact and enquiry form submissions for a maximum of 12 months after the last communication with you, unless a longer retention period is required for legal or contractual reasons. App account data and workspace content are kept for as long as your account is active. When you close your account or ask us to delete it, we delete or anonymise this data within a reasonable period, except where we are required to keep certain records, such as invoices, for legal reasons.

Your rights

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

• Right of access: you can request a copy of the data we hold about you
• Right to rectification: you can ask us to correct inaccurate data
• Right to erasure: you can ask us to delete your data
• Right to restriction: you can ask us to limit how we use your data
• Right to object: you can object to our processing of your data
• Right to data portability: you can request your data in a machine-readable format

To exercise any of these rights, contact us at hello@geafirst.com. We will respond within 30 days.

Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our website is served over HTTPS. Access to data is restricted to authorised personnel only.

Changes to this policy

We may update this privacy policy from time to time. The date at the top of this page reflects the most recent update. We encourage you to review this policy periodically.

Contact

If you have any questions about this privacy policy or how we handle your data, contact us at:

GEAFirst
Email: hello@geafirst.com
Website: geafirst.com