Privacy Policy

1. Who we are

Georgye is a platform that measures whether a brand appears in answers from AI assistants (such as ChatGPT, Gemini, Claude and Perplexity) and suggests actions to improve that presence. The data controller is Georgye. Data protection contact: [email protected].

2. Data we collect

Account: name, email, password (stored only in hashed form), language and display preferences, and the second authentication factor when enabled.

Monitored companies: name, website, industry, services, markets, competitors, topics and questions entered by the team.

AI answers: the texts AI assistants return to monitored questions and the sources they cite.

Usage and security data: audit logs of administrative actions and the IP address only as a cryptographic hash — never in clear text.

Optional integrations: Google Search Console and Google Analytics data, only when a user connects those accounts (see section 4).

3. How we use data

To provide the contracted service: authenticate users, collect and measure AI answers, show reports and recommendations, send email notices, bill the subscription and keep the platform secure. We do not sell personal data and do not use customer data for advertising.

4. Data received from Google APIs

When a user connects Google Search Console or Google Analytics, Georgye requests read-only access only (scopes webmasters.readonly and analytics.readonly) and the Google account email (for Sign in with Google).

We use this data only to show the customer, inside the platform, the searches, clicks, impressions and sessions of the sites and properties they chose, and to compare them with the brand’s presence in AI answers. The customer may choose to turn a search into a monitored question.

Georgye’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell this data, do not use it for advertising, do not use it to train artificial intelligence models, and do not allow humans to read it, except with the user’s consent, for security purposes, to comply with the law, or when the data is aggregated and anonymized.

Access tokens are stored encrypted. Users can disconnect the integration at any time in Georgye or at myaccount.google.com/permissions; when disconnected, the token is deleted.

5. Who we share data with

Only with processors required for the service: AI providers that receive the monitored questions (OpenAI, Google, Anthropic, Perplexity), hosting and delivery network (Cloudflare), transactional email (Brevo) and payments (Stripe). Each receives only what its function requires. Data received from Google APIs is not sent to AI providers.

6. How long we keep data

While the account is active. When a monitored company or the account is closed, data is deleted after the grace period shown in the platform, except what the law requires us to keep (for example, tax and access records).

7. Security

HTTPS-only connections, hashed passwords and encrypted tokens, two-factor authentication, data isolation per agency, audit logs and IP addresses never stored in clear text. The platform operations team does not access the content of customers’ companies.

8. Cookies

We use only cookies required to keep the session and protect forms, plus anonymous audience measurement by Cloudflare, with no advertising cookies.

9. Your rights

You may request access, correction, portability or deletion of your data, and withdraw consent, by writing to [email protected]. We reply within 15 days. You may also file a complaint with Brazil’s National Data Protection Authority (ANPD).

10. Changes to this policy

When this policy changes materially, we will notify you in the platform or by email before the change takes effect.