Privacy Policy

When you create an account or use GeoSpy PRO, we may collect the following categories of information:

Account Information

• Identity Data: Name, email address, and authentication credentials managed through Supabase Auth.
• Profile Data: Account preferences, plan tier, and usage quotas.

Usage Information

• Analysis History: Records of image analyses including timestamps, predicted coordinates, and confidence scores.
• Case Data: Case names, descriptions, classification levels, and linked analyses created through the Cases workspace.
• Technical Data: IP address, browser type, device information, and session metadata for security monitoring.

We process your data strictly for the following purposes:

• Service Delivery: To perform AI-powered image geolocation analysis through our multi-agent pipeline and return results to your dashboard.
• Authentication & Security: To verify your identity, manage sessions, and prevent unauthorized access to the platform.
• Usage Tracking: To enforce daily analysis limits based on your subscription tier and prevent abuse.
• Platform Improvement: To monitor system performance, diagnose errors, and improve the accuracy of our geolocation models.
• Platform Protection: To protect the security and integrity of our infrastructure and enforce our Terms of Service without compromising user data privacy.

During analysis, our system extracts visual features including EXIF metadata, text via OCR, architectural patterns, vegetation indicators, and other geospatial clues. This extracted data is stored as structured JSON alongside the analysis record and is accessible only to you through your authenticated session.

EXIF Handling: If your image contains embedded GPS coordinates or device metadata, our system reads this data solely for analysis purposes. We strip EXIF data from any images that may be displayed or shared through the platform.

All data is stored on infrastructure provided by Supabase (backed by AWS) with the following security measures:

• Encryption at Rest: All database records and stored images are encrypted using AES-256.
• Encryption in Transit: All communications between your browser and our servers use TLS 1.3.
• Row-Level Security: Supabase RLS policies ensure users can only access their own data.
• Access Controls: Service role keys are restricted to server-side edge functions only.

We share data only with the following categories of service providers, strictly for platform operation:

• Google Gemini API: Images are sent to Google's Gemini Vision API for AI analysis. Google's data processing terms apply.
• Supabase: Database hosting, authentication, and file storage infrastructure.
• OpenStreetMap / Nominatim: Geocoding and reverse-geocoding lookups. Only coordinate data is shared — never images.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of all personal data we hold about you.
• Rectification: Correct any inaccurate or incomplete information.
• Erasure: Request deletion of your account and all associated data.
• Portability: Export your analysis history and case data in machine-readable format (JSON).
• Objection: Object to processing of your data for specific purposes.
• Restriction: Request that we limit how we process your data.

We retain your data for as long as your account is active. Upon account deletion:

• All analysis records, case data, and uploaded images are permanently deleted within 30 days.
• Authentication records are purged from Supabase Auth immediately.
• Anonymized aggregate usage statistics may be retained for platform improvement.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or through a prominent notice on the platform at least 14 days before the changes take effect. Your continued use of GeoSpy PRO after the effective date constitutes acceptance of the updated policy.

For any privacy-related questions, data access requests, or concerns, please contact our Data Protection team: