Privacy Policy

GEOARBITRAGE LTD is the data controller responsible for your personal data collected through Geo Arbitrage AI. You can reach our privacy team at youssefmahmoud7@gmail.com.

GEOARBITRAGE LTD
128 City Road, London, EC1V 2NX, United Kingdom

• Account information: name, email address, and password (managed securely by our authentication provider, Supabase), plus any profile details you provide.
• Query & search data: the product searches, chat messages, and sourcing preferences (destination country, resale channel, condition, ROI targets) you submit to the agent, which we process to return results and improve relevance.
• Payment data: subscription and billing details. Full card numbers are never stored on our servers -- payments are processed directly by Stripe, our PCI-compliant payment processor, and we retain only limited billing metadata (such as your subscription tier, status, and Stripe customer reference) needed to manage your account.
• Usage & device data: log data, IP address, browser type, and interactions with the Service, collected automatically for security, debugging, and analytics.
• Cookies: strictly necessary cookies for authentication/session management, and optional analytics cookies where permitted (see Section 7).

• To provide, maintain, and improve the Service, including generating search results and landed-cost calculations.
• To process payments, manage subscriptions, and send billing-related communications.
• To authenticate you and keep your account secure.
• To respond to support requests submitted through our Support page or by email.
• To detect, prevent, and investigate fraud, abuse, or security incidents.
• To comply with legal obligations and enforce our Terms of Service.

Where GDPR applies, we rely on the following legal bases:

• Contract: to provide the Service you have subscribed to.
• Legitimate interests: to secure and improve the Service and prevent fraud.
• Consent: for optional analytics/marketing cookies, which you can withdraw at any time.
• Legal obligation: where processing is required to comply with applicable law.

We do not sell your personal information. We share limited data with the following categories of service providers, solely to operate the Service:

• Payment processing: Stripe (billing, invoicing, and the customer billing portal).
• Authentication: Supabase (account credentials and session management).
• Search & AI providers: third-party search and large language model providers used to generate deal results from your queries.
• Legal compliance: where required to comply with law, regulation, legal process, or governmental request.

Each of these providers is contractually restricted from using your data for any purpose other than providing services to us.

Our service providers may process data outside your country of residence, including in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses to protect data transferred internationally.

We use strictly necessary cookies to keep you signed in and to protect your account. Where permitted by law, we may also use analytics cookies to understand how the Service is used; these are only set with your consent where required, and you can manage cookie preferences through your browser settings at any time.

We retain account and billing data for as long as your account is active and as needed to comply with legal, tax, and accounting obligations. Query and chat history is retained to maintain your conversation state and is deleted or anonymized on request or after a reasonable period of account inactivity.

If the GDPR applies to you, you have the right to:

• Access, correct, or delete your personal data.
• Restrict or object to certain processing, including processing based on legitimate interests.
• Request a portable copy of your data.
• Withdraw consent at any time, without affecting prior lawful processing.
• Lodge a complaint with your local data protection authority.

If the CCPA/CPRA applies to you (California residents), you have the right to:

• Know what personal information we collect, use, and disclose.
• Request deletion or correction of your personal information.
• Opt out of the sale or sharing of personal information -- we do not sell personal information.
• Not be discriminated against for exercising your privacy rights.

To exercise any of these rights, contact us at youssefmahmoud7@gmail.com or via our Support page. We will respond within the timeframe required by applicable law.

The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We use industry-standard technical and organizational measures -- including encryption in transit, access controls, and reputable third-party infrastructure providers -- to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. Material changes will be communicated by email or an in-app notice before they take effect.

For privacy questions or to exercise your rights, email youssefmahmoud7@gmail.com or youssefmahmoud7@gmail.com.

GEOARBITRAGE LTD
128 City Road, London, EC1V 2NX, United Kingdom