Privacy Policy

Geograph is operated by Sync Inc Ltd, a company registered in the United Kingdom. Sync Inc Ltd is the data controller for the personal data described in this policy.

You can reach us about anything in this policy using our contact form.

If you join the waitlist, we collect your email address and the date you joined. That is all.

If you create an account, we also collect your name, company or product name, website URL, product description, target audience, keywords, competitor names, and the categories you select. This is the information Geograph needs in order to generate anything useful for you. If you don't provide this information, you won't be able to use Geograph as parts of the account setup require it to function.

As you use the service we store what it produces: site audit results, matched Reddit threads, generated reply drafts and articles, and your notification preferences. Payment details are handled entirely by Stripe. We never see or store your card number.

To find relevant conversations, Geograph collects publicly posted Reddit content, usernames, post and comment text, and subreddit activity, from the communities you choose to monitor. This data belongs to Reddit users who have not signed up for Geograph and have no direct relationship with us.

We process this data on the basis of legitimate interests: helping our customers find genuinely relevant conversations in public communities, without using the content for anything beyond that matching and drafting purpose. We don't use it to build profiles of individual Reddit users, and we don't retain it longer than necessary.

Because this data isn't collected directly from the people it's about, and it would be impractical to contact each Reddit user individually, we're relying on this policy being publicly available to meet our transparency obligations under UK GDPR. Reddit's own developer terms and API rules also govern how this data can be collected and used, and apply alongside this policy.

We use your account and product information to provide the service you signed up for. The legal basis is performance of our contract with you.

We use technical and error data to keep the service secure and working. The legal basis is our legitimate interest in operating a reliable product.

We use your email to send service notifications you have enabled, and you can turn any of them off in your settings at any time.

How we measure use of the service. When you use your account, we record key actions, such as signing up, starting or changing a subscription, generating an article, drafting a reply or running a site audit, so we can see which features work and improve them. These records are sent to PostHog from our own servers and are linked to your account. They don't use cookies or store anything on your device, so they don't depend on your cookie choices. The legal basis is our legitimate interest in improving the product. You can object at any time using our contact form.

We use a small number of processors to run the service: Supabase (database, authentication, file storage), Vercel (application hosting), Railway (background processing), Stripe (payments), Resend (transactional email), Sentry (error monitoring), Moz (domain authority data), ScrapeBadger (public Reddit data), Google Analytics (site usage analytics, only if you've given cookie consent) and PostHog (product analytics, with data stored in the EU, see "How we measure use of the service" and "Cookies" below).

To generate drafts, the product information you provide is sent to Anthropic and to OpenRouter. We send only what is needed to produce your content.

We do not use your content or account data to train our own AI models. We can't make that same guarantee on behalf of Anthropic or OpenRouter or the model makers they host, how they handle the data we send them is governed by their own policies, not ours, and we'd encourage you to review those directly if this matters to you.

We do not sell your personal data, and we do not share it for advertising.

Some of the providers listed above process data outside the United Kingdom, including in the United States. Where that happens, transfers rely on the safeguards offered by those providers, such as standard contractual clauses.

If you're located in the European Economic Area, EU GDPR applies to our processing of your data alongside UK GDPR, and you have equivalent rights to those set out below.

Waitlist emails are kept until you ask us to remove them, we may send you occasional emails about the Geograph product.

Account and site data is kept while your account is open. Some operational records are pruned automatically on a schedule.

If you remove a site or close your account, we delete your data within 60 days unless we are required to keep records for legal or accounting reasons. Deleted data may persist briefly in encrypted backups after that point, for no longer than 60 days, before being permanently purged.

We use three kinds of cookies.

Essential cookies keep you signed in. These don't require consent, they're necessary for the service to function.

Functional cookies remember which member referred you, if you arrived through a referral link, for 30 days. Unlike our essential cookies, this one isn't strictly necessary for the service to work, so you'll be asked for consent before it's set, and you can decline it without affecting your ability to use Geograph.

Analytics cookies. We use Google Analytics and PostHog to understand how visitors use our site. With your consent, PostHog also records sessions (the pages you visit, clicks and scrolling, with anything you type into form fields hidden) so we can find and fix problems, and if you're signed in these are linked to your account. These aren't essential to the service working, so they're only set once you've given consent, and you can withdraw that consent at any time. Google may process this data outside the UK, see "International transfers" above. PostHog stores this data in the EU. If you haven't chosen yet, or you decline, PostHog still counts your visit without cookies and without storing anything on your device: pages viewed and clicks are linked only to an anonymous identifier worked out on PostHog's servers, which can't follow you across days or be tied to your account, and nothing is recorded. The legal basis for this is our legitimate interest in understanding how the site is used.

We do not use advertising or cross-site tracking cookies.

Under UK data protection law (and EU GDPR, if you're in the EEA) you have the right to access your data, correct it, delete it, restrict or object to how we use it, and receive a copy in a portable format.

Send your request through our contact form and we will action it. If you are not satisfied with our response, you can complain to the Information Commissioner's Office at ico.org.uk, or the data protection authority in your own EEA country if applicable.

If we make a material change we will update the date at the top of this page and, where the change affects you meaningfully, tell you by email.