Privacy Policy

1. Introduction

Wisetech International Sdn Bhd ("Company", "we", "us") operates GeoPilot. This Privacy Policy explains how we collect, use, and protect your personal information. By using GeoPilot, you consent to the practices described here. We comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

2. Information We Collect

Information you provide:

• Account details (name, email, password)
• Website URLs submitted for analysis
• Business profile information
• Communications you send us
• Payment information (processed by Stripe — we do not store card details)

Information collected automatically:

• Log data (IP address, browser type, pages visited, timestamps)
• Device information (device type, operating system)
• Usage data (features used, analyses run, session duration)
• Authentication cookies

From third parties:

• Google OAuth authentication data (if you sign in with Google)
• Publicly available information about websites you submit

3. How We Use Your Information

• Provide, operate, and improve the Service
• Process AI visibility analyses
• Send reports and notifications you requested
• Manage your account and respond to inquiries
• Process payments and manage billing
• Monitor usage and prevent abuse
• Comply with legal obligations

We will not use your personal data for direct marketing without your explicit consent.

4. How We Share Your Information

We do not sell your personal data. We may share with:

• Service providers: Supabase (database & auth), Stripe (payments), OpenRouter API (AI queries)
• Legal requirements: When required by law, court order, or government authority
• Business transfers: In connection with a merger or acquisition, with confidentiality protections
• Safety: To protect rights, property, or safety of our Company, users, or the public

5. AI Model Data Processing

When you submit a website for analysis, we send to AI model providers via OpenRouter API:

• Your website URL and domain name
• Your brand name and business category
• Generated search queries related to your business

We do not send personal information such as your name or email to AI providers. AI providers may retain query data per their own privacy policies.

6. Data Retention

• Account data: Retained until account deletion
• Analysis results: Retained for 12 months
• Log data: Retained for 90 days
• Payment records: Retained for 7 years as required by Malaysian law

After account deletion, we may retain anonymized aggregated data for analytical purposes.

7. Your Rights Under PDPA Malaysia

You have the right to:

• Access: Request a copy of personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and personal data
• Withdraw consent: Where consent is the legal basis for processing
• Restriction: Request restriction of processing in certain circumstances

Contact privacy@geopilot.app to exercise these rights. We respond within 21 days as required by PDPA.

8. Cookies

• Essential cookies: Required for authentication and basic functionality. Cannot be disabled.
• Analytics cookies: Help us understand usage patterns. Can be disabled.

We do not use advertising or tracking cookies and do not share cookie data with advertisers.

9. Data Security

We implement industry-standard security measures including TLS/HTTPS encryption in transit, encryption at rest via Supabase, and access controls. No method of transmission is 100% secure. In the event of a breach affecting your rights, we will notify you as required by law.

10. Children's Privacy

The Service is not directed at children under 18. We do not knowingly collect information from children. If you believe we have done so, contact us immediately and we will delete such information.

11. International Data Transfers

Your data may be processed outside Malaysia through our service providers (Supabase, OpenRouter, Stripe). We ensure appropriate safeguards are in place in accordance with applicable data protection laws.

12. Changes to This Policy

We may update this policy at any time. Material changes will be communicated by email or notice on the Service. Continued use after changes constitutes acceptance.

13. Contact

We respond to all privacy requests within 21 days in accordance with the Personal Data Protection Act 2010 (Malaysia).