Privacy Notice

GEOSCOPE X is operated by Lemniscate ehf. (company ID 711019-1030), registered in Iceland. Lemniscate ehf. is the data controller for the personal data described in this notice.

• Account data — your email address and login credentials when you create an account.
• Usage data — the URLs you scan, audit results, tracked businesses, which free tools you use and when (so we can apply the monthly free-usage limits), and how you use the service.
• Improvement plan data — the audit used to create your improvement plan, the tailored suggestions created for it, and the status of that plan.
• Device data — an anonymised browser fingerprint, IP address and basic device characteristics, used for security and to enforce free-plan limits.
• Support messages — anything you send us when you contact us.

Payment details for subscriptions and one-time purchases are collected and processed directly by Paddle, our Merchant of Record. We store the purchase reference and status, but we do not store your card details.

We do not ask for or collect passwords to your website, hosting account or other business systems.

• Creating and managing your account — performance of our contract with you.
• Providing scans, reports and saved audits — performance of contract.
• Creating and saving your improvement plans — performance of contract.
• Security, fraud prevention and enforcing plan limits — legitimate interests.
• Improving the service and fixing issues — legitimate interests.
• Customer support — performance of contract and legitimate interests.
• Meeting legal and tax obligations — legal obligation.

• Service providers that host and operate the service (cloud hosting, database, email delivery).
• Paddle, our Merchant of Record, for the sale of subscriptions and one-time products, payment processing, tax compliance and invoicing.
• AI processing providers that help create tailored improvement suggestions. We send the website content and audit information needed to create the purchased plan.
• Professional advisers (legal, accounting) where needed.
• Authorities where required by law.

Some of our service providers process data outside the EEA. Where this happens, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

We keep personal data only as long as needed for the purposes above, then delete or anonymise it. Account data is kept while your account is active; audit history is kept until you delete it or close your account. A generated improvement plan is kept with its audit so you can open it again. Purchase records may be kept longer where tax or accounting law requires it.

You have the right to access, rectify or erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. We respond to requests within one month. You also have the right to complain to the Icelandic data protection authority (Persónuvernd) or your local supervisory authority. To exercise any right, contact us using the details on our site.

We use appropriate technical and organisational measures — including encryption in transit, access controls and row-level data isolation — to protect your personal data.

We use essential storage and cookies to keep you signed in and remember your session. When you run a scan or create an account, we may also measure that outcome with Google Ads to see whether our advertising works. Where the law asks for permission first (EU/EEA, UK, Switzerland and Quebec), we show a cookie banner and nothing advertising related is measured until you accept. You can change your choice any time with the Cookie settings link in the footer. Google may use the data it receives as described at business.safety.google/privacy. You can clear or block cookies in your browser settings, though sign-in will stop working.

We may update this notice from time to time. The latest version is always on this page, and material changes will be highlighted in the service.