Privacy Notice

GEOSCOPE X is operated by Lemniscate ehf. (company ID 711019-1030), registered in Iceland. Lemniscate ehf. is the data controller for the personal data described in this notice.

• Account data — your email address and login credentials when you create an account.
• Usage data — the URLs you scan, audit results, tracked businesses, and how you use the service.
• Device data — an anonymised browser fingerprint, IP address and basic device characteristics, used for security and to enforce free-plan limits.
• Support messages — anything you send us when you contact us.

Payment details are collected and processed directly by Paddle, our Merchant of Record; we do not store your card details.

• Creating and managing your account — performance of our contract with you.
• Providing scans, reports and saved audits — performance of contract.
• Security, fraud prevention and enforcing plan limits — legitimate interests.
• Improving the service and fixing issues — legitimate interests.
• Customer support — performance of contract and legitimate interests.
• Meeting legal and tax obligations — legal obligation.

• Service providers that host and operate the service (cloud hosting, database, email delivery).
• Paddle, our Merchant of Record, for the sale of subscriptions, payment processing, tax compliance and invoicing.
• Professional advisers (legal, accounting) where needed.
• Authorities where required by law.

Some of our service providers process data outside the EEA. Where this happens, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

We keep personal data only as long as needed for the purposes above, then delete or anonymise it. Account data is kept while your account is active; audit history is kept until you delete it or close your account.

You have the right to access, rectify or erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. We respond to requests within one month. You also have the right to complain to the Icelandic data protection authority (Persónuvernd) or your local supervisory authority. To exercise any right, contact us using the details on our site.

We use appropriate technical and organisational measures — including encryption in transit, access controls and row-level data isolation — to protect your personal data.

We use essential storage and cookies to keep you signed in and remember your session. We do not use marketing cookies. You can clear or block cookies in your browser settings, though sign-in will stop working.

We may update this notice from time to time. The latest version is always on this page, and material changes will be highlighted in the service.