Privacy Policy

Last Updated: August 2026

1. Introduction

Welcome to Geobble ("we," "our," or "us"). We are committed to protecting your personal information and your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the platform.

2. Information We Collect

2.1. Information You Provide

We collect information you provide directly to us, including:

Account Information - When you create an account, we collect your email address, display name, handle, and account type (Individual or Organization)
Profile Information - Optional information such as bio, avatar, and other profile details you choose to provide
Geospatial Data - Data files you upload, including geographic information, attributes, and metadata associated with your sources
Communications - Information you provide when you contact us for support or participate in community features

2.2. Information Automatically Collected

We automatically collect certain information when you use our platform:

Usage Data - Information about how you interact with our platform, including pages viewed, features used, and actions taken
Device Information - Information about your device, including IP address, browser type, and operating system
Log Data - Log information about your use of the platform for troubleshooting and security purposes
Web and Product Analytics - If you consent, we may use Cloudflare Web Analytics for aggregate website traffic and performance and PostHog product analytics to understand activation and core workflow usage. Product analytics events are limited to allowlisted metadata such as account IDs, coarse workflow names, counts, and plan context.

2.3. Cookies and Tracking Technologies

We use essential cookies and local browser storage for authentication, security, language, theme, and interface preferences. Optional web and product analytics are loaded only after you consent. Broad autocapture and session replay are disabled, and we do not send raw prompts, AI responses, source rows, feature properties, private titles, secrets, signed URLs, query strings, referrers, stack traces, geometry, or evidence text in analytics events.

3. How We Use Your Information

We use the information we collect for the following purposes:

Service Provision - To provide, maintain, and improve our platform, including processing your geospatial data and creating interactive maps
Authentication - To verify your identity and provide secure access to your account
Communication - To send you technical notices, updates, security alerts, and support messages
Analytics - To analyze aggregate usage and performance patterns and improve our platform's functionality and user experience
AI Processing - To power our AI features, including natural language queries and data extraction (your data is processed in accordance with our AI provider's policies)
Security - To detect, prevent, and address technical issues and fraudulent activity

We process your personal data under the following legal bases as defined by the EU General Data Protection Regulation (GDPR):

Contract Performance (Art. 6(1)(b)) — Processing necessary to provide the Geobble platform services you signed up for, including account management, data storage, and map publishing.
Legitimate Interest (Art. 6(1)(f)) — Processing for platform security, fraud prevention, reliability, and service improvement where our interests do not override your fundamental rights.
Consent (Art. 6(1)(a)) — Where we rely on consent, including optional web and product analytics, you may withdraw consent at any time by adjusting your preference or contacting us.
Legal Obligation (Art. 6(1)(c)) — Processing necessary to comply with applicable laws (e.g., tax records, law enforcement requests).

5. Data Storage and Processing

5.1. Data Location

All primary data is stored and processed within the European Union:

Application Servers and Database — Dedicated Netcup infrastructure hosted in Germany.
Object Storage — Cloudflare R2 object storage configured with EU jurisdiction. Uploaded files, map images, and avatars are stored here.

Primary application and object-storage data remains in the EU. Data may be processed outside the EU when you explicitly use an AI-powered feature whose configured model provider operates elsewhere. If you publish a map with PUBLIC visibility, public map assets may also be served through Cloudflare's global network for performance.

5.2. Geospatial Data

Your uploaded geospatial data is stored securely and processed using a dedicated spatial database. Data is organized by account and collection, with audience controls determining accessibility. We maintain appropriate technical and organizational measures to protect your data.

5.3. Sub-Processors

We use the following sub-processors to deliver our services:

Sub-Processor	Purpose	Location
Netcup	Application servers and database	Germany (EU)
Cloudflare, Inc.	CDN, EU-jurisdiction object storage, DNS, optional web analytics	EU storage; global edge for public content
PostHog	Optional product analytics after consent	European Union
Vercel AI Gateway	AI request routing and access to configured model providers	Processing location depends on the selected provider
Configured AI model providers	Model inference for user-invoked AI features	May include North America, Europe, Asia, and other regions
Dodo Payments	Payment processing	EU

5.4. AI Processing

When you use AI-powered features such as data extraction or natural-language queries, the prompts and relevant data excerpts required for the request are sent through Vercel AI Gateway to a configured model provider. Provider selection is configurable and may vary by feature, model availability, or fallback behavior. Providers may process data in North America, Europe, Asia, or other regions, and their processing and retention terms may differ. You can avoid this processing by not using AI-powered features.

5.5. Data Retention

We retain your data for as long as necessary to provide our services and comply with legal obligations. When you delete your account or specific resources, we will remove or anonymize such data within a reasonable period, except where required by law.

5.6. Data Backups

We may retain access-controlled backup copies for disaster recovery. Backup copies expire under our operational retention schedules, so deletion from backups may occur after deletion from active systems.

6.1. Third-Party Service Providers

We share information with third-party service providers who perform services on our behalf:

Cloud Infrastructure - Hosting and data processing services
AI Providers - For natural language processing and AI features

Your data may be shared with others based on your audience settings:

Public - Anyone with the link can view the resource
Private - Only you can view the resource
Restricted - Only specific people you invite can view the resource

6.3. Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders or subpoenas).

7. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Under the GDPR and applicable data protection laws, you have the following rights:

Access (Art. 15) — Request a copy of all personal data we hold about you.
Rectification (Art. 16) — Request correction of inaccurate or incomplete data.
Erasure (Art. 17) — Request deletion of your personal data ("right to be forgotten").
Restriction (Art. 18) — Request that we restrict processing of your data.
Portability (Art. 20) — Receive your data in a structured, machine-readable format (GeoJSON, CSV).
Objection (Art. 21) — Object to processing based on legitimate interest.
Withdraw Consent — Where processing is based on consent, withdraw it at any time.

Data Export: The Platform supports source-level exports in available open formats. To request a copy of personal data or data that cannot currently be exported through the Platform, contact us.

Account Deletion: You may request account deletion through available account controls or by contacting us. The current deletion process may first disable or soft-delete the account while associated data is removed or anonymized within a reasonable period, subject to legal, security, billing, and backup-retention requirements.

To exercise any of these rights, contact us at [email protected]. We will respond within the period required by applicable data protection law.

9. Children's Privacy

Our platform is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

10. International Data Transfers

Your primary application and object-storage data is stored in the European Union. When a user invokes an AI-powered feature, the configured model provider may process the necessary request data outside the EU. Where personal data is transferred to a sub-processor outside the EEA, we use applicable transfer safeguards, such as European Commission-approved Standard Contractual Clauses, where required.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our platform and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

12. Data Protection Officer

For GDPR-related inquiries, you can contact our data protection contact:

Email: [email protected]

You also have the right to lodge a complaint with your local data protection supervisory authority.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email: [email protected]
Website: https://geobble.com
Social Media: @geobble on Twitter/X, LinkedIn, and Discord