Privacy policy

LINKAVISTA SAS, 128 route des Écureuils, 24400 Sourzac, France, operates GeoLinka and is the controller for the processing described in this policy. You can contact it at [email protected] or by post at this address without creating an account.

This policy covers visitors, account holders, professional contacts and people whose information appears in analysed content. It supplements the legal notice and terms of sale.

We process information you provide, information generated by your use of GeoLinka and information obtained from public sources or providers needed for the analysis:

• Account and contact information: name, email address, authentication information and preferences. If you sign in with Google, we receive the identity information needed for authentication; this does not grant access to your mailbox or Search Console.
• Websites and analyses: domains, brands, activities, markets, languages, competitors, custom questions, AI responses, cited URLs, page extracts, scores, descriptions associated with a brand and dated histories. Public sources or responses may contain information about individuals.
• Orders: selected publishers and formats, briefs, anchors, destination URLs, insertion pages, delivered content, statuses and communications needed to fulfil the service.
• Billing and balance: billing details you provide, Stripe identifiers, payment references, invoices, amounts excluding VAT, VAT and totals, top-ups, debits, credits and bonuses. Full card numbers are entered with Stripe and are not stored in GeoLinka’s database.
• Operation and security: session identifiers, IP address, browser information, error logs, administrative actions and information needed to prevent abuse.
• Communications: launch mailing-list registrations, unsubscribe choices, support requests and account-related messages.

Required information is identified when collected. Without it, we may be unable to create an account, perform the requested action or provide billing documents.

Sign-in, payment and order-update emails are operational communications. They are separate from promotional communications.

Information is accessible to authorised LINKAVISTA SAS personnel and, to the extent necessary for their work, the relevant providers:

• DigitalOcean hosts the application server, currently in Frankfurt, Germany; Cloudflare handles routing and protection of web traffic.
• Stripe handles payments, subscriptions and billing documents.
• Amazon Web Services — SES sends transactional emails, currently through the us-east-1 region in the United States.
• OpenAI and Anthropic generate or analyse questions, answers and content, depending on the requested action.
• Bright Data and DataForSEO collect search results, AI responses and search data depending on the engines and features used; Jina AI reads web pages where this service is used.
• Semrush and Link Finder provide SEO information and link and domain data.
• Linkavista and the relevant partner publishers receive catalogue, brief, content and other information needed to fulfil publication or insertion orders.
• Google provides sign-in when you choose it; Google Fonts and Bunny Fonts deliver certain interface fonts, which may require transmission of the technical information needed to load them.

Payment providers and certain external services also process data for their own obligations under their privacy policies. Authorities or professional advisers may receive information where legally required or necessary to establish or defend rights.

We do not sell users’ personal data. A website or brand appearing in an analysis does not mean its owner is a GeoLinka customer.

To fulfil your request, GeoLinka may send a provider the question, domain, brand, market, website or brief extracts and the responses to analyse. The provider may generate new information from these inputs.

Payment data and passwords should not appear in questions or briefs. Avoid including sensitive data, trade secrets or third-party information without a need and appropriate authorisation.

Results and descriptions are automated analyses and may contain errors. GeoLinka does not use them to make decisions having legal or similarly significant effects on an individual. You may report inaccurate personal information or request a review of a result concerning you.

Reports attached to accounts and orders are subject to the service’s access controls. If you enable a sharing link, anyone who has it can view the information made available through that link during its validity. Share it only with intended recipients.

Expiry of a public link does not delete the account’s analysis history. Snapshots support comparisons between successive measurements.

Publication orders require sharing instructions with the relevant publisher and, once published, making the agreed content and links public. Deleting information from your account does not automatically remove a page already published on a third-party website.

Although the main application server is in Germany, certain services involve processing or access from other countries, including the United States. Sending email through Amazon SES and certain requests to AI providers involve processing outside the European Economic Area.

A transfer of personal data must rely on the mechanism applicable to the recipient: an adequacy decision, standard contractual clauses and additional measures where necessary, or another basis permitted by the GDPR. Hosting the server in Europe alone does not mean all processing takes place in Europe.

You may request information about the provider involved and the safeguards applicable to your processing using the contact details below. Contractual information is provided subject to confidentiality and security requirements.

Information is retained according to its usefulness for the stated purpose and applicable obligations. Closing public access, archiving a website and deleting an account are different operations.

• Accounts, websites, measurements and content: during the service relationship to provide access, historical comparisons and requested monitoring. After closure, unnecessary data is deleted or anonymised; information needed for a complaint or legal obligation is isolated for the applicable period.
• Invoices and accounting records: ten years from the end of the relevant financial year, in accordance with accounting obligations.
• Evidence of a contract or complaint: for the applicable limitation period and, in the event of litigation, until its final resolution.
• Marketing: until consent is withdrawn or, at the latest, three years after collection or your last active contact. Information strictly necessary to honour an objection may be retained separately.
• Sessions: expiry after the configured inactivity period, currently 120 minutes for the application session. Persistent sign-in may maintain authentication until sign-out or revocation.
• Logs, caches and backups: periods limited to security, diagnosis and continuity needs. Data deleted from the application may temporarily remain in a backup until rotation; it must not be reused for another purpose.

You may request deletion of a history or details about the period applicable to your data. Archiving a website to meet a quota does not automatically delete its earlier measurements.

GeoLinka uses mechanisms necessary for sessions, authentication, protection against malicious requests, basket selection and language or appearance preferences. Cloudflare and Stripe may also use security cookies during relevant operations.

Mechanisms necessary for the requested service do not rely on advertising consent. Blocking them may prevent sign-in or payment. Signing out and browser settings allow locally stored data to be removed.

No behavioural advertising or non-essential audience measurement system is integrated into the version of GeoLinka described here. If such trackers are introduced, appropriate prior choices must allow acceptance or refusal and subsequent changes. Continuing to browse does not constitute acceptance.

Subject to the GDPR’s conditions, you have rights of access, rectification, erasure, restriction, portability and objection. You may withdraw consent for future processing without affecting previous lawful processing and give instructions concerning your data after your death under applicable French law.

Contact [email protected], explaining your request and providing information to locate the relevant data. A Linkavista account is not required. Identity evidence is requested only where there is reasonable doubt and to a proportionate extent.

We respond within one month of receiving a request. If its complexity or the number of requests justifies an extension permitted by the GDPR, we inform you of that extension and the reasons within the first month.

You may complain to the CNIL, without waiving administrative or judicial remedies. A request may concern information about you collected from public sources even if you are not a customer.

Measures include HTTPS communication encryption, password hashing, access controls and restrictions on sensitive operations. Administrative access is limited to authorised people. No system guarantees absolute security; incidents are handled according to their severity and applicable notification obligations.

This policy is updated when processing changes. Its version date is shown at the top of the page. A change requiring fresh consent cannot be implemented solely by updating this text.