It covers this website and the Geo-CoWork app. If your organization has signed an agreement with us, that agreement comes first where the two differ.

What we collect

What	Includes
Your account	Name, work email, time zone and theme; a hash of your password (never the password); Google or Microsoft account ids if you connect them; your two-step secret, encrypted.
Your organization	Its name, industry and country; its members and their roles; billing details you enter (legal name, address, tax number).
Your content	The files you upload and what we make from them (map tiles, cloud-optimized copies, the search index, file profiles); your questions, the answers and the steps behind them; exports, tasks, follow-ups and share links.
Connections	The settings of services you connect, and their credentials, encrypted.
Usage and billing	Each model call with its tokens, cost and credits; payments and invoices. Card and bank details go to the payment provider, never to us.
Security records	Sign-ins and sessions with the browser and IP address used, and a log of sensitive changes (keys, members, connections).
Website forms	Your name, work email, company and what you tell us about your data when you ask for access, a quote or updates.

How we use it

To run the service: store your files, process them, answer your questions and carry out the actions you ask for.
To keep accounts safe: sign-in checks, rate limits, and records of who changed what.
To bill: credits, payments, invoices and the usage pages.
To reply to you: form requests, support and the emails the service sends (sign-in links, receipts, alerts).

We don't sell your data, and we don't use it for advertising.

AI and your data

When you ask a question, the model that answers receives your question, the profile of the files involved (field names, value counts, a few sample values) and the results of the steps it runs. Processing a file sends its field names and sample values so the model can tell which field means what.
With Platform Models that model runs at Anthropic, through its business API. With your own key, it runs at that key's provider, under your account's terms with them.
We don't train AI models on your data. Under its commercial terms, Anthropic doesn't use data sent through its business API to train its models.
The search index is built on our own servers; no outside service sees your file contents for it.

Who else handles it

Anthropic, for answers and processing on Platform Models.
Stripe and Razorpay, when you buy credits, for the payment itself.
Our email delivery provider, for the emails the service sends.
Services you connect (Slack, your S3 storage, your webhooks), receiving only what you or your automations send them.
When we run error reporting, its provider receives error details, without request contents, cookies or credentials.

Each of them may only use the data to provide their service to us. How we protect data while it's with us is on the Security page.

Cookies and browser storage

The app sets only the cookies it needs: one that keeps you signed in, one that recognises your browser for security, and short-lived ones while you sign in with Google, Microsoft or a two-step code. There are no advertising or analytics cookies. This website counts, per day, how often its pages are read and its buttons clicked, with nothing that identifies you, and counts nothing when your browser asks not to be tracked. It also remembers where you came from (a campaign link) in your browser's session storage, only to add it to an access request you send.

How long we keep it

Your account and your organization's data: while they exist.
A deleted organization: kept for 7 days so it can be restored on request, then removed with its files. A deleted file or project: removed from storage when you delete it.
Website form requests: as long as we're in touch about them.
Invoices and payment records: as long as tax law requires.
Backups exist only to restore the service after a failure. Data you delete can remain in them until those backups are removed.

What you can ask of us

A copy of the personal data we hold about you, or a correction (most of it you can change in Settings yourself).
Deletion of your account or your data. Files, projects and organizations you can delete in the app.
To stop emails you didn't ask for, and to withdraw a form request.

Write to privacy@example.com; we answer within 30 days. If you're not satisfied, you can also complain to your data protection authority.

Children

Geo-CoWork is a tool for work and isn't meant for anyone under 18.

Changes

When this policy changes, the date at the top changes. For changes that matter, we email the Owners of each organization before they take effect.