Privacy policy
What data the GeoData service collects, why, and what you can do about it.
Version of 11 September 2026.
Who processes your data
The data controller is the owner of the GeoData service at geo.gssoft2b.org. Controller details: [name, tax number] — to be stated here once registration is complete. You can reach us through the contact form on this site.
What we collect
At registration: your email address and a name. The password is stored only as an irreversible hash — we do not know it and cannot recover it. When signing in with Google: your email address, name and Google account identifier. We do not accept an email address Google has not verified. When linking Telegram: your chat identifier, name and username from Telegram. When placing an order: the categories and cities you chose, the area you drew on the map, the interface language, amounts and order status. When writing through the contact form: name, email, the message, and your IP address — the last one only to keep the form from being used for automated submissions. At payment: the method, the amount and the last four digits of the card. The full card number and CVV are not stored — there is no column for them.
What we use it for
So you can sign in and see your own orders. To carry out an order and tell you when it is ready — by email and, if you linked Telegram, as a chat message. To issue an invoice and confirm payment. To answer your enquiry. News is sent only to people who subscribed to it separately. Unsubscribing from news does not affect messages about your own orders.
On what basis
Data needed to carry out your order is processed in performance of the contract you enter when you place it. News is sent only with your separate consent, which you give and withdraw in your account with a single button.
Who we share it with
Resend — our email delivery provider. Receives your address and the text of the order notice. Telegram — if you linked a chat. Receives the chat identifier and the message text. Google — if you sign in with Google. The exchange follows the standard OAuth procedure; we send Google nothing beyond it. Place search and the map run through our own server: your browser never contacts OpenStreetMap directly, and your IP address does not reach it. The text you type into the category search is sent to OpenAI to match categories. It is sent without your name, email or IP address. We do not sell or pass your personal data to third parties for advertising.
How long we keep it
Account and order data — for as long as the account exists. An order can be deleted from your account in any state except while it is running. Contact-form enquiries — until the correspondence is finished. Service logs contain the recipient address of an email and the Telegram chat identifier; they are kept for a limited time and are used to investigate delivery failures.
Your rights
You can see your data in your account, change your password, unlink Telegram, unsubscribe from news and delete orders. To obtain a copy of your data, correct it, or delete the account entirely, write to us through the contact form. We answer such requests. Withdrawing consent to news takes effect immediately and does not affect notices about your orders.
Cookies and browser storage
A session cookie — so you stay signed in. Signing in is not possible without it. NEXT_LOCALE — remembers the interface language you chose. Browser storage holds the theme you picked, light or dark. There is no analytics, no advertising pixel and no third-party counter on this site.
How we protect it
The site runs over HTTPS. Passwords are stored as bcrypt hashes. Staff access to orders is limited by role, and revoking access takes effect within a minute. Full card numbers and CVV codes are not stored: the columns for them do not exist.
What we actually sell
The service delivers information about businesses from public maps: name, address, coordinates, phone, website, opening hours, rating. That is data about a business, not about you. Some email addresses were collected from the businesses' own websites. Among them are addresses that look personal (of the form firstname.lastname@). We mark such addresses separately in our database. If you find your own personal data in an export and want it removed, write to us and we will delete it.
Changes to this policy
We may update this policy. The version date is shown at the top of the page. We announce significant changes on the site.
Questions about personal data — through the contact form on this site. We answer requests to delete or correct data.