Privacy
Your data, your rights.
How Sorezki Ltd. collects, uses, and protects your data across the Geordy service. Effective April 1, 2025.
The short version
We collect what we need. We encrypt what we keep.
GDPR-aligned, encrypted in transit and at rest, and yours to access, correct, or delete. The detail is below.
Governing law. This Privacy Policy is governed by and construed in accordance with the laws of the State of Israel. International users acknowledge that their use of the Service is at their own risk and subject to the limitations of their respective jurisdictions.
By accessing or using the Geordy service (the "Service"), you consent to the collection, use, and processing of your information as set forth in this Privacy Policy. If you do not agree, please do not use the Service.
Overview and Purpose
Geordy is committed to protecting your privacy while delivering its AI-powered content optimization services. This Policy explains what information we collect, how we use it, and the measures we take to secure your data in compliance with applicable privacy laws, including the GDPR.
Information We Collect
2.1 Personal Information
We collect Personal Information only when you voluntarily provide it—for example, when you submit your site URL, email address, or phone number for premium services. When you sign in using Google, we collect and store your email address in our database. No additional identifiable information is collected directly.
2.2 Technical and Usage Data
We automatically collect technical data (e.g., IP addresses, browser details, and session metadata) via third-party tools. This data is aggregated and anonymized for analytics, performance monitoring, and security purposes.
2.3 Third-Party Data Processing
To deliver our Service, we rely on trusted providers:
Cloudflare for performance optimization and security;
Posthog for analytics and session replay;
OpenAI for advanced content processing; and
Paddle for payment processing.
Your data is processed by these providers in accordance with their privacy policies and Data Processing Agreements. Data collected by these providers may be transferred to and stored in the United States under appropriate safeguards (e.g., Standard Contractual Clauses).
When you make a payment through Paddle, your payment information, including your name, address, and credit card details, is processed by Paddle and subject to their privacy policy. Geordy does not have access to or store your full payment details.
Legal Basis for Processing
We process your information based on the following legal bases:
- Consent: For data you provide voluntarily, including when you sign in with Google.
- Legitimate Interest: For aggregated technical data used to improve the Service.
- Contractual Necessity: To fulfill your service requests (e.g., full-site scanning) and process payments.
Your Rights
Under applicable data protection laws, you have the right to:
- Access: Request information about the data we hold.
- Rectification: Request corrections to any inaccurate data.
- Deletion: Request the removal of your Personal Information (subject to legal obligations).
- Data Portability: Request your data in a portable format.
- Restriction/Objection: Request limitations on, or object to, the processing of your data.
To exercise these rights, please contact our Data Protection Officer, Daniel Alter, at [email protected], or through our contact form. We will respond within 30 days.
Data Retention
- Personal Information: We retain the Personal Information you provide, including your email address, only as long as necessary—typically up to 12 months following service completion or account inactivity—unless required by law.
- Aggregated Data: Aggregated and anonymized data may be retained indefinitely for analytics and service improvement purposes.
Security Measures
We implement robust security measures, including encryption in transit (TLS 1.2+) and at rest (AES-256), role-based access controls, and regular security audits, to protect your data. Access to Personal Information is strictly limited to authorized personnel.
Children's Privacy
The Service is intended for business use and is not directed toward children under the age of 13. We do not knowingly collect Personal Information from children. If such information is inadvertently collected, it will be promptly deleted upon request.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via a prominent notice on our website and, when appropriate, by email. The revised Policy will be effective immediately upon posting. Your continued use of the Service constitutes your acceptance of the updated Policy.
Contact Information
For privacy-related inquiries or to exercise your rights, please contact our Data Protection Officer, Daniel Alter, at: [email protected], or use our contact form.
By using the Geordy Service, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.