Privacy Policy
Last updated: 18 July 2026
This Privacy Policy explains what personal data ActiveGeo collects, why, and your rights over it. It is written for UK GDPR compliance.
This is a plain-English starting template and not legal advice. Have a qualified solicitor review it before relying on it commercially.
1. What we collect
Account data (name, email, password hash), access-request details (name, email, company, website, what you’d build), usage data (documents generated, feature usage), technical data (IP address and device/browser info used for security and abuse prevention), and billing data processed by our payment provider.
2. Why we use it (legal bases)
To provide and secure the Service (contract and legitimate interests), to review access requests and communicate with you (legitimate interests), to prevent abuse and fraud (legitimate interests and legal obligation), and to process payments (contract). We do not sell your personal data.
3. AI processing
Content you generate is sent to third-party AI providers to produce output. We pass only what is needed to fulfil your request. If you use your own provider key (BYOK), your requests are processed under your account with that provider.
4. Processors we use
We rely on trusted service providers to run ActiveGeo, including email delivery (Google / Gmail SMTP), payments (Stripe), AI providers (Anthropic, OpenAI, Google, DeepSeek), and our hosting and infrastructure (including Redis for rate limiting). Each processes data only as needed to provide their service.
5. Retention
We keep personal data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You can ask us to delete your data, subject to legal retention requirements.
6. Your rights
Under UK GDPR you may access, correct, delete, or export your personal data, object to or restrict certain processing, and withdraw consent where processing is based on consent. To exercise these rights, contact us. You may also complain to the ICO.
7. Cookies
We use essential cookies for authentication and session management. We do not use advertising cookies. Because our cookies are strictly necessary to sign you in, they do not require consent under current guidance.
8. Security
We protect data with measures including encryption of stored provider keys, hashed passwords and API keys, rate limiting, and approval-only access. No system is perfectly secure, but we work to safeguard your information.
9. Contact
For any privacy request, reach us via our contact page.