Privacy and Cookie Policy

Geolitix (“We”, “Us”, or “Our”) collect(s) personal and non-personal data (“Data” or “Personal Data'') from all its Users of the services it offers. This Privacy and Cookie Policy (“Policy”) is in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the California Consumer Privacy Act 2020 (“CCPA”), the Canadian Personal Information Protection and Electronic Documents Act S.C. 2000, c.5 (“Pipeda”), and any other applicable law that may apply to visitors to our website, and any other customer or User of our services (“User(s)").

Article 1 The Data Controller

1.1. Geolitix Technologies Inc. Contact Email: privacy@geolitix.com

Article 2 Types of Data We Collect

2.1. The following are different types of Data that Geolitix may collect:

• First and last name;
• Phone number(s) and email address(es);
• Login credentials and password;
• Company name;
• Physical address(es);
• Country and city;
• Geographical position and geophysical data.

2.1.1 Collection and Sharing of Project and User Information:

When a user opts to share a project, we collect information about the shared project, including the user name, project name, project content, and any associated metadata. This collected information is also shared with the recipient(s) of the shared project.

This data allows us to facilitate the sharing of projects within our platform and enhance collaborative functionalities. If a project is shared through an open link, we track the usage of that link but do not collect personally identifiable information about who accesses the project through the link, unless such information is voluntarily provided or automatically collected through other means outlined in this Policy.

2.2. Complete details on each type of data we collect are provided in the dedicated sections in this Policy or by specific explanation displayed prior to the Data collection event initiated through use of our services.

2.3. Personal Data is always voluntarily provided by the User, or in case of usage data, automatically collected when using our services.

2.4. Unless otherwise specified, all Data requested by Geolitix is obligatory, and failure to provide such information may make it impossible for Geolitix to provide the requested services to Users. In the event, Geolitix states that providing certain Data is not mandatory, Users may refrain from communicating it with us. Users who would like to know what Data is required to use our services may contact us at privacy@geolitix.com.

Article 3 Methods of processing

3.1. We undertake all appropriate security measures to prevent unauthorised access to User Data. The processing of Data is generally carried out using IT-enabled tools, following organisational procedures strictly related to the purposes indicated in this Policy.

3.2. Data may be accessed by our employees, contractors and agents, and as long as they are authorised and involved with the operation of Geolitix. This access may include use by approved external parties, such as service providers, mail carriers, and hosting providers.

Third-party service providers: As part of our commitment to provide a robust, secure, and efficient service, we engage with third-party service providers which may process and access the data we collect.

The use of third-party service providers is essential to our operations. They are obligated to handle data in compliance with their respective privacy policies and the stipulations of this Privacy Policy. We take diligent steps to ensure that our service providers adhere to the principles of data protection and privacy as outlined in this Policy.

Article 4 Legal basis of processing

4.1. Under the applicable laws and regulations, we may process Data related to Users if one of the following legal bases apply:

4.1.1. Users have given their consent for one or more purposes under the law, until the User has objected to such processing ("opt-out");

4.1.2. The delivery of Data is necessary for the performance of a legal duty, an agreement with the User or pre-contractual obligations;

4.1.3. The processing is required to comply with a legal obligation to which we are subject, related to a task that is carried out in the public interest, or necessary for legitimate interests pursued by us or any third party.

4.2. We are always prepared to answer any questions in order to clarify the legal basis that applies to the processing, and in particular whether the provision of your Personal Data is necessary for the performance of a contract, compliance with a legal obligation, or based on your consent.

Article 5 Venue of processing

5.1. The Data is processed at our operational offices located in Canada, as well as at any other places where the parties involved in the processing are located. This includes the processing and storage of data in Ireland, where our primary data hosting provider, Amazon Web Services (AWS), operates our assigned data centres (specifically, the AWS eu-west-1 region) and under certain circumstances, we may access parts of this data from other countries, such as Argentina.

Users must be aware of the section explaining the processing of Data and learn about the legal basis of such a transfer.

By using our services, users acknowledge that their data may be transferred to, and processed in, these locations in accordance with applicable data protection laws and our privacy policy. Our use of AWS, and any other third-party service providers, adheres to robust security and privacy standards to ensure your data is securely handled.

Article 6 Retention time

6.1. Your personal Data shall be stored and processed for as long as the legitimate purpose requires it. In case of our legitimate interest, the data shall be kept as long as necessary. Users may find information regarding the legitimate interests within the relevant sections of this Policy or by contacting us directly.

6.2. We may retain Personal Data for a longer period as long as you have not withdrawn your consent. We may be obliged to retain Personal Data for a more extended period whenever there is a legal obligation issued by an authority.

6.3. Once the retention period has expired, the Data will be deleted, as a result Users lose the right to exercise the right to access, delete, correct and transfer the Data.

Article 7 Purposes of processing

7.1. The Data concerning the User is collected and processed for the following purposes:

• Providing our services to you;
• Registration, authentication and login credentials;
• Managing contacts, communicating and answering inquiries;
• Analytics and content features;
• Payments;
• Hosting and backend infrastructure
• Managing support services and contact requests
• Platform services and hosting
• Behavioural targeting
• Social plugins and spam protection for
• Tag Management and user database management.

Sharing projects between users and facilitating user collaboration: As a user of our services, you have the ability to share your projects with other users. This feature allows for enhanced collaboration between users. When you share a project, the recipient is notified and can view the name of the project owner and the project's content. You can also share your project via an open link, where anyone who has the link can view the project's content. As part of this process, we may collect, process and store information related to the shared projects, the details of the recipients, and any interactions between users within the platform.

For further details about the collection and sharing of project and user information, please refer to section 2.1.1.

Subscription and Commission Management through a Reseller: We have established an agreement with a reseller who operates in various regions and markets our services to clients. When a user chooses to subscribe to our services via a reseller-provided link, we collect and process information related to the transaction. This includes the user's subscription details, confirmation that the subscription was initiated through the reseller, and the computation of the commission owed to the reseller based on the sale. In order to facilitate effective communication with the new user and ensure accurate commission calculations, we share relevant information with the reseller. Please note that the reseller is responsible for complying with applicable data protection laws.

7.2. Geolitix uses the following third-party Data Processors. Please read their respective privacy policies, because they contain important rights regarding User's privacy rights.

Stripe (Stripe, Inc.) USA
Users are redirected to Stripe, and they capture the payment information. Geolitix never handles credit card numbers.
https://stripe.com/privacy

AWS (Amazon Web Services, Inc.) Ireland
AWS hosts all the data we collect.
https://aws.amazon.com/privacy/

QuickBooks (Intuit Inc.) USA
We use QuickBooks for financial and accounting purposes.
https://quickbooks.intuit.com/global/privacy/

Microsoft Corporation USA
We use Microsoft Suite for communications, collaborations, and other purposes.
https://privacy.microsoft.com/en-us/privacystatement

Article 8 Underaged

8.1. Users represent that they are at least 16 years old, or the age of majority in their own jurisdiction if it is higher. Minors may use Geolitix only with the assistance of a parent or legal guardian. Under no circumstance, persons under the age of 16 may use Geolitix, and we shall never knowingly collect or process Data from under-aged persons.

Article 9 Device and usage data

9.1. Irrespective of the device you use to access our services, we may receive information from that device such as geographical location, IP address(es), screen size and other hardware information. We collect this information from your device(s) in accordance with the consent that Users have given.

9.2. Geolitix may collect usage data automatically through our services or third-party Data Processors. Such information can include: the IP addresses or domain names of the computers utilised by the Users who use Geolitix, the time of User's request, the method used to submit requests to the server, the size of the file received in response, the country of origin, the features of the browser and the operating system, the time spent on each page within the application and the details about the path followed within the website or mobile application, and any other parameters about the device operating system and User's IT environment.

Article 10 Data Subject Rights

10.1. Users may exercise certain legal rights under the applicable laws. Please read the list below carefully.

• Withdraw their consent at any time;
• Object to processing of their (personal) Data;
• Access their Data;
• Verify and request rectification;
• Restrict to the processing of their Data;
• Deletion of their Data or otherwise have it permanently removed;
• Receive their Data and have it transferred to another controller;

10.2. Users have the right to bring a claim before the competent data protection authority, in Canada the Office of the Information & Privacy Commissioner for British Columbia ("OIPC") and Office of the Privacy Commissioner of Canada ("OPC").

Article 11 Details about the right to object to processing

11.1. Where Personal Data is processed for a public interest, we may process your Data for the purposes of a legitimate interest. Users may object to such processing by providing a proper legal basis in connection to their objection.

11.2. We may also process information for marketing purposes. Users can object to such processing without providing any reason. Users, however, cannot object to the processing of Personal Data when it is necessary to provide our services to them.

Article 12 How Users exercise their rights

12.1. Any requests to exercise your rights mentioned in this Policy can be directed to by email to privacy@geolitix.com. Such requests can always be exercised for free and will be addressed by us as early as possible, but always within one month.

Article 13 Additional information about Data collection and processing

13.1. We may use the User's Personal Data in court, and in the stages leading to legal action or a lawsuit arising from a conflict between Geolitix and User as a result of our services. As a result, Geolitix may be required to reveal personal data upon request of public authorities.

13.2 In accordance with the California Consumer Privacy Act (CCPA), we affirm that we do not and will not sell your personal information to any third party. We only share your information as explicitly described in our Privacy Policy, which is designed to provide our services or to comply with legal obligations.

Article 14 Changes to this privacy policy

14.1 We reserve the right to make changes to this Privacy and Cookie Policy from time to time, and we may send you a notice via your contact information. We strongly recommend checking this webpage regularly, referring to the date of the last modification listed at the top of this page.

14.2. In case the amendments of the Policy affect processing activities performed based on User's consent, we shall obtain permission again from the Users for the processing of Personal Data.

Article 15 Cookies

15.1. As is common practice with almost all professional websites, this site uses cookies, which are tiny files that are downloaded to your computer to improve your experience. This section describes what information they gather, how we use it and why we sometimes need to save these cookies. We will also share how you can prevent them from being stored however, this may downgrade or certain elements of our website's functionality.

Article 16 How we use cookies

16.1. We use cookies for different reasons as detailed below. There are no standard options for disabling cookies without completely disabling the functionality and features they add to this site. It is recommended that you leave on all cookies if you are not sure whether you need them, in case they are used to provide the service that you use.

Article 17 Disabling cookies

17.1. You can prevent the placing of cookies by adjusting the settings on your browser (check your browser Help). Be aware that disabling cookies will affect the functionality of this and many other websites that you visit, and results in disabling certain functionality and features of this site. It is recommended that you do not disable cookies.

Article 18 Account related cookies

18.1. If you create an account with us, we will use cookies for the management of the signup process. These cookies will usually be deleted when you log out. In some cases, however, they may remain afterwards.

Article 19 Analytics

19.1. This site employs analytics services to help us understand how users engage with the website and to enhance user experience. These services collect data such as the duration of your visit to the site, the pages you view, and the paths you take through the site. The data collected is essential for us to identify user behaviour and preferences, optimize our content, and improve overall functionality and user satisfaction. We ensure that the analytics used are configured to respect privacy by default, and any data collected is processed in a manner that maintains the confidentiality and integrity of personal data according to applicable data protection laws.

Article 20 More information

20.1. On our policy page we have tried to anticipate any question you may have. However, if you find that you still need more information, you can contact us using our email address for privacy-related questions is privacy@geolitix.com.