PRIVACY POLICY OF THE ONGEO PLATFORM
Effective Date: July 24, 2026
1. Introduction
At OnGeo, we believe that user trust is built first and foremost through transparency.
When you use our Platform, you entrust us with certain information about yourself. We want you to understand what information we collect, why we process it, with whom we may share it, and what rights you have in connection with your use of our Services.
This Privacy Policy describes the principles governing the processing of personal data by OnGeo LLC, a company organized under the laws of the State of Delaware, with its registered office at 8 The Green, Suite E, Dover, Delaware 19901, United States (hereinafter referred to as "OnGeo," the "Company," "we," "us," or "our"), which owns and operates the online platform available at https://ongeo.us (the "Platform").
The Platform is available to users located in multiple jurisdictions worldwide. Accordingly, the processing of personal data may be subject to different legal requirements depending on a user's place of residence, the location where the Services are provided, or other circumstances specified under applicable law.
This Privacy Policy has been prepared with consideration of the laws of the United States, including, in particular, the laws of the State of Delaware and applicable federal laws, as well as the requirements arising under Regulation (EU) 2016/679 (the "GDPR"), the UK GDPR, and other applicable data protection laws, where such laws apply to our activities.
Our objective is to process only the personal data that is necessary to provide the Services, maintain the security of the Platform, comply with our legal obligations, and further develop the solutions we offer.
By accessing or using the Platform, creating an Account, or using our Services, you acknowledge that you have read this Privacy Policy.
2. Who Is Responsible for Your Personal Data?
The controller of the personal data described in this Privacy Policy is:
OnGeo LLC
8 The Green, Suite E
Dover, Delaware 19901
United States of America
EIN: 32-0757417
File Number (FN): 2652875
If you have any questions regarding the processing of your personal data, you may contact us at:
Email: CONTACT@ONGEO.COM
If your inquiry concerns your use of the Platform, your Subscription, or your Account, you may also use the contact information provided in the Platform Terms of Service.
3. Who Does This Privacy Policy Apply To?
This Privacy Policy applies to all individuals who use the Platform, regardless of whether they are using a free trial, maintain an active Subscription, purchase individual Reports, contact us via email, or simply visit our website.
Certain rights and obligations described in this Privacy Policy may vary depending on your place of residence or the laws applicable to your particular circumstances.
If you are a resident of the European Economic Area, the United Kingdom, or California, additional information regarding the processing of your personal data is provided in the applicable sections of this Privacy Policy.
4. What Information Do We Collect?
The scope of the personal data we process depends on how you use the Platform. We strive to limit the information we collect to what is genuinely necessary to provide the Services, maintain the security of the Platform, and comply with our legal obligations.
4.1. Information You Provide to Us
When you create an Account, we ask you to provide basic identifying information, such as your first name, last name, and email address. This information is necessary to create your Account, enable authentication, and facilitate communications relating to your use of the Platform.
If you choose to purchase a Subscription or an individual Report, we will also process information relating to your selected Subscription plan, order history, payment status, and other information necessary to perform the agreement entered into with you.
If you contact us by email or through our contact forms, we also process the information contained in our correspondence, as well as any information necessary to respond to your inquiry.
4.2. Payment Information
Payments for the Services are processed by the independent payment service provider Stripe.
OnGeo does not store complete payment card numbers or other sensitive payment instrument information. We receive only the information necessary to confirm that a payment has been completed, identify the relevant transaction, administer your Subscription, and maintain our billing and accounting records.
The scope of personal data processed by Stripe is governed by Stripe's own terms of service and privacy policy.
4.3. Technical Information
Your use of the Platform results in the automatic collection of certain technical information.
Such information may include, among other things, your IP address, browser type and version, operating system, language preferences, time zone, device identifiers, the date and time of your use of the Platform, system error information, and data relating to the performance and security of the Services.
We use this information primarily to maintain the security of the Platform, diagnose technical issues, detect misuse, and improve the quality of the Services we provide.
4.4. Information About Your Use of the Platform
We may also collect information regarding how you use the Platform. This may include, among other things, your login history, your use of specific Platform features, the number of Reports generated, your utilization of the limits associated with your Subscription plan, and other information regarding your use of our Services.
This information helps us further develop the Platform, improve its functionality, identify errors, and maintain an appropriate level of security.
5. Information We Do Not Intentionally Collect
We respect our users' privacy and adhere to the principle of data minimization. Accordingly, we do not collect information that is not necessary to provide our Services.
In particular, we do not store complete payment card information, bank account numbers, or authentication credentials used by payment service providers. Such information is processed directly by Stripe in accordance with applicable security standards and its own legal documentation.
We also do not intentionally collect special categories of personal data (commonly referred to as "sensitive personal data"), such as information concerning health, racial or ethnic origin, religious beliefs, political opinions, sexual orientation, or trade union membership, unless you voluntarily provide such information in communications addressed to us.
In such cases, we process such information solely to the extent necessary to respond to your inquiry or to comply with applicable legal obligations.
6. How We Use Your Personal Data
You entrust us with your personal data primarily so that we can provide our Services to you. We do not use personal data for purposes that are inconsistent with this Privacy Policy, nor do we process personal data beyond the scope justified by the nature of the Services we provide.
The manner in which we use personal data depends on the Platform features you use and the information you voluntarily provide to us.
6.1. Providing the Services
The primary purpose of processing personal data is to enable you to use the Platform in accordance with your selected Subscription plan or the Services you have purchased.
For this purpose, we use personal data to:
a. create and maintain your Account;
b. authenticate your identity when you sign in;
c. provide access to purchased Reports and Platform features;
d. process payments and maintain billing records;
e. fulfill your orders; and
f. administer your Subscription, including automatic renewals, plan changes, and cancellations.
Without processing this information, we would be unable to provide the Services.
6.2. Communicating with Users
We also process contact information in order to communicate with users regarding their use of the Platform.
We may contact you in order to:
a. confirm the creation of your Account;
b. confirm a purchase;
c. provide payment-related notifications;
d. remind you of an upcoming automatic Subscription renewal where required by applicable law;
e. notify you of changes to the Platform, the Terms of Service, or this Privacy Policy; and
f. respond to inquiries submitted to our support team.
We do not use Account-related communications for marketing purposes unless you have provided separate consent or applicable law otherwise permits such communications.
6.3. Platform Security
Protecting users' personal data and maintaining the security of the Platform are among our fundamental responsibilities.
For these purposes, we use technical information and information regarding your use of the Platform to:
a. detect attempts to gain unauthorized access;
b. identify misuse;
c. prevent fraud;
d. protect against automated attacks;
e. detect malicious software;
f. monitor the stability of the Platform; and
g. respond to security incidents.
We may also analyze system logs in order to determine the causes of system failures, errors, or other technical issues.
6.4. Improving the Platform
We continuously develop the Platform and introduce new features and functionality.
To achieve this, we analyze how our Services are used in order to better understand which features are most valuable to users, which areas require improvement, and which solutions should be further developed.
These analyses are conducted primarily using statistical and technical information. Whenever feasible, we use aggregated or anonymized data.
6.5. Quality Assurance and Customer Support
Personal data may also be processed for the purpose of maintaining the quality of the Services we provide.
This includes, among other things:
a. handling requests submitted to our support team;
b. diagnosing technical issues;
c. maintaining the history of support requests;
d. analyzing the causes of errors; and
e. improving the quality of customer support.
If you contact us, we may retain the history of our correspondence for the period necessary to resolve your request and to establish, exercise, or defend legal claims.
6.6. Compliance with Legal Obligations
In certain circumstances, we are required to process personal data in order to comply with applicable legal obligations.
This may include, among other things:
a. maintaining accounting records;
b. complying with tax obligations;
c. handling requests relating to personal data protection;
d. complying with legal obligations relating to the prevention of fraud or other unlawful activities; and
e. cooperating with competent public authorities where we are legally required to do so.
6.7. Establishment, Exercise, and Defense of Legal Claims
Where appropriate, we may also process personal data for the purpose of:
a. establishing and exercising our legal rights;
b. defending against legal claims;
c. conducting internal investigations;
d. preventing violations of the Terms of Service; and
e. protecting the rights of our users and OnGeo.
7. What Is the Legal Basis for Processing Your Personal Data?
The legal basis for processing personal data may vary depending on your place of residence and the laws applicable to your particular circumstances.
In most cases, we process personal data because such processing is necessary to provide the Services, perform the agreement entered into with you, or take steps at your request prior to entering into such an agreement.
In certain circumstances, the processing of personal data is necessary to comply with applicable legal obligations, maintain the security of the Platform, protect our legitimate interests, or achieve other purposes permitted under applicable law.
Where applicable law requires your consent, we will process your personal data only after obtaining such consent. You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before such consent was withdrawn.
If you are located in the European Economic Area or the United Kingdom, detailed information regarding the legal bases for processing your personal data is provided in Appendix D – EU & UK Privacy Notice.
8. When May We Disclose Your Personal Data?
We respect the privacy of our users. We do not sell personal data, nor do we disclose personal data to third parties for their own marketing purposes.
We may, however, disclose personal data to third parties that assist us in providing the Services or are otherwise necessary for the proper operation of the Platform.
Such third parties may include, in particular:
a. payment service providers;
b. cloud infrastructure providers;
c. hosting service providers;
d. email service providers;
e. analytics service providers;
f. security service providers;
g. law firms;
h. auditors;
i. tax advisors; and
j. technical support service providers.
Each such recipient receives only the information necessary to perform the services entrusted to it.
We may also disclose personal data where required by applicable law, a final and binding court judgment, a decision of a competent governmental authority, or any other legally binding order issued in accordance with applicable law.
If OnGeo is involved in a merger, sale of the business, corporate reorganization, or any other transaction involving all or part of its business operations, personal data may be transferred to the legal successor or acquiring entity to the extent necessary to ensure the continued provision of the Services.
In such circumstances, appropriate safeguards for the protection of personal data will be maintained, and users will be notified of the change where required by applicable law.
Appendix A
Data Retention Periods
OnGeo retains personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy or for the period required by applicable law. Upon expiration of the applicable retention period, personal data is deleted, anonymized, or permanently de-identified, unless further retention is required by law or is necessary for the establishment, exercise, or defense of legal claims.
Category of Personal Data
Purpose of Processing
Retention Period
Account data (first name, last name, email address)
Creation and maintenance of an Account
For the duration of the Account and for up to 30 days following its deletion, unless a longer retention period is required by law or is necessary for the establishment, exercise, or defense of legal claims.
Subscription data
Performance of the agreement and billing
For the duration of the Subscription and thereafter for the period required under applicable tax and accounting laws.
Purchase history
Billing, customer support, and legal compliance
For the period required under the tax and accounting laws applicable to OnGeo.
Payment information received from Stripe
Payment confirmation and billing
For the period necessary to perform the agreement and comply with applicable legal obligations. OnGeo does not store complete payment card information.
User correspondence
Handling inquiries and the establishment, exercise, or defense of legal claims
Until the relevant matter has been resolved and thereafter for the period necessary to protect OnGeo's legal rights.
System logs
Platform security
Generally for up to 12 months, unless earlier deletion is possible or a longer retention period is justified for security purposes.
Analytics data
Platform development
Until such data is anonymized or deleted in accordance with the applicable data retention policies.
Complaint-related data
Handling complaints and defending against legal claims
For the period necessary to complete the relevant proceedings and throughout the applicable limitation period for potential legal claims.
Note: In the event of judicial, administrative, or other legal proceedings, the applicable retention periods may be extended until such proceedings have been finally concluded.
Appendix B
Categories of Personal Data Recipients
We do not sell users' personal data or disclose it to third parties for their own marketing purposes.
Depending on the nature of the Services provided, personal data may be disclosed to the following categories of recipients:
Category of Recipient
Purpose of Disclosure
Payment service provider (Stripe)
Payment processing, Subscription renewals, and billing.
Hosting and cloud infrastructure providers
Hosting, maintenance, and operation of the Platform.
Email service providers
Delivery of system messages and user communications.
Analytics service providers
Analysis of Platform usage and development of the Services.
Security service providers
Security monitoring, fraud detection, and protection of the Platform.
Legal counsel, tax advisors, and auditors
Compliance with legal obligations and protection of OnGeo's legal rights.
Government authorities and courts
Only where disclosure is required by applicable law or pursuant to a final and binding legal order.
Legal successors or business acquirers
Only in connection with a merger, corporate reorganization, sale of the business, or a similar transaction, subject to appropriate safeguards.
Appendix C
California Privacy Notice
This section of the Privacy Policy applies exclusively to individuals who are residents of the State of California and has been prepared in accordance with the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).
What Information Do We Collect?
During the preceding twelve (12) months, we may have collected the following categories of personal information:
a. identifiers (including first name, last name, and email address);
b. Account information;
c. commercial information (including purchase history and Subscription information);
d. Internet or other electronic network activity information; and
e. technical information relating to your device and browser.
Purposes of Processing
We use personal information solely for the purposes described in this Privacy Policy, including providing the Services, maintaining the security of the Platform, processing payments, supporting users, and complying with applicable legal obligations.
Sale and Sharing of Personal Information
OnGeo does not sell personal information as the term "sell" is defined under the CCPA/CPRA.
OnGeo does not share personal information for purposes of cross-context behavioral advertising unless such practices are expressly described in a future version of this Privacy Policy and users are provided with any choice mechanisms required by applicable law.
Rights of California Residents
If you are a California resident, you may, to the extent provided under the CCPA/CPRA, exercise the right to:
a. obtain information regarding the personal information we process;
b. access your personal information;
c. request deletion of your personal information;
d. request correction of your personal information;
e. request limitation of the use of sensitive personal information (if such information is processed); and
f. not be discriminated against for exercising your rights under the CCPA/CPRA.
Requests may be submitted using the contact information provided in the Contact section of this Privacy Policy.
Appendix D
EU & UK Privacy Notice
This section of the Privacy Policy applies exclusively to individuals located in the European Economic Area and the United Kingdom, where the processing of their personal data is subject to the GDPR or the UK GDPR, respectively.
Legal Bases for Processing
Where the GDPR or the UK GDPR applies, OnGeo processes personal data only on one or more of the legal bases provided by applicable law, including where:
a. processing is necessary for the performance of a contract or to take steps at the request of the data subject prior to entering into a contract;
b. processing is necessary to comply with a legal obligation;
c. processing is necessary for the purposes of the legitimate interests pursued by OnGeo or a third party, except where such interests are overridden by the interests, fundamental rights, or freedoms of the data subject; or
d. the data subject has given consent to the processing of personal data.
International Transfers of Personal Data
OnGeo is established in the United States. Accordingly, users' personal data may be transferred outside the European Economic Area or the United Kingdom.
Where required by applicable law, OnGeo will implement appropriate safeguards for such transfers, including the transfer mechanisms recognized under the GDPR or the UK GDPR.
Transfers of personal data to third countries are carried out using the safeguards required under applicable law, including, where applicable, an adequacy decision adopted by the European Commission or the Standard Contractual Clauses approved by the European Commission.
Rights of Individuals Located in the EEA and the United Kingdom
Where the GDPR or the UK GDPR applies to you, you may exercise the rights granted under those laws, including the right to:
a. access your personal data;
b. rectify inaccurate personal data;
c. request the erasure of your personal data ("right to be forgotten");
d. request restriction of processing;
e. data portability;
f. object to the processing of personal data;
g. withdraw your consent where processing is based on consent; and
h. lodge a complaint with the competent supervisory authority.
The exercise of these rights may be subject to limitations under applicable law.