Privacy Policy

Last updated: October 10, 2026

1. Controller

The data controller is GEVOAD HCC S.R.L., tax ID 36719563 (VAT RO36719563), Trade Register no. J12/2980/2018, registered office Str. Viitorului nr. 2, camera 1, sat Apahida, com. Apahida, jud. Cluj, 407035, România, e-mail office [at] geobrainai.com, operating the GeoBrain AI brand (“GeoBrain AI”, “we”). For any question about your data: office [at] geobrainai.com.

2. Data we collect

• Full name, e-mail, phone (required to enroll);
• Company, VAT/tax ID, billing address, participant names (for invoicing and access);
• Payment data from Stripe (amount, status, last 4 digits). We never receive or store full card numbers;
• Minimal technical data (IP, browser) in server logs.

3. Purposes and legal bases (Art. 6 GDPR)

• Enrollment, course access, logistics (Zoom link, materials, course notices): performance of the contract (Art. 6(1)(b));
• Invoicing and accounting: legal obligation (c);
• Updates about our courses and events: your consent (a) if you ticked the box. For existing clients, we may send updates about similar services based on legitimate interest (f). You can unsubscribe at any time;
• Security and legal claims: legitimate interest (f).

4. We never sell your data

We do not sell, rent or share your data for others’ marketing. We use it only for enrollment, the course, invoicing and updates about our own courses.

5. Processors

Stripe (payments), HubSpot (workshop registrations), Brevo – Sendinblue SAS, France, EU (website forms, confirmation e-mails and newsletter), Google Workspace (e-mail and documents), Vercel (website hosting), Zoom (live sessions), Oblio and our accountant (invoicing and accounting). They process data only on our instructions. Some providers are in the US. Transfers rely on the EU–US Data Privacy Framework or Standard Contractual Clauses.

6. Retention

Course data is kept for 3 years after your last course, then deleted. Accounting records are kept for 10 years, as required by law. Marketing data is kept until you unsubscribe.

7. Your rights

You have the right to access, rectification, erasure, restriction, portability and objection, and you can withdraw consent at any time. Write to office [at] geobrainai.com. We reply within 30 days. You may also complain to the Romanian authority ANSPDCP (dataprotection.ro) or your local authority.

8. Cookies

The site uses only cookies that are strictly necessary for it to work and for payment (Stripe). We use no advertising cookies.

Visit statistics. To understand which pages help people and where visitors come from, we count visits anonymously, with no cookies and nothing stored in your browser. We record only the page, the country, the source (the referring site or the UTM tag in the link) and the device type (mobile or desktop). We never store your IP address or any identifier, so this data cannot be traced back to you. If your browser sends a “Do Not Track” signal, your visit is not counted.

9. Security

The site uses HTTPS. Access to data is limited to the people who need it.

10. Geo Executive Coach (AI)

Geo Executive Coach is a 100% AI virtual coach. The following rules also apply to it.

• Conversations are encrypted with a key unique to each account and stored only in the European Union (Frankfurt). No one on our team reads them and they are not used to train AI models. Our emails never contain anything from your conversations.
• Working profile: to tailor its guidance, the coach keeps encrypted notes about your goals, context and working style (for example how you decide or what motivates you), inferred from your conversations. These are not medical or psychological assessments, contain no clinical labels and are not used for automated decisions with legal effect on you.
• CVs and job searches: an uploaded CV is stored encrypted and you can delete it at any time in the app. For job searches we send job sites and listing services only the search criteria (role, city, country, level), never your name or contact details.
• 👍/👎 ratings: your votes help us see which replies are useful. They reach our statistics only as aggregated counts, not linked to your identity.
• “Help improve the coach” (optional): only if you tick this option in your account do we also use generic labels of topics the coach did not handle well (1–3 words, no names or details) and feedback you choose to write, in aggregated and anonymous form, to improve the service. You can withdraw at any time in your account.
• AI providers: replies are generated through Vercel AI Gateway (Vercel Inc.), which sends the request to the model provider (Anthropic, via Anthropic, Amazon Bedrock or Google Vertex AI; OpenAI for some auxiliary functions; xAI for voice mode, i.e. speech-to-text and read-aloud), always with zero data retention: the provider does not store the data after generating the reply and does not use it for training. Written conversations are processed in EU data centres. Voice mode may be processed outside the EU (xAI has no EU servers yet); voice is converted to text and not recorded. If you want everything strictly in the EU, use the coach in writing. The rating you give a session (1–5) and the optional comment in the rating box reach Geo without your name, email or conversation. For job searches and the salary guide we also use Perplexity, which receives only the role, level and city. Emails (sign-in code, neutral recaps, job alerts with your tailored CV attached) are sent through Brevo (France, EU). Some of these providers are in the USA; transfers rely on the EU–US Data Privacy Framework or standard contractual clauses.
• How long: account data is kept while you use the service. An account inactive for 12 months is deleted automatically. Aggregated, anonymous statistics may be kept indefinitely, as they no longer identify you.
• Export and deletion: in your account you can download all your data at any time or permanently delete your account, profile, goals and history.