Legal
Privacy Policy
Last updated August 29, 2026
Our Commitment
At georacle.ai, we believe privacy is a fundamental right. We collect only what's necessary to provide our services, and we give you full control over your data. This policy explains our practices in plain language.
What We Collect
Account Information
Email address, name, and authentication data when you create an account or sign in with Google.
Content You Create
Website URLs you analyze, AI-generated content, and team configurations. API keys are stored as secure hashes only.
Usage Analytics
Page views and navigation patterns through Google Analytics. IP addresses are automatically anonymized.
Booking Details
Name, email, and meeting notes when you schedule a consultation through Cal.com.
Your Store's Customer Data
When you connect a Shopify store, we can read order records through Shopify's API. This section describes exactly what we touch, why, and for how long. It applies to the people who shop with you, not to your own account.
What We Access
From each order: the source and referring URL of the visit that led to it, the order total, and the order date. We do not request customer names, email addresses, phone numbers, or shipping addresses.
Why
One purpose: showing you which AI assistants send visitors who actually buy, as order counts and revenue totals in your dashboard and monthly report. We use it for nothing else.
How Long
Order records are processed in memory to produce those totals and are never stored. We keep only monthly aggregates for your store, which cannot identify any individual customer.
We never sell or share this data, never use it for advertising or profiling, and never send customer-level data to AI model providers. Shopify's customer redaction and shop redaction requests are honored automatically.
How We Use Your Information
Service Delivery
Provide our platform features, process your requests, and enable team collaboration.
Improvements
Understand usage patterns, fix bugs, and develop new features (with consent where required).
Communications
Send service notifications, respond to inquiries, and share important updates.
Your Data, Your Choice
Unlike most services, we believe in privacy by default. We process your content with AI training disabled, and we ask for your explicit consent before using your data for other purposes.
Note: All AI services (OpenAI, Anthropic) are configured to disable training on your data. The consent options below are for our own use of insights.
Internal Improvements
We may use anonymized insights from your analysis to improve our platform internally.
Case Studies
We only feature anonymized insights in marketing with your permission.
Who We Work With
We partner with trusted providers to deliver our services. We do not sell your data. All AI processing is done with training disabled - your content is never used to train AI models.
Security
Encryption
All data is encrypted in transit (TLS) and at rest. Your Shopify access token is encrypted a second time at the application layer before we store it, so a copy of the database on its own cannot be used against your store. API keys are stored as secure hashes.
Access Control
Row-level database security, team-based permissions, and rate limiting. Access to production data is limited to what operating the Service requires.
Sub-processors
We run on Vercel (application hosting) and Supabase (database and authentication), each bound by data protection obligations, with automated backups and DDoS protection. Those providers hold their own security certifications; geOracle does not claim one of its own.
Your customers stay yours
We never see your customers' names or emails. The only order data we process is the converting visit's source and referring URL, the order total, and the order date, and we keep only monthly aggregates.
Your Rights
Canada (PIPEDA)
- Access your personal information
- Request correction of inaccurate data
- Withdraw consent at any time
- File complaints with the Privacy Commissioner
Quebec (Law 25)
- Access the personal information we hold about you
- Have inaccurate or incomplete information corrected
- Withdraw your consent at any time
- Receive your data in a structured, commonly used format
- Be told when a decision about you is made by automated means, and ask for it to be reviewed by a person
- Complain to the Commission d'acces a l'information du Quebec
United States
- Know what data we collect (CCPA)
- Request deletion of your data
- Opt out of data sales (we don't sell)
- Equal service regardless of choices
European Union and United Kingdom (GDPR)
- Access, correct, or erase your personal data
- Restrict or object to how we process it
- Receive your data in a portable format
- Withdraw consent at any time, without affecting processing already carried out
- Complain to your national supervisory authority
We process your data on three bases: to perform our contract with you (running the Service and billing it), your consent (analytics, session recording, and the optional uses you choose), and our legitimate interest in keeping the Service secure and working.
How to Exercise Your Rights
To request access, correction, or deletion of your data:
- Write to privacy@georacle.ai, or use our contact page
- Include "Privacy Request" in your message
- Specify which right you wish to exercise
- We will respond within 30 days
Cookies & Storage
We use essential cookies for authentication and optional analytics cookies (Google Analytics). Your preferences, theme settings, and draft content are stored locally in your browser.
You can disable analytics via browser settings, Do Not Track, or ad blockers.
Data Retention
Account data kept while active. Deleted within 30 days upon request. Some data retained longer for legal compliance.
International Transfers
We are based in Quebec, Canada, and our providers process data in Canada, the United States, and the European Union. Transfers out of the European Economic Area and the United Kingdom rely on the European Commission's Standard Contractual Clauses, which each provider is bound by. Every provider we use is named in the section above.
Children's Privacy
This is a service for businesses. You must be of the age of majority where you live to hold an account, and the Service is not directed at children. Write to privacy@georacle.ai if you believe a child has given us personal information and we will delete it.
Questions?
For privacy inquiries or data requests, please reach out to us.
Privacy Officer
InceptionAi, which operates this service from Quebec, Canada, has designated a Privacy Officer responsible for protecting personal information. Write to privacy@georacle.ai to exercise any right on this page, ask how your data is handled, or raise a concern. We respond within 30 days.