This Privacy Policy explains how ARPAI GEO, operated by Dmitry Volchenko, Individual Entrepreneur ("we", "us", "our"), collects, uses, stores, and protects personal data when you use our platform at https://arpai-geo.com (the "Service").
The Service is provided on a business-to-business basis. We are committed to processing data lawfully and in line with the principles of the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the UK GDPR / Data Protection Act 2018, and other applicable data-protection laws. We follow the principle of data minimisation and collect only what is necessary to provide the Service.
The controller responsible for your personal data is:
The operator is established in the Russian Federation. Please see Section 7 (International Data Transfers) for information on where data is hosted and how it is accessed.
| Category | Examples | Purpose |
|---|---|---|
| Account data | Email address, name, password (stored hashed) | Account creation and authentication |
| Service data | Company name, website URL, locations, product names you choose to monitor | Providing monitoring and analytics |
| Communications | Messages via in-app chat or email to support | Customer support |
Limited technical data necessary to operate and secure the Service, such as IP address, browser/user-agent, and session identifiers.
To deliver its analytics, the Service processes information from publicly available sources (public websites and AI-engine responses). This is business information about brands and companies. It is not intended to contain personal data; where company information from public sources happens to include an individual's name, we minimise and protect it accordingly.
We do not knowingly collect special categories of personal data (such as health, biometric, or political data), and the Service is not directed to children.
| Processing activity | Legal basis (GDPR Art. 6) |
|---|---|
| Account creation and provision of the Service | Performance of a contract — Art. 6(1)(b) |
| Payment processing and invoicing | Performance of a contract — Art. 6(1)(b) |
| Security and fraud prevention | Legitimate interests — Art. 6(1)(f) |
| Service improvement and analytics | Legitimate interests — Art. 6(1)(f) |
| Legal and accounting obligations | Legal obligation — Art. 6(1)(c) |
| Marketing communications (if you opt in) | Consent — Art. 6(1)(a) |
We use personal data to create and secure your account, provide and improve the Service, process payments, communicate about the Service and respond to support requests, and comply with legal obligations. We do not use your account data or inputs to train AI models, and we do not sell personal data.
We share data only with the service providers needed to operate the Service, under appropriate confidentiality and data-protection terms:
| Provider | Purpose | Data involved |
|---|---|---|
| Payment processor (licensed third party) | Payment processing | Payment-card data handled directly by the processor; not stored by us |
| OpenAI, Google, Perplexity (AI providers) | AI query processing | Queries containing publicly available business information (brand names, websites, locations); not account data |
| DigitalOcean (hosting) | Infrastructure | Service data, encrypted at rest, hosted in the EU (Netherlands) |
We may also disclose data where required by law or to protect our legal rights. We do not sell your personal data to third parties.
| Data | Retention |
|---|---|
| Account data | Until you delete your account |
| Consent records | Up to 3 years after withdrawal (to evidence consent) |
| Authentication logs | Up to 3 years |
| Financial/transaction records | As required by applicable accounting/tax law |
| Support communications | Until you delete your account |
| Monitoring results | Until you delete the project or account |
When retention periods end, data is deleted or anonymised.
The Service's data is hosted on servers located in the European Union (Netherlands).
Because the operator is established in the Russian Federation, personal data may be accessed from there for the purpose of operating, maintaining, and supporting the Service. The Russian Federation is not covered by an EU adequacy decision. Where personal data is accessed from or transferred to a country outside the EEA, we rely on appropriate safeguards, which may include Standard Contractual Clauses, encryption, strict access controls, and data minimisation, and we limit such access to what is necessary to provide the Service.
If you would like more information about the safeguards applied, please contact us using the details below.
Subject to applicable law, you have the right to: access your personal data; request correction or deletion; restrict or object to processing; data portability; and withdraw consent at any time (without affecting prior lawful processing). You may also lodge a complaint with a competent data-protection authority.
To exercise your rights, contact us at welcome@arpai-geo.com. We will respond within the time limits required by applicable law (generally within one month).
We apply technical and organisational measures appropriate to the risk, including encryption in transit (HTTPS/TLS) and at rest, hashed password storage, access minimisation, rate-limiting and anomaly monitoring, and encrypted backups. No method of transmission or storage is completely secure, but we work to protect your data and to address any incident appropriately.
If you install the optional ARPAI GEO AI Pixel on your own website:
_arpai_vid (a visitor identifier, 12-month expiry) and _arpai_src (source attribution, 30-day expiry), used solely to distinguish returning visitors and to attribute traffic to the AI engine that referred them;As the website operator deploying the pixel, you are the controller for your visitors' data and are responsible for your own privacy notices and any cookie consent that may be required in your jurisdiction (including under GDPR, the ePrivacy Directive, or equivalent local law).
We use strictly necessary cookies to keep you logged in and to operate the Service securely. These cookies do not require your consent.
With your consent, we also use analytics cookies — our AI Traffic Pixel (_arpai_vid, _arpai_src) and Google Analytics 4 (_ga, _ga_<ID>) — to understand traffic patterns and improve the Service. Analytics cookies are not set until you give consent via the cookie banner shown on your first visit. You can change your choice at any time through the "Cookie settings" link in the footer.
We do not use advertising or cross-site tracking cookies. For full details on each cookie, its purpose, and duration, please see our Cookie Policy.
The Service is intended for businesses and is not directed to individuals under 18. We do not knowingly collect data from children.
We may update this Policy from time to time. The current version, with its effective date, is published on the website. Material changes will be communicated by reasonable means.
| Detail | Value |
|---|---|
| Data Controller | Dmitry Volchenko, Individual Entrepreneur |
| TIN (INN) | 343571017093 |
| PSRN (OGRNIP) | 325344300121070 |
| Registered address | 48 Olomoutskaya St., apt. 17, Volzhsky, Volgograd Region, 404109, Russia |
| Phone | +7 (927) 500-03-96 |
| welcome@arpai-geo.com | |
| Website | https://arpai-geo.com |
Effective Date: 9 July 2026