Geospatial Analytics, Inc. Privacy Policy

Effective Date: August 24, 2020

Last Updated: December 17th, 2024

1. Introduction

Welcome to Geospatial Analytics, Inc. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you use our Software as a Service (SaaS) platform and related services (collectively, the“Services”). Please read this policy carefully to understand our views and practices regarding your personal data.

By accessing or using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Definitions

Personal Data: Any information relating to an identified or identifiable natural person (“Data Subject”). Examples include name, email address, phone number, and IP address.
Processing: Any operation or set of operations performed on personal data, whether or not by automated means, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, erasure, or destruction.
Controller: The entity that determines the purposes and means of the processing of personal data.
Processor: The entity that processes personal data on behalf of the Controller.
Data Breach: A security incident that leads to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data.

3. Information We Collect

3.1. Personal Information

We may collect the following types of personal information when you interact with our Services:

Contact Information: Name, email address, postal address, phone number.
Account Information: Username, password, billing information.
Usage Information: Details of how you use our Services, including access times, browser types, and device information.
Payment Information: Credit card details, billing address (processed securely by our payment partners).
Company Information: Company name, address, industry, number of employees.
Support Information: Communications with our support team, feedback, and inquiries.

3.2. Automatically Collected Information

We collect certain information automatically when you access or use our Services:

Device Information: IP address, device type, operating system, browser type.
Log Data: Server logs, error logs, and other diagnostic data.
Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to collect information about your interactions with our Services.

3.3. Information from Third Parties

We may receive personal information about you from third-party sources, such as:

Integration Partners: Information from integrated third-party services you use with our platform.
Analytics Providers: Data collected by third-party analytics services.
Public Sources: Information available publicly, such as business directories.

4. How We Use Your Information

We use the collected information for various purposes, including:

4.1. To Provide and Improve Our Services

We may collect the following types of personal information when you interact with our Services:

Service Delivery: To operate, maintain, and provide the features of our Services.
Customization: To personalize your experience and tailor our Services to your needs.
Development: To develop new features, functionalities, and services.

4.2. Communication

Customer Support: To respond to your inquiries, support requests, and provide assistance.
Notifications: To send you updates, security alerts, and administrative messages.
Marketing: With your consent, to send promotional materials and information about our Services and offerings. You can opt-out at any time.

4.3. Transaction Processing

Billing and Payments: To process transactions, manage billing, and handle financial records.
Fraud Prevention: To detect and prevent fraudulent activities and unauthorized access.

4.4. Legal and Compliance

Regulatory Compliance: To comply with applicable laws, regulations, and legal processes.
Enforcement: To enforce our Terms of Service and other agreements.

4.5. Data Analysis and Research

Analytics: To analyze usage patterns, measure performance, and conduct research to improve our Services.
Business Insights: To gain insights into customer behavior and preferences.

5. Legal Basis for Processing

Our legal basis for collecting and using your personal data depends on the context:

Consent: When you have given clear consent for us to process your personal data for a specific purpose.
Contractual Necessity: To fulfill our contractual obligations to you.
Legal Obligation: To comply with laws, regulations, or legal processes.
Legitimate Interests: For our legitimate business interests, provided these are not overridden by your rights and interests.

6. Sharing Your Information

We may share your personal information with third parties under the following circumstances:

6.1. Service Providers

We engage trusted third-party service providers to perform functions and provide services to us, such as:

Payment Processing: Third-party payment gateways.
Hosting Services: Cloud service providers.
Email and Communication: Email service providers.
Analytics and Marketing: Analytics and marketing partners.

6.2. Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.

6.3. Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests, such as court orders or subpoenas.

6.4. Protection of Rights

To protect our rights, property, or safety, or that of our users or others, we may share your information as necessary.

6.5. Aggregated and Anonymized Data

We may share aggregated or anonymized data that does not directly identify you for various purposes, including research and analysis.

7. Data Security

We implement a variety of security measures to maintain the safety of your personal information, including:

Encryption: Use of SSL/TLS encryption for data transmission.
Access Controls: Restricting access to personal data to authorized personnel only.
Regular Audits: Conducting regular security assessments and audits.
Data Minimization: Collecting only the data necessary for the specified purposes.
Incident Response: Procedures to respond promptly to data breaches or security incidents.

Despite these measures, no method of transmission or storage is entirely secure. We cannot guarantee absolute security of your data.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law. Criteria used to determine retention periods include:

Legal Obligations: Compliance with legal, regulatory, or contractual requirements.
Business Needs: Maintenance of records to support business operations and protect our rights.
User Requests: Retention based on your requests or interactions with our Services.

9. Your Data Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

9.1. Right to Access

You have the right to request access to the personal data we hold about you.

9.2. Right to Rectification

You can request correction of inaccurate or incomplete personal data.

9.3. Right to Erasure (Right to be Forgotten)

Under certain conditions, you can request deletion of your personal data.

9.4. Right to Restrict Processing

You can request the restriction of processing your personal data under specific circumstances.

9.5. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

9.6. Right to Object

You can object to the processing of your personal data based on legitimate interests or for direct marketing purposes.

9.7. Rights Related to Automated Decision-Making and Profiling

You have the right not to be subject to decisions based solely on automated processing, including profiling, which significantly affect you.

9.8. Exercising Your Rights

To exercise any of these rights, please contact us using the contact details provided in Section 16. Contact Us. We will respond to your request within the timeframe required by applicable law.

10. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently received personal data from a child without parental consent, we will delete such information promptly.

11. International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your jurisdiction. When transferring data internationally, we ensure appropriate safeguards are in place, such as:

Standard Contractual Clauses: Binding agreements approved by relevant authorities.
Privacy Shield Framework: Where applicable and recognized.
Consent: Where required by law.

By using our Services, you consent to the transfer of your information to countries outside your country of residence.

12. Cookies and Tracking Technologies

12.1. What Are Cookies?

Cookies are small data files stored on your device that help us recognize you and understand how you use our Services.

12.2. How We Use Cookies

We use cookies for various purposes, including:

Essential Cookies: Necessary for the operation of our Services.
Performance Cookies: To analyze how our Services are used and improve functionality.
Functional Cookies: To remember your preferences and settings.
Advertising Cookies: To deliver relevant advertisements and measure their effectiveness.

12.3. Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our Services.

13. Third-Party Links and Services

Our Services may contain links to third-party websites, services, or resources. We are not responsible for the privacy practices or the content of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make changes:

We will update the "Last Updated" date at the top of this policy.
Where appropriate, we will notify you via email or through our Services.
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

15. Governing Law and Dispute Resolution

This Privacy Policy is governed by and construed in accordance with the laws of Missouri, USA, without regard to its conflict of law principles. Any disputes arising out of or related to this Privacy Policy shall be resolved in the courts of Missouri.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: info@geospatialanalytics.com
Mailing Address: Geospatial Analytics, Inc. 4741 Central St. Suite 2000 Kansas City, MO 64112 USA

17. Additional Considerations

17.1. Data Protection Officer (DPO)

If required by applicable law, you should designate a Data Protection Officer and provide their contact information in this section.

17.2. Data Breach Notification

Outline your procedures for notifying users and authorities in the event of a data breach, including timelines and methods of communication.

17.3. Third-Party Service Providers

Provide detailed information about the categories of third-party service providers you use and their roles in processing personal data.

17.4. Consent Management

Explain how you obtain, manage, and document user consent for data processing activities, especially for marketing and non-essential cookies.

17.5. Automated Decision-Making and Profiling

Detail any automated decision-making processes or profiling activities, their purposes, and the safeguards in place to protect user rights.

17.6. Special Categories of Data

If you process special categories of data (e.g., health information, biometric data), provide explicit details on how this data is handled, secured, and the legal basis for processing.

Privacy Policy