Who we are

GeoCited is operated by Orosfort Private Limited ("GeoCited", "we", "us"), based in Chennai, Tamil Nadu, India. We are the data controller for personal data collected through geocited.io.

For any privacy question or request, email contact@geocited.io. We respond to all privacy inquiries within 30 days.

Information we collect

Contact information you provide: name, work email, company URL, job title, and named competitor, submitted through our booking form or by emailing us directly.

Usage data: pages visited, referring source, device and browser type, and approximate location (country/region level), collected automatically through analytics cookies once you consent to them.

Communications: the content of emails, call notes, and booking details when you engage with us, kept to deliver and improve our services.

We do not collect payment card details directly — billing is handled by third-party processors who maintain their own PCI-compliant systems.

How we use your information

To respond to inquiries and deliver the Citation Gap Report or Default Program services you request.

To run the pre-call AI visibility scan referenced on our booking page, using the company URL and competitor you provide.

To send service-related communications (scheduling, deliverables, invoices) and, where you've opted in, occasional marketing communications about GeoCited.

To understand aggregate site usage and improve the website, using analytics cookies only after you consent to them.

Legal basis for processing (GDPR)

Where the UK or EU GDPR applies, we rely on the following legal bases: performance of a contract (delivering services you've purchased), legitimate interest (responding to inquiries, securing our systems, and direct business-to-business communications), and consent (analytics cookies and marketing emails, which you can withdraw at any time).

You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent for cookies, use the "Cookie Preferences" link in the site footer. To withdraw consent for marketing email, use the unsubscribe link in any email or email contact@geocited.io.

Cookies and analytics

We use Google Analytics (GA4) and Microsoft Clarity to understand aggregate site traffic and behavior (including session recordings and heatmaps). Both are non-essential, consent-gated: neither loads until you accept cookies via the banner shown on your first visit, and you can change your choice at any time from the "Cookie Preferences" link in the footer.

See our Cookie Policy for the full list of cookies and how to control them at the browser level.

Third parties and international transfers

We share data with a small number of service providers strictly to deliver our service: Cal.com (scheduling), Google Analytics and Microsoft Clarity (site analytics and session recordings, if consented), and Vercel (hosting infrastructure). Each processes data under its own privacy policy and, where applicable, standard contractual clauses.

Because GeoCited operates from India and serves clients in the United States and elsewhere, your data may be processed outside your country of residence. Where required by GDPR, we rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard for transfers out of the EU/UK.

We do not sell personal data, and we do not share it with third parties for their own independent marketing purposes.

Data retention

We retain client and prospect data for as long as needed to deliver services, respond to your inquiries, and meet legal, accounting, or tax obligations — typically no longer than 36 months after our last interaction, unless you ask us to delete it sooner or the law requires longer retention.

Analytics data is retained in Google Analytics under Google's standard 14-month event retention window, and in Microsoft Clarity under Microsoft's standard retention window for Clarity data.

Your rights

If GDPR applies to you, you have the right to access, correct, delete, restrict, or port your personal data, to object to processing based on legitimate interest, and to lodge a complaint with your local data protection supervisory authority.

If you are a California resident, you have the right to know what personal information we hold, to request deletion, and to opt out of any sale or sharing of personal information. GeoCited does not sell personal information.

To exercise any of these rights, email contact@geocited.io. We may need to verify your identity before completing certain requests.

Marketing communications, Do Not Call, and Do Not Disturb

We only contact prospects who have engaged with us directly (booked a call, replied to outreach, or submitted a form) or through channels where the recipient can reasonably expect business contact. We do not send unsolicited SMS or place unsolicited calls to numbers registered on a national Do Not Call or Do Not Disturb registry, including India's National Customer Preference Register (NCPR/DND) and the U.S. National Do Not Call Registry.

Every marketing email includes a one-click unsubscribe link. You can also ask us to stop contacting you entirely, at any time, by emailing contact@geocited.io with "Do Not Contact" in the subject line — we will honor that request within 10 business days and will not contact you again outside of an active, paid engagement.

Children's privacy

GeoCited's services are intended for business use by adults. We do not knowingly collect personal data from anyone under 16. If you believe a minor has provided us data, email contact@geocited.io and we will delete it.

Security

We use industry-standard technical and organizational measures — encrypted transport (HTTPS), access controls, and vetted third-party processors — to protect the data we hold. No system is perfectly secure, and we cannot guarantee absolute security.

Changes to this policy

This policy was last updated July 19, 2026. If we make material changes, we will update the effective date above and, where required by law, notify you directly.