Privacy Policy

Last Updated: May 2026


1. Introduction

Welcome to Geobble ("we," "our," or "us"). We are committed to protecting your personal information and your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the platform.


2. Information We Collect

2.1. Information You Provide

We collect information you provide directly to us, including:

  • Account Information - When you create an account, we collect your email address, display name, handle, and account type (Individual or Organization)

  • Profile Information - Optional information such as bio, avatar, and other profile details you choose to provide

  • Geospatial Data - Data files you upload, including geographic information, attributes, and metadata associated with your sources

  • Communications - Information you provide when you contact us for support or participate in community features

2.2. Information Automatically Collected

We automatically collect certain information when you use our platform:

  • Usage Data - Information about how you interact with our platform, including pages viewed, features used, and actions taken

  • Device Information - Information about your device, including IP address, browser type, and operating system

  • Log Data - Log information about your use of the platform for troubleshooting and security purposes

  • Cookie-Free Web Analytics - We use Cloudflare Web Analytics to measure aggregate website traffic and performance, such as pages viewed, referrers, and Core Web Vitals. Cloudflare Web Analytics does not use cookies or local storage to track visitors.

2.3. Cookies and Tracking Technologies

We use essential cookies and local browser storage for authentication, security, language, theme, and interface preferences. We do not use analytics cookies. Our website analytics are provided through Cloudflare Web Analytics, which is cookie-free.


3. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Provision - To provide, maintain, and improve our platform, including processing your geospatial data and creating interactive maps

  • Authentication - To verify your identity and provide secure access to your account

  • Communication - To send you technical notices, updates, security alerts, and support messages

  • Analytics - To analyze aggregate usage and performance patterns and improve our platform's functionality and user experience

  • AI Processing - To power our AI features, including natural language queries and data extraction (your data is processed in accordance with our AI provider's policies)

  • Security - To detect, prevent, and address technical issues and fraudulent activity


We process your personal data under the following legal bases as defined by the EU General Data Protection Regulation (GDPR):

  • Contract Performance (Art. 6(1)(b)) — Processing necessary to provide the Geobble platform services you signed up for, including account management, data storage, and map publishing.

  • Legitimate Interest (Art. 6(1)(f)) — Processing for analytics, platform security, fraud prevention, and service improvement, where our interests do not override your fundamental rights.

  • Consent (Art. 6(1)(a)) — Where we rely on consent (e.g., optional AI features, marketing communications), you may withdraw consent at any time by contacting us or adjusting your account settings.

  • Legal Obligation (Art. 6(1)(c)) — Processing necessary to comply with applicable laws (e.g., tax records, law enforcement requests).


5. Data Storage and Processing

5.1. Data Location

All primary data is stored and processed within the European Union:

  • Application Database — A dedicated spatial database, hosted on servers in Western Europe.
  • Object Storage — Cloud object storage with EU jurisdiction (Western Europe region). Uploaded files, map images, and avatars are stored here.
  • Backups — Encrypted backups are stored in the same EU region.

Your geospatial data never leaves the EU unless you explicitly choose to publish a map with PUBLIC visibility, in which case map tiles are served via Cloudflare's global CDN for performance.

5.2. Geospatial Data

Your uploaded geospatial data is stored securely and processed using a dedicated spatial database. Data is organized by account and collection, with audience controls determining accessibility. We maintain appropriate technical and organizational measures to protect your data.

5.3. Sub-Processors

We use the following sub-processors to deliver our services:

Sub-ProcessorPurposeLocation
Dedicated hostingApplication servers, databaseWestern Europe (EU)
Cloudflare, Inc.CDN, object storage, DNS, cookie-free web analyticsEU (primary), global edge for public content
AnthropicAI features (opt-in)United States (see Section 5.4)
Dodo PaymentsPayment processingEU

5.4. AI Processing

When you use AI-powered features (data extraction, natural language queries), your prompts and relevant data excerpts are sent to Anthropic for processing. This data is not used to train AI models. You can avoid this processing entirely by not using AI features.

5.5. Data Retention

We retain your data for as long as necessary to provide our services and comply with legal obligations. When you delete your account or specific resources, we will remove or anonymize such data within a reasonable period, except where required by law.

5.6. Data Backups

We maintain secure backups of your data for disaster recovery purposes. Backup data is encrypted and stored in secure, access-controlled environments within the EU.


6. Information Sharing

6.1. Third-Party Service Providers

We share information with third-party service providers who perform services on our behalf:

  • Cloud Infrastructure - Hosting and data processing services
  • AI Providers - For natural language processing and AI features

6.2. Sharing Based on Your Choices

Your data may be shared with others based on your audience settings:

  • Public - Anyone with the link can view the resource
  • Private - Only you can view the resource
  • Restricted - Only specific people you invite can view the resource

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders or subpoenas).


7. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.


8. Your Rights (GDPR)

Under the GDPR and applicable data protection laws, you have the following rights:

  • Access (Art. 15) — Request a copy of all personal data we hold about you.
  • Rectification (Art. 16) — Request correction of inaccurate or incomplete data.
  • Erasure (Art. 17) — Request deletion of your personal data ("right to be forgotten").
  • Restriction (Art. 18) — Request that we restrict processing of your data.
  • Portability (Art. 20) — Receive your data in a structured, machine-readable format (GeoJSON, CSV).
  • Objection (Art. 21) — Object to processing based on legitimate interest.
  • Withdraw Consent — Where processing is based on consent, withdraw it at any time.

Data Export: You can export all your geospatial data at any time from the Geobble platform in open formats (GeoJSON, Shapefile, GeoPackage).

Account Deletion: You can delete your account from your account settings. This will permanently remove all personal data and geospatial data within 30 days, except where retention is required by law.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days as required by GDPR.


9. Children's Privacy

Our platform is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.


10. International Data Transfers

Your primary data is stored in Western Europe (EU). Where data is transferred to sub-processors outside the EU (e.g., Anthropic for AI features), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, and verify that adequate data protection measures are maintained.


11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our platform and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.


12. Data Protection Officer

For GDPR-related inquiries, you can contact our data protection contact:

You also have the right to lodge a complaint with your local data protection supervisory authority.


13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: