Who operates NuGEO
NuGEO operates this service for business customers. This policy covers the public website, invitation requests, invited accounts, reports, service messages, optional data connections, and account funding.
NuGEO is a business service for adults. Do not submit sensitive personal information that is not needed for a report.
Information we collect
- Invitation requests: work email, company domain, position, budget range, and a short summary derived from the public homepage.
- Accounts and reports: profile, security, contract, and terms-acceptance records; company and domain; business goal; optional strategy context; selected report options; public-site data; generated answers and citations; reports; implementation instructions; report-share invitations and recipients; and access history.
- Optional connections: encrypted connection credentials, accessible resource details, and domain-matched analytics, search, crawl, ranking, backlink, or competitive analytics.
- Funding and service operation: billing requests, payment references, public Bitcoin transaction details, and ordinary request and security data such as IP address, browser information, route, and time.
How we use it
We use this information to review access, authenticate accounts, retrieve data you authorize, produce and retain reports, prepare implementation instructions, deliver report-share invitations requested by account owners, send service notices, administer funding, prevent abuse, resolve problems, and comply with law.
We use personal data for the purposes disclosed when it is collected, with informed consent where required or as otherwise permitted by law.
Private reports and AI processing
Reports, strategy context, and connected data are not published. They are available to the relevant account and to NuGEO personnel who need access for security, legal compliance, or support and work the customer requests. An account owner may explicitly invite one recipient to a selected completed report. That recipient receives read-only access to that report, not the owner's other reports, strategy context, connections, or billing balance. The owner can withdraw access.
To produce a report, selected AI and retrieval providers may receive public-site extracts, company and competitor names, the customer’s goal and strategy context, connected data, prior findings, and generated output. NuGEO does not use customer content to train a NuGEO model. Provider retention and training rules can vary by endpoint and configuration, so customers should not submit confidential or personal information that the report does not need.
Google data
Google connections use read-only Analytics and Search Console access. NuGEO lists accessible properties, matches the audited domain, and retrieves relevant aggregate performance and search analytics. Connection credentials are encrypted.
With the account user’s consent, necessary excerpts or aggregates may be sent to selected AI providers only to create the requested report. Google-derived results saved in a completed report may be shown to a report recipient only when the account owner explicitly shares that report. NuGEO personnel may access Google user data only when an account user expressly authorizes requested support or work, when needed for security, or when required by law.
We do not use Google user data for advertising, sale, lending, surveillance, or training a general-purpose AI model. Our use of Google user data follows the Google API Services User Data Policy, including its Limited Use requirements.
Disconnecting Google removes the stored connection and attempts to revoke its authorization. Data already saved in a report remains until the report or account is deleted, subject to legal requirements.
Service providers and international processing
We use hosting, email, connected-data, payment, public-data, and AI providers to deliver the service. We disclose only what each provider needs for that function. We may also disclose information to professional advisers, authorities acting under valid law, or a business successor subject to appropriate confidentiality.
NuGEO's operating team is distributed across the United States and Canada. Its legal mailing address is in Costa Rica. Providers may process information in the United States and other countries with different privacy laws. We use consent, contractual terms, and other safeguards where applicable law requires them.
Retention, deletion, and security
Connections remain until disconnected or the account is deleted. Reports and strategy context remain until the report or account is deleted. Report-share access remains until the owner withdraws it or the report or owner account is deleted. Invitation, terms-acceptance, security, audit, and funding records remain while needed for the service, disputes, security, or legal obligations. Costa Rican tax law generally requires relevant business records to be kept for at least five years. Protected backups may take additional time to expire.
Account deletion removes active account content and disconnects providers, subject to records that law requires us to keep. Public web pages controlled by others and Bitcoin transactions recorded on the public blockchain cannot be erased by NuGEO.
We use HTTPS, account-scoped access, hashed passwords and account secrets, encrypted connection credentials, secure cookies, request validation, and recorded administrative access. No internet service can guarantee perfect security.
Cookies
The Google tag loads on public pages with analytics storage denied and may send cookieless measurement pings before you make a choice. Google Analytics storage and Ahrefs Web Analytics begin only after you choose “Allow analytics.” These services may then receive the page URL, IP address, approximate location, browser and device information, and interaction data to help us measure visits and page use. Google may set first-party analytics cookies. We disable Google advertising signals and personalization and do not use analytics for behavioral advertising.
You can decline analytics or change your choice using “Analytics settings” in the footer. A theme choice and your analytics choice may be saved in the browser. Signed-in pages use strictly necessary session, form-security, and temporary connection cookies.
Your rights
Depending on the law that applies, you may ask to access, correct, update, or delete personal information; withdraw consent for future processing; control a transfer; or object to or restrict some processing. We may verify identity and authority before acting.
Under Costa Rica’s Law No. 8968, qualifying access, rectification, updating, or suppression requests are handled free of charge within five business days after receipt, subject to lawful limits. You may also use the PRODHAB complaint procedure in Costa Rica or contact the privacy regulator that applies where you live or work.
Contact
Privacy Officer, NuGEO
EBC Corporate Center, eighth floor, offices of Sfera Legal
San Rafael, Escazú, San José
Costa Rica
We will update the effective date when this policy changes. If a change materially expands how we use personal information, we will provide any notice or request any consent required by law before the new use begins.