Privacy Policy

Account data: name, work email, organization, and role.

Location data: a single GPS reading captured at the moment an employee confirms a visit, plus the computed distance from the site geofence and a verification status. We do not collect continuous or background location.

Usage and device data: limited technical information needed to operate and secure the Service.

Location data is collected solely to verify that a visit occurred at the designated site. Account and usage data are used to provide, secure, and improve the Service and to process billing.

Where GDPR or similar laws apply, we process data on the basis of performance of a contract, legitimate interests in verifying attendance, and, where required, consent. Employers using GeoConfirm are responsible for establishing a lawful basis for their workforce.

Visit history is retained for a window configured by your organization’s plan (for example 7, 90, or 365 days, or unlimited). Records age out automatically after the retention window.

We do not sell personal data. We share data with infrastructure and payment sub-processors strictly to operate the Service — including Polar (payments, as Merchant of Record) and our cloud hosting provider.

Data is encrypted in transit and at rest, access is restricted and scoped per organization, and we apply standard operational safeguards.

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and may object to or restrict certain processing. To exercise these rights, contact hello@geoconfirm.app.

For privacy questions or requests, email hello@geoconfirm.app.