Privacy Policy

This Privacy Policy explains how Geodd LLC collects, uses, discloses, retains, and protects personal data in connection with our website, dashboard, communications, and Services.

This Privacy Policy should be read together with Geodd’s Terms of Service, Data Processing Agreement, Subprocessor List, Security Measures page, Cookie Policy, and International Data Transfers page.

For privacy questions or data protection requests, contact: [email protected].
For security questions, contact: [email protected].
For legal notices, contact: [email protected].

Geodd LLC is the entity responsible for providing the Services.

For purposes of this Privacy Policy, “Geodd,” “we,” “us,” or “our” means Geodd LLC.

This Privacy Policy applies to personal data that Geodd processes in connection with:

• Our website
• Customer account registration
• Customer dashboard use
• Sales and contact enquiries
• Billing and payment administration
• Support communications
• Security, fraud prevention, and service operations
• Marketing communications
• Use of our Services

This Privacy Policy does not replace any Data Processing Agreement between Geodd and a Customer. Where Geodd processes Customer Personal Data as a processor on behalf of a Customer, Geodd’s processing is governed by the applicable Data Processing Agreement.

Geodd’s Data Processing Agreement is available at: geodd.io/legal/data-processing-agreement

Geodd may act as either a controller or a processor depending on the context.

Geodd provides AI infrastructure services, including:

• Inferencing
• Serverless Inferencing
• Dedicated Inferencing
• Dedicated GPU
• Bare Metal Infrastructure

For EU/EEA and UK customers, Geodd may provide API access to AI models, dedicated managed AI inference endpoints, dedicated GPUs, managed servers, bare metal, and infrastructure services.

Geodd may collect the following categories of personal data.

Geodd uses personal data for the following purposes.

Where GDPR, UK GDPR, or similar laws apply, Geodd relies on one or more of the following legal bases:

• Contract: to provide the Services, manage accounts, process billing, and provide support.
• Legitimate interests: to secure the Services, prevent fraud, improve operations, respond to enquiries, and manage business administration.
• Consent: for certain marketing communications, cookies, analytics, and tracking technologies where required.
• Legal obligation: to comply with tax, accounting, regulatory, legal, and compliance obligations.
• Customer instructions: where Geodd acts as processor under a Data Protection Addendum.

Customer is responsible for determining whether personal data submitted to the Services includes sensitive, special category, regulated, or high-risk personal data under applicable data protection laws.

Geodd’s Services are designed to process Customer-submitted data according to Customer’s instructions. Geodd does not require Customers to submit sensitive or regulated data in order to use the Services.

If Customer submits sensitive, special category, regulated, or high-risk personal data to the Services, Customer is responsible for ensuring that it has all required lawful bases, notices, consents, authorizations, permissions, safeguards, and contractual rights necessary for such processing.

Unless expressly agreed in writing, Geodd does not provide Services specifically intended for HIPAA-regulated protected health information, children’s data, biometric identification, criminal offense records, or other legally restricted workloads requiring dedicated contractual or regulatory controls.

Geodd’s Services are intended for users who are at least 18 years old.

Geodd may share personal data with the following categories of recipients.

Geodd uses cookies and similar technologies for website operation, authentication, consent management, analytics, and marketing where applicable.

Cookies may include:

For EU/UK users, non-essential cookies and tracking technologies should not load before valid consent is obtained.

Users can manage cookie preferences through Geodd’s cookie banner, cookie settings, or browser settings.

More information is available in Geodd’s Cookie Policy: geodd.io/legal/cookie-policy

Geodd uses technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

Security measures may include:

• TLS protection for data in transit
• Encryption at rest where applicable
• API key hash storage
• API authentication using API keys and OAuth where applicable
• Role-based access controls
• MFA for administrative access
• Firewalls and web application firewall protection
• Private networks where applicable
• Customer isolation through dedicated endpoints where applicable
• Access logging
• Vulnerability management
• Incident response processes
• 30-day rolling backups for users and usage data where applicable
• Staff confidentiality obligations
• Staff access limited based on job role and operational need

Geodd’s Security Measures page is available at: geodd.io/trust-center/security-measures

No method of transmission or storage is completely secure. Customers are responsible for keeping API keys, credentials, and access permissions secure.

Geodd retains personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Billing and financial usage records may be retained for legal, tax, billing, fraud prevention, security, dispute, and compliance reasons.

Backup deletion occurs through normal backup expiry cycles and not by immediate deletion from all backups.

Customers may request deletion of their account by emailing [email protected] or by using any deletion functionality made available in the Services.

Where Customer requests account deletion, Geodd will delete or deactivate the account within a reasonable period and, where applicable, delete associated account data within 30 days, except for records that Geodd is required or permitted to retain for legal, tax, billing, security, fraud prevention, dispute, compliance, or legitimate business purposes.

API prompts, inputs, outputs, completions, request bodies, and response bodies are not available for export, correction, or deletion after processing where Geodd does not store them.

Geodd LLC is established in the United States.

For EU customers, API inference is hosted in EU data center infrastructure by default. EU/UK customers may also choose non-EU infrastructure, in which case API requests may be routed outside the EU/UK for inference processing.

Support and administrative access may occur from Geodd operational locations, including Sri Lanka, where necessary for support, security, debugging, service operations, billing, legal, and compliance.

Where personal data is transferred to or accessed from a country that has not been recognized as providing an adequate level of protection, Geodd uses appropriate transfer safeguards as described in its Data Protection Addendum and International Data Transfers page.

These safeguards may include:

• EU Standard Contractual Clauses
• UK International Data Transfer Addendum
• Swiss FADP adaptations where applicable
• Transfer Impact Assessment support
• Supplementary technical and organizational measures

Geodd’s International Data Transfers page is available at: geodd.io/legal/international-data-transfers

Depending on where you are located and which laws apply, you may have rights to:

• Access personal data
• Correct inaccurate personal data
• Delete personal data
• Restrict or object to processing
• Receive a copy of personal data
• Withdraw consent where processing is based on consent
• Opt out of marketing communications
• Lodge a complaint with a supervisory authority

To make a request, contact [email protected].

We may need to verify your identity before responding.

If your request relates to personal data submitted to Geodd by a Customer for processing under that Customer’s instructions, we may redirect your request to the relevant Customer unless legally required to respond directly.

Geodd will respond to rights requests within the timeframe required by applicable law.

If California privacy laws apply, California residents may have additional rights, including the right to know, access, correct, delete, and opt out of certain disclosures of personal information.

Geodd does not sell Customer Personal Data.

Geodd does not use Customer Personal Data submitted through the API for cross-context behavioral advertising.

To exercise California privacy rights, contact [email protected].

Users may opt out of marketing communications at any time by using the unsubscribe link in the email or contacting [email protected].

Even after opting out of marketing communications, users may still receive service, security, legal, billing, or administrative messages.

Geodd does not use Customer Personal Data submitted through the API to make automated decisions that produce legal or similarly significant effects on Data Subjects.

Customers are responsible for determining whether their own use of Geodd’s Services involves automated decision-making under applicable law.

Geodd’s Services are intended for users who are at least 18 years old.

Geodd does not knowingly collect personal data from children or provide Services specifically intended for children unless expressly agreed in writing and supported by appropriate legal safeguards.

If you believe a child has provided personal data to Geodd, contact [email protected].

Geodd LLC is not currently established in the EU or UK.

Geodd is in the process of appointing an EU representative and assessing or appointing a UK representative where required.

Until representative details are published, privacy-related inquiries may be sent to [email protected].

Geodd may update this Privacy Policy from time to time to reflect changes in law, Services, vendors, security practices, data handling practices, or business operations.

If changes are material, Geodd will provide notice by reasonable means, such as through the website, dashboard, email, or other electronic notice.

The “Last Updated” date shows when this Privacy Policy was last revised.

For privacy questions, data protection requests, or rights requests: [email protected]

For security questions: [email protected]

For support: [email protected]

For legal notices: [email protected]