Privacy Policy

At Geodd, your privacy matters to us. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website, services, and communications ("Services"). By using our Services, you agree to this Privacy Policy and our Terms of Service. We follow privacy laws that apply to us, including: • US laws (Delaware) • California Consumer Privacy Act (CCPA/CPRA) • European and UK data protection laws (GDPR/UK GDPR) • Sri Lanka Personal Data Protection Act (PDPA) • HIPAA (US healthcare privacy law) — only if we process Protected Health Information (PHI) for a healthcare client If different laws apply, we follow the rules that give you the strongest protection.

We only collect what we need to provide our Services: • Name and email (when you sign up or contact us) • Technical information like IP address, device type, browser, and how you use the site. • AI inference data: We do not store or keep any inputs (prompts, queries, datasets) or outputs (results, predictions) from our AI inferencing services. These are processed only in memory to deliver results, then discarded immediately. We don't collect sensitive personal data (like ID numbers, health data, or biometric data) unless required for a specific service and with your consent.

We use your data to: • Provide services — manage accounts, deliver features, and run the platform • Keep services secure — prevent fraud, troubleshoot, and improve performance • Communicate with you — respond to questions, send service updates • Send marketing updates — if you've agreed to receive them • Meet legal obligations — when laws require itWe never use your AI inputs or outputs for model training, fine-tuning, or analytics. • HIPAA handling: If we process PHI for a healthcare client, we sign a Business Associate Agreement (BAA) and follow all HIPAA privacy, security, and breach rules. We also do not make automated decisions that have a legal or major impact on you.

We share data only when needed to run our business: • With service providers like hosting, analytics, email delivery, and security tools — bound by strict privacy contracts • If the business is sold or merged • When required by law or to protect safety We do not sell your personal data. We also do not share AI inference data, because we never store it.

We protect your information with: • Encryption in transit (TLS) and at rest (AES-256) • Access controls and authentication • Firewalls, intrusion detection, and regular security checks • Staff privacy and security training If a breach happens, we'll notify you and regulators as required by law.

• Account info: While your account is active + 24 months • Technical data: Up to 12 months • Legal records: Up to 7 years You can request deletion anytime (see Your Rights).

Depending on where you live, you may have the right to: • See what data we have about you • Correct wrong or outdated data • Ask us to delete your data • Limit or object to how we use your data • Get a copy of your data • Opt out of marketing messages To make a request, email [email protected]. We may need to confirm your identity first.

We use cookies to make our Services work better and understand usage. • Essential cookies: Needed for the site to work • Functional cookies: Remember preferences (optional) • Analytics cookies: Help improve our services (optional) We do not use advertising cookies. You can manage cookies in your browser or through our cookie settings.

We may process your data in other countries. When we do, we make sure your data is protected with legal safeguards (like EU Standard Contractual Clauses) or your consent.

We may update this Privacy Policy from time to time. If changes are significant, we'll let you know before they take effect.

Geodd LLC (Data Controller) Registered in Delaware, USA Email: [email protected] Mailing Address: 1021 E Lincolnway Suite #6661, Cheyenne, Wyoming 82001, United States Geodd (Private) Limited (Sri Lanka affiliate) Email: [email protected] If you're in the EU/UK, you can also contact our appointed representative (details available on request).