Privacy Policy
Last updated: 2026-04-15
1. Data controller
The data controller for Geovian is Aleix Falgueras Casals. For any privacy-related inquiry you can contact: alvaro@geovian.com.
2. Data we collect
We collect: (a) account information you provide (email, name, password hash) and the organisation name we derive from your email domain; (b) site geometries and parameters you draw or submit; (c) usage data such as pages visited, actions taken, device and browser metadata, IP address; (d) communications you send us.
3. Legal basis for processing (GDPR)
We process personal data on the basis of: performance of a contract (providing the Service you request), our legitimate interests (improving and securing the Service), your consent (for optional analytics or marketing), and compliance with legal obligations.
4. Purposes of processing
We use your data to operate and improve the Service, authenticate users, generate viability reports, prevent abuse, comply with legal obligations, and, where applicable and with your consent, to contact you about product updates.
5. Service providers
We rely on third-party processors to run the Service, including cloud hosting, database, authentication, and analytics providers. These providers process data on our behalf under contractual safeguards and only for the purposes described in this policy. Specifically, we use Sentry (sentry.io) for error monitoring, which may collect IP addresses, browser metadata, and stack trace information when errors occur; and Vercel Analytics for privacy-first, cookieless measurement of page performance and traffic.
6. Data retention
We retain personal data only for as long as necessary to provide the Service and comply with legal obligations. Account data is kept while your account is active and deleted or anonymized upon account deletion, subject to any legal retention requirements.
7. Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, as well as the right to data portability and to withdraw consent at any time. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).
8. Cookies and similar technologies
We use strictly necessary cookies to operate the Service (e.g. authentication sessions). For analytics, we use Vercel Analytics, which is cookieless and does not store personal data or track users across sites. No consent banner is required for this analytics tool.
9. International data transfers
Some of our processors may be located outside the European Economic Area. In such cases, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to protect your data.
10. Security
We implement reasonable technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. However, no system is completely secure, and we cannot guarantee absolute security.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be signalled by updating the "Last updated" date and, where appropriate, by a notice within the Service.
12. Contact
For any question regarding this Privacy Policy or your personal data, please contact alvaro@geovian.com.