Privacy Policy
Last updated: January 1, 2025
Your privacy is important to us. This policy explains how Geovatra collects, uses, and protects your personal information and geospatial data.
01 Overview
Geovatra ("we", "us", "our") is committed to protecting your personal information. This Privacy Policy describes how we collect, use, store, and share information when you use our AI-powered geospatial platform.
By using Geovatra, you consent to the practices described in this policy.
02 Data We Collect
We collect the following types of information:
Account Information
- Name, email address, and password (encrypted)
- Profile information you choose to provide
- Account activity and usage history
Geospatial Data
- Shapefiles, GeoJSON, GeoTIFF, and other spatial files you upload
- Drawn features and annotations created on the map
- Analysis results and processed layers
- Project configurations and workspace settings
Usage Data
- Chat messages and AI interactions
- Map viewport, zoom level, and navigation data
- Feature usage and analysis operations performed
- IP address, browser type, and device information
03 How We Use Your Data
We use collected data to:
- Provide, maintain, and improve the Geovatra platform
- Process geospatial analysis requests and return results
- Send account activation and important service emails
- Monitor platform performance and prevent abuse
- Respond to support requests and inquiries
- Comply with legal obligations
We do not use your geospatial data or chat conversations to train AI models, sell to advertisers, or share with marketing partners.
04 Data Storage & Security
Your data is stored using industry-standard security measures:
- Database hosted on Supabase with PostgreSQL + PostGIS
- Raster files stored in Cloudflare R2 with encrypted storage
- All data transmission encrypted via HTTPS/TLS
- Passwords hashed using industry-standard algorithms
- Regular security audits and vulnerability assessments
While we implement strong security measures, no system is completely immune to security breaches. We encourage you to use a strong, unique password for your account.
05 Data Sharing
We do not sell, trade, or rent your personal information or geospatial data to third parties. We may share data only in the following limited circumstances:
- Service Providers: With trusted infrastructure providers (Supabase, Cloudflare, Render) solely to operate the platform
- AI Processing: Chat messages are processed by DeepSeek AI for natural language understanding only
- Legal Requirements: When required by law, court order, or governmental authority
- Business Transfer: In the event of a merger or acquisition, with prior notice to users
06 Cookies
Geovatra uses cookies and similar technologies to:
- Maintain your login session (session cookies)
- Remember your map preferences and workspace settings
- Protect against CSRF attacks (security cookies)
- Analyze platform usage to improve performance
Essential cookies cannot be disabled as they are required for the platform to function. You can manage non-essential cookies through your browser settings.
07 Your Rights
You have the following rights regarding your data:
Access
Request a copy of all personal data we hold about you
Correction
Update or correct inaccurate personal information
Deletion
Request deletion of your account and all associated data
Portability
Export your geospatial data in standard formats
To exercise any of these rights, contact us at info@geovatra.com.
08 Data Retention
We retain your data for as long as your account is active or as needed to provide services. Specifically:
- Account data is retained until you delete your account
- Project and layer data is retained until you delete it or close your account
- Chat history is retained for 90 days by default
- Usage logs are retained for 12 months for security purposes
09 Third-Party Services
Geovatra integrates with the following third-party services, each with their own privacy policies:
- Microsoft Planetary Computer — satellite data provider
- DeepSeek AI — natural language processing
- Supabase — database and authentication
- Cloudflare R2 — raster file storage
- Google reCAPTCHA — spam and bot protection
- OpenStreetMap Overpass API — vector data
10 Children's Privacy
Geovatra is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.
11 Changes to Policy
We may update this Privacy Policy periodically. We will notify you of significant changes by email and by posting a notice on the platform. Your continued use of Geovatra after changes are posted constitutes acceptance of the updated policy.
12 Contact Us
For privacy-related questions or to exercise your data rights, contact our privacy team: