Privacy Policy

Effective Date: May 8, 2025 (Supersedes Privacy Policy dated November 20, 2024)

GeoZilla, Inc. and its affiliates and subsidiaries ("GeoZilla," "we," or "us") are committed to protecting your privacy. This Privacy Policy describes how we collect, use, share, and secure your personal information when you use GeoZilla's websites, mobile applications, and download any downloadable software, products, and services offered at www.geozilla.com (collectively, the "GeoZilla Service"). It also explains your rights and choices regarding your personal information.

We encourage you to read this Policy carefully. Please also read GeoZilla's Terms of Use. If you have any questions, please contact us at support@geozilla.com.

Note: Our Privacy Policy may be modified from time-to-time. If we make material changes to this Policy, we will notify you (e.g. via email or by means of a notice on this website) before they take effect. We encourage you to periodically review this page for the latest information on our privacy practices. Your continued use of GeoZilla Service after updates signifies acceptance of the revised Policy.

Data Controller and Contact Information

GeoZilla, Inc. (150 East Palmetto Park Road, Suite 800, Boca Raton, FL 33432, USA) is the data controller for personal information we process. You can reach us at support@geozilla.com for any privacy-related inquiries.

Personal Information We Collect

Personal Information means information that can be used to identify, locate, or contact an individual. This includes data directly tied to a person, like his or her name, email address, phone number, as well as indirect identifiers, like an IP address, device identifiers, or location data when combined with other details. It does not include data that has been de-identified or aggregated. Our Privacy Policy does not restrict or limit our collection and use of aggregate information. When you use GeoZilla Service, we may collect and process Personal Information about you in the following ways:

• Information You Provide:
  • Registration and Profile: when you create an account, we collect information like your name, email address, mobile number, username, and (optionally) a profile photo. If you invite family members, we collect their name, email, and phone number with your permission.
  • Parental Consent: we may collect additional information from a parent or legal guardian in order to obtain verifiable parental consent to allow a child to use the GeoZilla Service (for children under 13 (or 16 in the EU/UK)).
  • Payments: When you sign up for GeoZilla Premium, we may collect limited billing-related information, such as the last four digits of your payment card, the card brand (e.g., Visa, Mastercard), and transaction receipts to verify your subscription status. We do not store or process full payment card details. Instead, full payment information is handled directly by the relevant payment processor (such as Apple App Store, Google Play, Stripe, etc.) in accordance with their own privacy and security policies. GeoZilla only retains the minimum data necessary to confirm payment status and respond to support requests.
  • Messages: when you use messaging features within GeoZilla (e.g., to communicate with family or group members), we collect the content of those messages and related metadata (such as the time sent and recipient). Messages are only visible to participants within your GeoZilla circles and are not used for advertising or profiling purposes. GeoZilla does not access your messages for any reason other than delivering the feature or investigating misuse, and only as permitted by law.
  • Contacts: when you invite others to join GeoZilla (e.g., using the "invite via phone number" feature) or designate emergency/SOS contacts, we collect the phone numbers and, if available, names of those individuals. Please ensure you have a valid legal basis to share this information with us (such as their prior consent or another lawful ground under applicable law). We use this information solely for the purpose of delivering the invitation or enabling emergency communication. We do not use contact data for marketing, and we do not share it with third parties for unrelated purposes.
  • Inquiries: when you contact the GeoZilla support team (e.g., via email, in-app chat, or web form), we collect and process the content of your message, including any files or attachments you submit. We also process your contact details, such as your name, email address, and any other identifiers you provide, depending on the communication method. This information is used solely to respond to your inquiry, resolve issues, and maintain records of customer interactions, in accordance with applicable laws.
  • Newsletters: with your consent, we may use your email address to send you newsletters, product updates, special offers, and promotional content related to the GeoZilla Service. You can opt out of marketing emails at any time by clicking the "unsubscribe" link in any email or by contacting us at support@geozilla.com. Unsubscribing will not affect your access to the GeoZilla Service or non-promotional communications (such as service updates or billing notices).
  • Feedback & Reviews: After you use GeoZilla, we may invite you via email to review your experience. These review invitations help us improve our services and inform others. We send such invitations sparingly and only in compliance with applicable laws. You will always have the opportunity to opt out of receiving review requests (each invitation email will include an "unsubscribe" link, or you can contact support at support@geozilla.com to opt out). In certain regions, we will only send review invitations if we have your prior consent, as required by local law.
• Automatically Collected Information: When you use GeoZilla Service, we and our partners use cookies, web beacons, log files, device sensors, and similar technologies to collect data about your device and usage. Please note that these methods are standard practice across most digital services and platforms to help ensure functionality and improve user experience.
  The types of information we collect include:
  • Device/Usage Data: when you use the GeoZilla Service, we and our business partners may automatically collect certain information about your device and how you interact with our service. We use common technologies such as cookies, web beacons, log files, and other tracking tools. These tools help us ensure functionality, enhance performance, and personalize your experience.
    The types of information we collect include:
    • Technical details about your device: IP address, device model and brand, device identifier (e.g., IDFA, GAID), browser type, operating system and version, time zone, language settings, screen resolution, network settings, battery level, charging status, and general location (e.g., city-level).
    • Usage data: referring and exit pages and URLs, clickstream behavior, feature usage, session timestamps, app crashes, error logs, landing pages, page views, and interactions with content, links or buttons.
    • Cookie identifiers and analytics: unique browser or device IDs stored in cookies or local storage used to remember preferences, analyze behavior, or deliver personalized content.
    We collect this data for the following purposes: to deliver the core functionality of GeoZilla; to maintain service performance, debug issues, and ensure reliability; to understand how users interact with the GeoZilla Service and improve features.
  • Advertising Datа: we may work with advertising networks, analytics providers, social media platforms and other service providers to deliver personalized content and measure ad effectiveness. These third parties may collect information across websites and apps over time and across devices and in combination with data from other sites, apps, and services, including: Ad identifiers (e.g., IDFA, GAID); Cookie IDs or local storage keys; Hashed email addresses (when permitted); Clickstream and browsing behavior; Device and usage details as listed above, and other similar information. These partners use this data to show you ads that are more relevant to your interests on websites, apps, and social media platforms. This type of data processing may require your consent depending on your jurisdiction (e.g., under the GDPR or ePrivacy Directive). You can manage your preferences via your device settings or our cookie management tools.
  • Location Data: with your permission, we collect precise location data via GPS, WiFi, or mobile networks to support key features such as: Real-time family location sharing; Geofence-based alerts; Emergency notifications. You can control location tracking in your device settings or within the GeoZilla app. We only collect location data when you are logged in and have granted permission.
  • Driving Event Data: if you enable driving features, we process data from motion and position sensors in your mobile device — such as the accelerometer, gyroscope, GPS, and Bluetooth. The data includes changes in speed or direction, location data to track vehicle speed and position, and Bluetooth data to identify when the device is connected to the car system. We use this information to detect unsafe driving behavior (e.g., rapid acceleration, hard braking, sharp turns) and provide driving insights or safety alerts.
  • Fall Detection Data: if you activate fall detection, we use device sensor data (e.g., accelerometer, gyroscope, GPS) to recognize abrupt changes in movement, such as falls or impacts. If a potential fall is detected, GeoZilla may notify your designated emergency contacts or send alerts according to your preferences.
• Information from Third Parties: if you choose to register or log in to the GeoZilla Service using a third-party social media platform (e.g., Facebook), we may receive certain personal information from that platform to simplify your account setup and personalize your experience. This may include: Your name, email address, profile photo, gender, age range, username, language, country, the user ID associated with your account on that platform, and any other details you allow the social network to share with third parties. The exact information we receive depends on your privacy settings with the social platform and the permissions you grant. We use this data to create or link your GeoZilla account, personalize features, and, where applicable, enable social functionality (e.g., inviting contacts). We do not post on your behalf or make your activity visible on the social platform. This processing is typically based on your explicit consent (when you authorize the social login) and/or as necessary for the performance of our contract with you (e.g., account creation).

Except as described in this Privacy Policy, we will not use or share your Personal Information for new purposes without notifying you and obtaining any necessary consent. We do not sell your Personal Information to third parties for their own marketing purposes.

Children’s Privacy

GeoZilla is not directed to children under the age of 13 (or under 16 in the European Union and United Kingdom) without the involvement of a parent or legal guardian. We comply with all applicable child data protection laws, including the U.S. Children’s Online Privacy Protection Act (COPPA), EU GDPR Article 8, and UK GDPR.

GeoZilla allows parents to track the location of their children by linking a child’s device to their family account. This service is intended to be used only under parental control. If a parent wishes to add a child under 13 (or under 16 in the EU/UK), they must provide verifiable parental consent. We typically require this to be submitted via email, accompanied by confirmation steps (such as additional identity or payment verification) depending on jurisdiction.

Once parental consent is provided, we collect and process the child’s personal information (e.g., location data, device usage) only as necessary to provide the safety features requested by the parent. This data is shared with members of the family circle as part of core functionality. We do not use this information for advertising, marketing, or profiling, and we do not allow third-party partners to do so either.

If we become aware that we have collected personal data from a child under 13 (or under 16 in the EU/UK) without the required parental consent, we will delete such data promptly.

If you believe this may have occurred, please contact us immediately at support@geozilla.com.

For any questions or to update a child’s account or parental consent, contact: support@geozilla.com.

Integrated IoT Partners

GeoZilla partners with select Internet of Things (IoT) device manufacturers to extend the functionality of the GeoZilla Service — particularly for safety and emergency alert features. When you connect a compatible IoT device to your GeoZilla account, we may receive certain data from that device via our integration partners.

To safeguard your privacy, all data transmitted from IoT devices is either anonymized or pseudonymized and is limited to what is strictly necessary to provide core functionalities.

Specifically, we may receive:

• Anonymized Authorization Token: a secure, non-identifiable token used to link the IoT device with your GeoZilla account, without exposing personal information.
• Anonymous Account ID: a pseudonymous identifier that allows us to associate incoming device data with your user session, without directly identifying you.
• SOS Signal: when triggered by the device, GeoZilla uses this signal to alert your approved emergency contacts or circle members in real time.
• Tracker ID: an anonymous, device-specific ID that enables the platform to distinguish between multiple IoT devices.
• Anonymized Location Data: certain devices may send location data to facilitate emergency alerts. When processed independently, this data is anonymized to avoid direct linkage to identifiable individuals.

GeoZilla uses this data solely for the purpose of delivering safety-related services such as SOS alerts, device tracking, and emergency notifications within your user circle. We do not use IoT data for analytics, marketing, profiling, or any unrelated purpose. Additionally: we do not collect personally identifying information directly from IoT hardware; where data from an IoT device becomes linked to a user account (e.g., to show alerts in the app), it is processed under the same privacy safeguards as all other user data, and always in accordance with this Privacy Policy; our integration partners are contractually bound to protect any shared data and may only act as data processors under our instructions.

If you disconnect your IoT device or delete your account, associated tokens and identifiers will be revoked or deleted.

How We Use Your Personal Information

We use Personal Information for the following purposes (and in accordance with the legal bases noted in the "Legal Grounds" section below):

• To Provide and Maintain the GeoZilla Service: we process data to create your account, enable core features (like location sharing, messaging, safety alerts), and maintain the functionality and security of GeoZilla Service. This includes using device and usage data to ensure service reliability and prevent fraud.
• To Communicate with You: we use contact information (email or phone) to send service-related notifications (e.g. account verification, critical updates, security alerts). We may also send you customer service communications in response to your inquiries, and — as described above — occasionally invite you to provide feedback or review our service after a transaction.
• To Improve and Develop GeoZilla Services: we analyze usage and feedback (including any reviews you provide) to understand how users interact with GeoZilla and to improve our offerings. For example, crash reports and usage logs help us fix bugs and optimize user experience. Reviews or ratings you provide may be used to enhance our services and may be published (with your consent) to inform other users.
• Marketing and Promotional Uses: with your consent, we send newsletters or promotional emails about new features or special offers. We also personalize what you see (including ads on third-party platforms) based on your interests and past interactions. You can unsubscribe or adjust your preferences at any time. We do not use data from children's accounts for marketing or advertising purposes.
• Safety and Legal Compliance: we use data to promote user safety, such as sharing your location with your approved family members and sending SOS alerts to your emergency contacts. We also may process personal data as required by law or to enforce our Terms of Use (for example, to comply with a legal obligation or to prevent illegal activities). If necessary, we will use or disclose data to protect our rights, users, and the public – for instance, investigating misuse of the service or responding to lawful requests by authorities.

Legal Grounds for Processing (EEA/UK and Similar Jurisdictions)

If you are in a jurisdiction that requires a legal basis for processing personal data (such as the European Economic Area, UK, etc.), we rely on the following bases:

• Performance of a Contract: most data processing is to provide the GeoZilla Service you requested under our Terms of Use. For example, we need your account info to maintain your account – these are necessary for us to perform our contract with you.
• Consent: We rely on your consent where we specifically ask for it – for instance, enabling precise location tracking, processing driving/fall detection data, sending newsletters or promotional emails, and for using certain cookies or advertising identifiers. Where we rely on consent, you have the right to withdraw it at any time (e.g. you can disable location services or use the unsubscribe link in marketing emails).
• Legitimate Interests: We process certain data based on our legitimate interests, only after confirming that our interests are not overridden by your privacy rights. The primary example is inviting customers to review our services. We have a legitimate interest in requesting feedback and public reviews from our users to improve our services. We send review invitation emails sparingly and in a non-intrusive way (typically one invite per transaction, with at most one reminder), and only to recent customers. We believe customers reasonably expect a follow-up review request after using the service. Importantly, you have the right to object to such review emails at any time, and we will honor any opt-out request immediately. In certain countries, direct email invitations for reviews are considered marketing and require consent despite our legitimate interest – for example, Germany, Austria, and Switzerland. We comply with those laws by not sending invites to users in those countries without prior consent (see "Your Choices" below). Aside from review invitations, we may also rely on legitimate interests to improve our service (e.g. analyzing usage data to refine features) or to secure our platform, provided such processing is fair, balanced, and respects your rights.
• Legal Obligation: In some cases, we must process data to comply with laws – for example, retaining transaction records for tax/audit purposes, or responding to valid legal requests.

Your Rights to Object or Withdraw Consent: If we rely on legitimate interests to process your data (like sending a review invite), you have the right to object at any time. If you object, or if you unsubscribe from review emails, we will stop processing your data for that purpose. Where we rely on your consent (e.g. for newsletters, location data), you can withdraw consent at any time, and we will stop the processing going forward (this will not affect the lawfulness of past processing).

Sharing of Personal Information

We do not sell your personal information. We only share it as described here, and always under appropriate safeguards:

• With Your GeoZilla "Circles": If you join or create a GeoZilla circle (family or group), certain information (like your name, profile info, real-time location, driving alerts, and messages you send within the circle) is shared with other members of that circle. This is fundamental to how the app works (for example, your family needs your location to receive alerts). You control who is in your circles, and you can leave a circle at any time.
• Service Providers (Processors): We use trusted third-party companies to operate and improve GeoZilla Service on our behalf. These service providers only process your data per our instructions and for the purposes described in this Policy. We have Data Processing Agreements in place with them as required by law. Key service providers we engage include:

These third parties are bound by contract to protect your information, to use it only for the services they provide to us, and to comply with applicable data protection laws. For example, Trustpilot acts as our data processor for sending review invitation emails, and it cannot use your data for any other purpose than to send the invite on our behalf. We do not allow our service providers to sell or misuse your data.

• Business Transfers: If we are involved in a merger, acquisition, bankruptcy or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will ensure the acquiring organization honors the commitments in this Privacy Policy or provide you notice and choice before any changes to how your data is handled.
• Legal Disclosures: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order, subpoena, or government demand). We may also disclose information if we believe in good faith that it is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to an emergency. For example, if someone is violating our Terms of Use or misusing the service, we may share data with law enforcement to investigate.
• With Your Consent: In cases where you have given consent for us to share your information with third parties for a specific purpose not covered above, we will share it as directed. For instance, if in the future you opt-in to integrate GeoZilla with another app or service and allow data sharing, we will do so according to your instructions.

We will specifically inform you and obtain consent if we ever need to share your Personal Information for a new purpose not covered by this Policy.

Public Posting: please note that if you voluntarily post information in public areas of the GeoZilla Service or on our social media pages (for example, by leaving a public review on an app store or a comment on our social channels), that information is visible to the public. We may republish public testimonials or reviews you provide about GeoZilla (with your permission). However, we will never post your personal details publicly without consent.

International Data Transfers

GeoZilla is based in the United States, and our service providers operate in various countries. When you use GeoZilla, your personal information may be transferred and stored outside of your home country, including in the United States, the European Union, or other jurisdictions. In particular, if you are located outside the U.S., your data will likely be transferred to the U.S. and/or EU for processing. We take appropriate safeguards to ensure such transfers comply with applicable data protection laws:

• For transfers from the EEA/UK or other regions with data export restrictions, we rely on mechanisms like the European Commission's Standard Contractual Clauses (SCCs) or UK International Data Transfer Addendum, which contractually obligate recipients to protect your data. All our key vendors have agreed to such safeguards for international transfers.
• We also verify that our service providers maintain adequate data protection standards. For example, Trustpilot is GDPR-compliant and imposes similar protections on any subprocessors it uses, even in the U.S., via the SCCs. Amazon and other U.S. providers we use are certified under recognized security standards (like ISO 27001), which helps protect your data.
• If required by local law, we will obtain your consent for the international transfer. For instance, Australian users: by using GeoZilla, you understand your data may be disclosed to overseas recipients (such as Trustpilot in Europe) for the purposes outlined (e.g., sending a review invite). We ensure these recipients are contractually bound to protect your data to standards comparable to Australian law (APP 8 compliance).

You have the right to request more information about our international data transfers and the safeguards in place. If you have questions, please contact us.

Data Retention and Deletion

We will retain your Personal Information only as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law. In general:

• Active Accounts: for as long as you have an account or ongoing relationship with GeoZilla, we will keep your information to provide you the service, comply with legal obligations, and maintain records. By default, if you cease using GeoZilla, we will retain your account data for up to 3 years from your last interaction with the service, in case you return or need to access your data (we find that this timeframe balances user convenience and privacy.) After that period of inactivity, we will delete or anonymize your information unless we are legally required to keep it longer.
• Location Data: we only retain precise location history for a relatively short period (e.g., the past 2 weeks of location trails) unless needed for a specific feature. Older location data may be aggregated or deleted, to minimize what we hold.
• Communications: copies of communications you have with us (e.g., support emails) are retained as long as necessary to address your request and for a short period thereafter in case of follow-up, or longer if required for legal purposes (e.g., to establish a record of customer service interactions).
• Review Invitations Data: Personal data shared with Trustpilot for review invitations is not kept indefinitely. We only upload the minimal data needed (e.g., first name, email, and an order/service reference) and Trustpilot uses it to send the one-time invite (and a possible one reminder). Trustpilot will delete or anonymize that personal data after it's used for the invite, in accordance with our agreement. We do not store the invite CSV files permanently on our end either – once the invitation is sent and we have logged whether you responded or opted out, we delete the underlying contact list used for that campaign.
• Cookies & Analytics Data: Data collected via cookies and similar technologies is retained according to the durations set in our Cookie Policy or as configured in your device. For example, some analytics cookies data may be kept for 14 months, whereas advertising identifiers may be reset more frequently per industry standards.

When we no longer have a legitimate need to use your personal information, we will either delete it or anonymize it. If deletion or anonymization is not immediately possible (for example, because the data is stored in a backup archive), we will securely store it and isolate it from any further use until deletion is feasible.

Account Deactivation and Deletion: You may request to deactivate or delete your GeoZilla account at any time by contacting support@geozilla.com. Please note: removing GeoZilla from your mobile device will not delete the Personal Information that has been retained about you. If you leave your circles, we will retain your user content in the event that you would like to access it in the future.

Your user content can be deleted permanently by emailing a request to support@geozilla.com. Upon verification of your request, we will deactivate your account and delete or anonymize your personal data (unless retention is required for legal reasons). Note that deletion of your account will remove your profile and you will no longer be able to access any data associated with it. Data that you had shared with others (for example, messages or location history in a family circle) will be deleted or disassociated from you such that it no longer identifies you. If you are part of a GeoZilla circle and you leave that circle or delete your account, other members may no longer see your information. However, some content you contributed (like messages in a group) might remain visible to others in the group but without identifying you (e.g., it may say "Deleted User"). If you reinstall or reactivate GeoZilla after deletion, you will appear as a new user and will not have access to your old data.

Your Rights and Choices

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Right to Access: You can request a copy of the personal data we hold about you and information on how we use and share it. This includes the right to ask for confirmation whether we are processing your data, and to obtain certain information about our processing (commonly known as a "data subject access request"). We will provide you with a readable copy of your data, typically within 30 days of your request (or as required by law).
• Right to Correction: If any of your information is inaccurate or incomplete, you have the right to request correction. You can also update much of your profile data directly in the app.
• Right to Deletion: You can ask us to delete your personal data. Upon a verified request, we will delete your information from our active systems and instruct our service providers to also delete your information that they hold on our behalf, subject to any legal exceptions. Some data cannot be fully deleted immediately if it is required to be retained (e.g., payment transaction records for legal compliance), but we will inform you if any such exception applies.
• Right to Object or Restrict Processing: You have the right to object to certain processing activities or request that we limit processing in certain circumstances. For instance, you can object to the use of your data for direct marketing or customer feedback purposes. If you object, we will stop processing your data for that purpose unless there are compelling legitimate grounds to continue. You can also ask us to restrict processing if you contest the accuracy of data or if the processing is unlawful but you prefer restriction over deletion, etc.
• Right to Data Portability: Where applicable (e.g., under GDPR), you can request a copy of certain data in a machine-readable format, or ask us to transfer it to another provider where technically feasible. This typically applies to data you provided us directly.
• Right to Withdraw Consent: If we rely on consent for any processing (see "Legal Grounds" above), you can withdraw that consent at any time. For example, you can unsubscribe from marketing emails or disable certain device permissions to withdraw consent. This will not affect processing already done but will stop future processing.
• Right not to be Subject to Automated Decisions: GeoZilla does not make any legally significant decisions about you solely by automated means (without human involvement) that would negatively affect you. If that ever changes, where required by law, you would have the right to certain protections and to contest such decisions.

California Privacy Rights: If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) (as amended by CPRA) and other state laws. These include the right to know, delete, correct, and opt-out of certain data practices. Please see the "California Privacy Rights" section below for more details specific to California. We extend similar rights to all U.S. users where applicable. GeoZilla does not "sell" your personal information as defined under CCPA (we don't exchange your data for money or other valuable consideration for others' independent use). We also do not share your personal information for cross-context behavioral advertising (as defined under CPRA). Sharing your data with Trustpilot for review invitations is considered a "business purpose" (service provision) under CCPA, not a sale or share. Therefore, while you always have the right to tell us not to disclose your information if you object, there is no need for a "Do Not Sell" opt-out for this activity since we do not sell data. We contractually ensure Trustpilot, as our Service Provider, cannot use your data except to send the review email and must delete it on request.

Exercising Your Rights: To exercise any of your rights, please contact us at support@geozilla.com with your request. We may need to verify your identity (for example, by confirming control of your account or asking for certain information) before fulfilling the request, to protect your privacy. We will respond within the timeframe required by applicable law (for example, within 30 days for most requests under GDPR, and within 45 days for CCPA requests, with the possibility of a 45-day extension). There is no charge for making a request, but repetitive or unfounded requests may be refused or may incur a fee as permitted by law.

We will confirm to you when your request has been completed. For deletion requests, we will specify what data (if any) we have retained due to legal exceptions. For access requests, we will provide the information in a portable format where applicable. If we cannot fulfill part of your request, we will explain the reason.

No Discrimination: We will not discriminate against you for exercising your privacy rights. For example, we will not deny you our services, give you a lesser experience, or charge you different prices simply because you exercised your rights. You can freely opt out of review invitations or marketing communications and still use GeoZilla normally – there is no penalty or change in service for doing so.

Security of Your Information

We take the security of your personal information seriously. We implement technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. These include:

• Encryption: We use encryption in transit for all data exchanges. For example, any data you send through the app or that we upload to Trustpilot for review invitations is protected by HTTPS/TLS encryption during transmission. Trustpilot also offers encryption for invitation content and employs strong encryption (e.g. AES-256) for data at rest on their servers.
• Access Controls: Within GeoZilla, personal data is accessible only by those employees, contractors, and service providers who need it to perform their duties. We restrict admin access to systems storing personal data.
• Security Testing and Updates: We regularly update our applications and backend systems to address security vulnerabilities. We use industry-standard security practices in development. Our cloud infrastructure providers (like AWS) maintain high security standards and certifications (such as ISO 27001 and SOC 2) and provide secure data centers.
• Anonymization: Where possible, we anonymize or pseudonymize data (replace identifying fields with codes) so that individuals are not identifiable unless necessary.
• Training and Policies: GeoZilla staff are trained on data privacy and security best practices. We have internal policies to handle personal data safely and to respond properly in the event of a security incident.

Despite these measures, no service can be 100% secure. We therefore also want you to know what we would do in the event of a data breach. If we experience a security breach that compromises your personal information, we will notify you and the appropriate authorities as required by law. This includes working with any processor to promptly address incidents on their side. DPA obligates them to notify us in case of a data breach on their end. Once notified, we would promptly assess the impact on GeoZilla users. If the breach poses a high risk to your rights and freedoms, we will inform you without undue delay, providing information on what happened and any steps you should take to protect yourself (for example, if email addresses were exposed, we might recommend being vigilant about phishing attempts). We also commit to taking any measures needed to mitigate the breach’s effects and prevent future occurrences.

Trustpilot Review Invitations

GeoZilla may submit a list of customer contact information (name, email, and a reference to your interaction with us) to Trustpilot, which will then send you an email on our behalf inviting you to rate and review GeoZilla. Trustpilot is a well-known online review platform. If you receive a Trustpilot invitation email from us, it is because you recently used GeoZilla and we would appreciate your feedback. Here's what to expect and how we protect your data in this process:

• Data Shared: we share only your name, email address, and a reference ID or date pertaining to your recent use of GeoZilla (for context) with Trustpilot. Trustpilot uses this data solely to send the review invite and to ensure the review, if you write one, is tied to a genuine experience. Trustpilot does not get your GeoZilla password, payment info, location data, or any other personal information from us.
• Trustpilot as Processor: Trustpilot acts as our data processor for these invitations. This means they are contractually bound to only process your data according to our instructions and for our purposes – which is sending the review invitation email (and possible one reminder) to you. Trustpilot will not use your information to market to you independently or share it with others. They also won't publish your email or personal info anywhere. If you choose to click the invitation and leave a review on Trustpilot, that review and your chosen display name will be public on Trustpilot's site (per Trustpilot's terms for reviewers), but that is entirely up to you.
• Lawful Basis & Consent: In jurisdictions where we can rely on legitimate interest to send you this single follow-up email, we do so, balancing our interest in feedback with your right to privacy. We believe this minimal, timely request (often shortly after you use our service) is non-intrusive and something many users expect. However, we respect all opt-outs – every Trustpilot invite email contains an unsubscribe link so you can decline further invitations. If you unsubscribe, we will add you to a suppression list and you will not receive future review requests. In some regions (for example, Germany), we will not send an invite without your explicit consent. If you are in one of those regions, we either obtained your consent or we excluded you from the campaign. We follow all country-specific e-communication laws (such as Europe's e-Privacy rules, Canada's CASL, and Australia's Spam Act) in sending these emails.
• Frequency: You will receive at most one review invitation per transaction (with possibly one reminder if you don't respond within a week). If you use GeoZilla regularly, we won't email you for every single session – typically, invites are sent after significant events (for example, after you've used the app for a certain time or after a meaningful interaction). We also avoid sending invites to the same user too often. Our goal is to gather genuine feedback, not to annoy anyone.
• Opt-Out and Preferences: If you prefer not to receive any review requests, you can opt out at any time. Options to opt out include clicking "unsubscribe" in an invitation email, contacting our support to request an opt-out, or adjusting your email preferences in your account settings (if available). We maintain an internal Do Not Contact list for review invites, and we honor all opt-out requests by suppressing your email from future Trustpilot uploads. Even if you continue using GeoZilla, we will exclude you from review invitation lists once you've opted out. This will not affect other communications (for example, you might still receive essential service emails or newsletters if you've subscribed to those, unless you opt out of those separately).
• Data Security & Deletion: We transfer your email to Trustpilot using a secure encrypted channel (never via plain email or insecure means). Trustpilot is a reputable platform that employs strong security measures. They will store your contact data for only as long as needed to send the invitation and record the status (e.g., whether you opened the email or opted out). Trustpilot's terms ensure that they delete or anonymize your personal data after completing the invitation process and any necessary retention period. If you have any concern, you can read Trustpilot's Privacy Policy (linked in the table above). If you exercise your right to deletion with GeoZilla, we will make sure to also remove your data from Trustpilot's systems (e.g., by contacting Trustpilot to delete any of your info that might remain in suppression or log files).
• Fair Invitation Practices: We send review invitations in an unbiased manner. This means we invite a broad cross-section of users.
• No Obligation: It's completely up to you whether to participate in the Trustpilot review. Declining or ignoring the invite will have no effect on your use of GeoZilla. We value your input, but there is absolutely no requirement or expectation that you leave a review. If you do choose to review us, positive or negative, we appreciate the feedback and will use it to improve. We won't resend an invite beyond a single gentle reminder. And as stated, you can opt out from even the one-off invitations altogether.
• Trustpilot Account: You do not need to create a Trustpilot account to write a review via the invitation link; Trustpilot's email will guide you through the process. If you've never used Trustpilot before, leaving a review will typically involve providing a display name and verifying your email. Your review will be subject to Trustpilot's user terms and content guidelines. If you have an existing Trustpilot profile, you can use that. GeoZilla does not control Trustpilot's website or how they handle any data you provide directly to them as a reviewer (for example, if you sign up on Trustpilot, your relationship with Trustpilot is governed by their privacy policy as a user of their platform). We only control the data we send to initiate the invite.
• Learn More: For more details on Trustpilot's practices, you can visit Trustpilot's own privacy and help pages. If you have any issues with a review invitation (say, you unsubscribe but still got one, or you suspect an invite might be fraudulent), please let us know. Trustpilot emails on our behalf should clearly indicate they are from GeoZilla/Trustpilot and include our branding and contact. Always be cautious of phishing – genuine Trustpilot invites for GeoZilla will not ask for sensitive information, just for a review. You can always contact our support to verify an email's authenticity.

California Privacy Rights

If you are a California resident, you have specific privacy rights under the California Consumer Privacy Act (CCPA) and subsequent amendments (like the CPRA). These include:

• Right to Know: You can request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the purpose for collecting or sharing the information, and the categories of third parties with whom we share it. In this Privacy Policy above, we describe the types of data we collect and for what purposes, as well as the categories of third-party service providers with whom we share data (see the Sharing section). For example, to summarize: in the past 12 months, GeoZilla may have collected identifiers (like name, email, phone), location information, internet or electronic activity data (app usage, device info), and inferences (e.g., preferences) from you, and disclosed certain identifiers (like email and name) to service providers for business purposes (e.g., to Trustpilot for sending a review invite, to payment processors for subscription handling, etc.). We do not sell your data to any third parties, and we do not share it for cross-context behavioral advertising, so those categories would be "none." If you send us a request, we will provide you with a report of your personal data and our uses/disclosures.
• Right to Delete: You can request that we delete personal information we have collected from you (subject to exceptions). As described above in Your Rights, upon verification of a deletion request we will delete your account data and instruct our service providers to do the same, unless an exception applies (e.g., we may retain transaction records needed for auditing or legal compliance).
• Right to Correct: You can request that we correct inaccurate personal information we hold about you. We will honor verifiable correction requests and, if applicable, direct our processors to correct their records as well.
• Right to Opt-Out of Sale/Sharing: GeoZilla does not sell your personal information, and does not share it for targeted advertising in a way that triggers the opt-out right. Therefore, we do not offer a "Do Not Sell or Share My Info" link, as it is not applicable. In the context of Trustpilot, as noted, sharing your info with Trustpilot is considered a transfer to a service provider for a business purpose, not a sale. If you ever have any questions about this or our status under CCPA, feel free to contact us. If our practices change, we will update this Policy and provide a proper opt-out method in compliance with the law.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. This means we won't deny you service, charge you a different price, or provide a different level of quality just because you made a privacy request. GeoZilla provides the same service and features to users regardless of whether they choose to review us, opt out of marketing, etc. (Of course, if you request deletion of your data necessary for the service, we won't be able to provide the service, but that's a consequence of your request, not a discriminatory action on our part.)

Submitting Requests (California): You or your authorized agent can submit requests to know, delete, or correct by contacting support@geozilla.com with the subject "CCPA Request" and specifying the nature of your request. We will need to verify your identity (or the authority of your agent) before processing the request, which may involve confirming information we already have on file (we will never ask for sensitive info like Social Security numbers just to verify). For deletion requests, we will again confirm with you that you want your data deleted (as an extra safety step). We aim to respond within 45 days. If we need more time (up to an additional 45 days, totaling 90 days), we will inform you of the reason and extension period.

For more details about our general data practices, please refer to the main sections of this Privacy Policy. This California section is meant to supplement the full Policy to ensure compliance with California law. If there is any conflict between this section and the rest of the Policy, this section shall apply only to residents of California and only to the extent of the conflict.

Cookie Policy

This Cookie Policy explains how GeoZilla uses cookies and similar technologies when you visit our website or use our services. It outlines what cookies are, what types we use, why we use them, and how you can manage your preferences.

By continuing to use our website, you agree to our use of cookies as described below, unless you opt out via your settings.

What Are Cookies?

Cookies are small text files placed on your device (computer, smartphone, tablet) when you visit a website. They help websites remember your device and how you interacted with it — making browsing more efficient and personalized.

Some cookies are first-party cookies (set by GeoZilla), while others are third-party cookies (set by service providers like Google or Meta).

Types of Cookies We Use

We use the following categories of cookies:

• Strictly Necessary Cookies

These cookies are essential for the basic operation of our website and services. They enable core features like account login, security, and fraud prevention.

• Performance & Analytics Cookies

These cookies help us understand how visitors use our site (e.g., which pages are visited most) by collecting anonymous data, so we can improve performance and usability.

• Targeting & Advertising Cookies

These cookies track your behavior across websites and devices to deliver personalized ads and content. They may also be used for campaign measurement and ad frequency control.

• Functionality Cookies

These cookies remember your preferences (e.g., language, support options) and help provide enhanced functionality.

Cookie Consent and Control

You can also manage cookies through your browser settings:

• Google Chrome: chrome://settings/cookies
• Safari: Preferences → Privacy
• Firefox: Options → Privacy & Security
• Edge: Settings → Site Permissions → Cookies

Note: Disabling cookies may impact your experience and limit certain features of the GeoZilla website.

Legal Basis for Use

We use cookies:

• On the basis of contractual necessity (for strictly necessary cookies)
• On the basis of your consent (for performance, targeting, and functionality cookies)
• In accordance with applicable data protection laws including GDPR, UK GDPR, ePrivacy Directive, CPRA, PIPEDA, and Australia's Privacy Act

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, our use of cookies or your data privacy rights please contact us at support@geozilla.com or via mail at:

GeoZilla Inc.
150 East Palmetto Park Road, Suite 800
Boca Raton, FL 33432, USA

We will be happy to assist you and will respond promptly. If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, you may also contact your local data protection authority (for EU/UK users) or file a complaint with relevant regulators.

Thank you for trusting GeoZilla. We value your privacy and are continuously working to protect it while improving our service.