1. Who we are

Geiger Studios (“Geiger”, “we”, “us”, or “our”) operates geiger.studio and the connected Geiger products, including Notes, Flow, Assets, Forms, Events, Office, Content, Campaign, Grey, and Docs. For privacy questions or requests, contact info@geiger.studio.

2. Scope

This policy applies when you visit our public websites, create or use a Geiger account, use our hosted products, contact us, or otherwise interact with the services. It does not govern third-party websites or services that have their own privacy policies.

3. Data we process

• Account data: email address, display name, profile image, authentication identifiers, preferences, and account settings.
• Workspace content: notes, boards, projects, documents, forms, messages, uploaded files, metadata, comments, and other material you choose to store or share through Geiger.
• Usage and device data: pages viewed, product and tool actions, referral information, browser type, device type, approximate region, timestamps, diagnostics, and security logs.
• Communications: information included in support, privacy, sales, or other messages you send to us.
• Transaction data: plan, billing status, and payment references when paid services are offered. Payment card details are processed by the payment provider and are not intended to be stored by Geiger.

4. Browser-based image tools

The public image crop, resize, compression, and conversion tools process selected images locally in your browser. Geiger does not upload the image contents or filenames for these operations. We may record privacy-reduced events such as the tool used, broad file-size range, input type, output format, completion, and download actions.

5. How and why we use data

• Provide, maintain, secure, and troubleshoot the services.
• Authenticate users and preserve account and workspace settings.
• Process files and content at your direction.
• Measure product usage and improve usability and performance.
• Respond to requests and send service-related communications.
• Prevent fraud, abuse, security incidents, and unlawful activity.
• Comply with legal obligations and enforce our agreements.

Depending on applicable law, we process data to perform our contract with you, with your consent, to meet legal obligations, and for legitimate interests such as operating and securing the services.

6. Analytics and cookies

We use PostHog for limited product and traffic measurement across the site and the signed-in app. Our PostHog configuration is cookieless, does not persist a PostHog identifier in cookies or browser storage, disables autocapture and session recording, and does not intentionally send image contents, filenames, form values, or account identity with its events. PostHog requests are relayed through our own domain.

On our public marketing pages (not the signed-in app) we also use Google Analytics 4 to understand traffic sources and page performance. Google Analytics sets first-party cookies (such as _ga) to distinguish visits and processes your IP address and device information to derive approximate location. You can opt out with Google's browser add-on or by blocking cookies in your browser. Authentication and security features may still use strictly necessary cookies.

7. Service providers and disclosures

We use service providers to host and operate Geiger. These currently include Vercel for hosting and delivery, Supabase for authentication and data services, PostHog for privacy-reduced analytics, Google for website analytics on public pages, Vercel Blob or connected storage providers for files, and communication or payment providers when those features are used. They process data under their own terms and our instructions where applicable.

We may also disclose data when required by law, to protect users or the services, in connection with a business reorganization, or when you direct or consent to the disclosure. We do not sell personal data.

8. International processing

Geiger and its providers may process data in countries other than your own. Where required, we use contractual, organizational, or other lawful safeguards for international transfers.

9. Retention

We retain account and workspace data while your account is active and for a reasonable period afterward where needed for recovery, security, dispute resolution, or legal compliance. Retention varies by data type, product configuration, and legal requirement. Backups may persist for a limited period before being overwritten. We delete or de-identify data when it is no longer reasonably required.

10. Security

We use reasonable technical and organizational measures designed to protect data. No online service can guarantee absolute security. You are responsible for safeguarding your credentials and for configuring sharing and access controls appropriately.

11. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal data, withdraw consent, nominate another person, or complain to a regulator. You may also update certain account information directly in the product.

Send requests to info@geiger.studio. We may need to verify your identity and may retain limited information about the request. We aim to acknowledge privacy and grievance requests within seven days and respond within the period required by applicable law.

12. Children

Geiger is not directed to children. You must be at least 18 years old to create an account unless an authorized organization has arranged lawful use with the required parent or guardian involvement. If you believe a child provided personal data unlawfully, contact us.

13. Changes to this policy

We may update this policy as the services or legal requirements change. We will publish the revised version with a new “Last updated” date and provide additional notice where required.