Calculations run in your browser and your project data stays on your device: it is not sent to us. We do not use advertising or tracking cookies and we do not sell personal data. We receive the visit data that any website host receives, the messages you send us and, if you sign in with Google or buy a plan, the details that those steps need. This page explains each of them.
1. Who is responsible for your data
The controller of the personal data described here is GeoTerva (geoterva.com) ("GeoTerva", "we", "us"), the operator of geoterva.com, the GeoTerva web application and the GeoTerva mobile apps. You can reach us at info@geoterva.com.
GeoTerva (geoterva.com) is operated by an engineer based in Türkiye. The operator's legal name, address and tax details are published on this page before paid plans open. Contact: info@geoterva.com.
We have not appointed a data protection officer. We have not designated a representative in the European Union or the United Kingdom; if the law requires one for our activity, we will name them here.
2. What we handle, why, and on what basis
| When | What | Why | Basis |
|---|---|---|---|
| You visit the website | IP address, the page requested, date and time, browser and device type, approximate country. These are recorded by our hosting provider as part of delivering the site. | To deliver the site, keep it secure and prevent abuse. | Legitimate interests (security and operation of the Service). |
| Aggregate statistics | Page views, referring page, page-load timings, approximate country, device and browser type, collected by Cloudflare Web Analytics. According to Cloudflare, this does not use cookies or local storage and does not track you across sites. | To see how the site is used and how fast it is. | Legitimate interests (improving the Service). |
| Your work in the modules | Inputs, ground profiles, report details (project name, company, logo, picture) and preferences such as units and display options. | So that the module works and your settings are there when you return. | Not sent to us: this stays in your browser's storage on your device (see section 4). |
| Your account (preview) | Username, optional e-mail address, display name, chosen plan and a salted hash of the password. | To sign you in and apply your plan. | Not sent to us: this stays in the browser where you created the account. |
| You choose "Continue with Google" | Your name, e-mail address and Google account identifier, sent by Google after you agree on Google's page. They pass through our server (a Cloudflare Worker) for a moment so that Google's reply can be checked; they are then kept in your browser. We do not store them on our servers. | To sign you in without a password. | Your request (performing the agreement with you). |
| You write to us | Your name (optional), e-mail address, the topic and your message. | To answer you and keep a record of the exchange. | Legitimate interests; steps at your request before a contract. |
| You buy a plan (when purchases open) | Billing name, e-mail address, billing address and country, tax number (for businesses), plan, payment status and invoices. Your card details are entered with the payment provider; we do not see or store them. | To sell and deliver the plan, issue invoices, meet tax and accounting duties, prevent fraud and give support. | Contract; legal obligations (tax and accounting laws); legitimate interests. |
| Service e-mails | Receipts, renewal reminders, security and account notices. | To run your subscription. | Contract; legal obligations. We send no marketing e-mail unless you ask for it. |
3. Your project data
The calculations are done by code that runs in your browser. The inputs you type, the ground profiles you build and the reports you prepare are not uploaded to us. If we ever add a feature that stores your work on our servers, it will be optional, we will tell you before it starts, and we will update this policy first.
5. Who receives data
- Cloudflare, Inc. (United States) hosts and protects the website, provides the domain name service and e-mail routing, and measures aggregate statistics. It processes visit data on our behalf.
- Google. If you choose "Continue with Google", Google acts for itself as the provider of your Google account, under its own privacy policy. Messages you send us arrive in a mailbox that Google hosts.
- The payment provider named at checkout (when purchases open) takes your payment. Depending on the provider it may be the seller of record and a controller of the data it needs for that sale, under its own privacy notice.
- Our advisers (for example accountants and lawyers), and authorities where the law requires us to disclose something.
We do not sell personal data and we do not share it for advertising.
6. Transfers to other countries
Our providers work in several countries, including the United States and the European Economic Area, so data may leave Türkiye or the country where you live. Where the law requires safeguards for such a transfer, we use those it provides, for example standard contractual clauses or an adequacy decision.
7. How long we keep data
| Data | How long |
|---|---|
| Visit logs and aggregate statistics | As long as our hosting provider keeps them under its own settings; we keep no copy of our own. |
| Your messages to us and our replies | While we deal with the matter and up to 24 months after the last message, unless we need them longer to establish, exercise or defend a legal claim. |
| Orders, invoices and payment records | As long as tax, commercial and accounting law require (in Türkiye, up to ten years). |
| Data kept in your browser | Until you clear it. You are in control of it. |
When a retention period ends we delete the data or make it anonymous.
8. Your rights
You can ask us to tell you whether we handle your personal data and to give you a copy; to correct it; to delete it; to restrict or stop using it; to give it to you in a portable form; and you can object to uses based on our legitimate interests. Where we rely on your consent you can withdraw it at any time. People in Türkiye have the rights in Article 11 of Law No. 6698; people in the European Economic Area and the United Kingdom have the rights in the GDPR and the UK GDPR; people in California can ask to know, delete and correct, and we do not sell or share personal information.
To use a right, write to info@geoterva.com from the e-mail address your account or your messages used, and say what you want. We may ask you to confirm who you are. We answer within 30 days, free of charge unless the request needs a disproportionate effort. We hold little data, and most of what is yours is in your own browser: clear that browser's site data to remove it.
9. Security
The website is served over HTTPS only. We keep the data we hold to what the Service needs, we do not store card numbers, accounts in the preview keep passwords only as salted hashes in your own browser, and access to the contact mailbox is limited to the people who answer you. If a breach of personal data affects you, we will tell you and the authority as the law requires.
10. Children
The Service is for adults and professionals; it is not meant for anyone under 18. If we learn that we hold personal data of a child without the consent of a guardian, we delete it.
11. Changes
When this policy changes we publish the new version here with its date, and we tell account holders by e-mail if the change is important for them.
12. Questions and complaints
Write to info@geoterva.com. You may also complain to a data protection authority: in Türkiye the Personal Data Protection Authority (kvkk.gov.tr); in the European Economic Area the authority of the country where you live or work; in the United Kingdom the Information Commissioner's Office.
This document applies to geoterva.com. Questions: info@geoterva.com.