Legal
Data Retention Policy
Effective date: August 18, 2026 · Version 1.0
1. Purpose
This Data Retention Policy describes how long GeoScript, Inc. ("GeoScript") retains different categories of data it collects and processes, the legal basis for each retention period, and what happens to data when retention periods expire or when a customer cancels their account.
This policy supplements the data handling practices described in our Privacy Policy, Data Policy, and Data Processing Agreement. In the event of any conflict, the terms of GeoScript's Terms of Service govern.
2. The Critical Distinction: Signal Data vs. Customer Data
Understanding this distinction is essential to understanding GeoScript's retention practices:
Signal Data — GeoScript Owned
Visitor behavioral data collected by the GeoScript tracking Script — including AI referral sessions, engine attribution, query intent signals, and page-level engagement data — is irrevocably assigned to GeoScript upon Script installation (ToS §6.1). Signal Data is not Customer Data. It is GeoScript's proprietary dataset. It is retained indefinitely as part of GeoScript's AI search behavior dataset, regardless of whether the customer cancels their account.
Customer Data — Customer Owned
Data the customer creates, uploads, or configures in the GeoScript platform — including client lists, business locations, dashboard configurations, and account profiles — is Customer Data. GeoScript processes it only on the customer's behalf. It is deleted within 60 days of account cancellation.
3. Retention Schedule
The following table summarizes GeoScript's data retention periods by data category:
Account & Profile Data
Name, email, company, billing address
Signal Data (visitor behavioral data collected by the Script)
AI referral sessions, engine attribution, query intent, page signals
Customer Data (content uploaded or configured by customer)
Agency client lists, configured business locations, dashboard notes
Aggregated & Anonymized Analytics
Platform-wide benchmarks, industry averages, city-level aggregate scores
Billing & Transaction Records
Payment amounts, invoice dates, Stripe transaction IDs, chargeback records
Authentication & Security Logs
Login timestamps, IP addresses, MFA events, session tokens
Support & Communications
Support tickets, email threads, chat transcripts
Contractor & Rep Records
1099 contractor agreements, W-9/W-8BEN forms, commission records
Marketing & Lead Data (website visitors who did not convert)
Checker tool inputs (business name, city), email opt-ins, waitlist entries
Backup Copies
Database snapshots, disaster recovery backups
4. What Happens When You Cancel
When a GeoScript account is cancelled or terminated:
- 1.Account access ends immediately. Upon cancellation, access to the GeoScript platform dashboard is revoked at the end of the current billing period.
- 2.Customer Data export window. Customers should export all Customer Data (client lists, reports, configurations) before cancellation. An export window of up to 30 days after cancellation may be available upon request by contacting hello@geoscript.ai.
- 3.Customer Data deletion. Account profiles, customer-uploaded data, and dashboard configurations are deleted from production systems within 60 days of account termination. Deletion from backup copies occurs within 30 days following the next backup rotation cycle.
- 4.Signal Data is retained. Visitor behavioral data (Signal Data) collected by the Script during the customer's subscription is retained by GeoScript as part of its proprietary dataset. This is a condition of the Terms of Service and is not deleted upon cancellation.
- 5.Billing records are retained. Transaction records, invoices, and tax documents are retained for 7 years in accordance with applicable law, regardless of account status.
5. Data Subject Deletion Requests
Individuals with data subject rights under GDPR (Articles 17–18) or CCPA may request deletion of their personal data. GeoScript will process deletion requests within 30 calendar days of receipt.
The following categories of data cannot be deleted in response to a data subject request:
- —Signal Data (visitor behavioral data) — GeoScript is the controller and data owner. Signal Data is fully anonymized and aggregated before inclusion in the dataset; individual-level deletion is not technically applicable.
- —Billing and transaction records retained under legal obligation (7-year financial record requirements)
- —Data subject to an active legal hold, litigation, or regulatory investigation
- —Anonymized or aggregated data from which individual identity cannot reasonably be re-established
To submit a deletion request, email privacy@geoscript.ai with the subject line "Data Deletion Request" and include your full name, email address associated with your account, and a description of the data you are requesting be deleted. GeoScript will acknowledge requests within 72 hours and complete processing within 30 days.
6. Legal Holds and Extended Retention
Notwithstanding any retention period set out in Section 3, GeoScript may retain data beyond the standard retention period when:
- —The data is subject to a legal hold, litigation, arbitration, regulatory investigation, or government inquiry
- —Applicable law or regulation requires extended retention
- —GeoScript's legal counsel has advised that retention is necessary to protect GeoScript's legal interests
- —A data subject or customer has raised a dispute that has not been resolved
Legal holds are lifted as soon as the underlying reason for extended retention no longer exists, and the relevant data is then processed in accordance with its standard retention period.
7. Backup Retention and Rotation
GeoScript maintains automated database backups for disaster recovery and business continuity purposes. Backups are retained on a rolling 30-day cycle. When data is deleted from production systems, it will be purged from backup copies within 30 days following the next backup rotation.
GeoScript does not access backup copies for purposes other than disaster recovery, unless required by law or with the customer's explicit written consent.
8. Policy Updates
GeoScript reviews and updates this Data Retention Policy at least annually and whenever applicable law or data processing practices change in a material way. Material changes will be announced by updating the "Effective date" at the top of this page. GeoScript will provide 30 days' notice of material changes via email or prominent notice on the Site. Continued use of the Services after the effective date of any revision constitutes acceptance of the revised policy.
9. Contact
Questions about this Data Retention Policy or GeoScript's data practices may be directed to:
Related Documents