Privacy Policy

Who We Are

GeoTag.com is operated by Dokotec OÜ, a company registered in Estonia (registered office: Sepapaja 6, 15551 Tallinn, Estonia). Dokotec OÜ is the data controller responsible for your personal data under the EU General Data Protection Regulation (GDPR). You can reach us any time at support@geotag.com.

What This Policy Covers

This policy covers the GeoTag service: this website, the app at app.geotag.com, and the GeoTag mobile apps. It applies to everyone who uses GeoTag, including free accounts, guest sessions, and people viewing content through a shared link.

Your Account

When you sign up we store your email address, a username, and a securely hashed password. If you sign in with Google, we receive your name, email address, and Google account ID instead of a password. We use this to operate your account and to send the emails the service needs — sign-up verification, password resets, and workspace invitations. We do not send marketing email.

Your Photos & Their Metadata

We store the photos and videos you upload, together with the metadata embedded in them (EXIF/IPTC data, including GPS coordinates, timestamps, and camera information), and the places, tags, and descriptions you create around them. Processing this data is the service you signed up for — organizing your photos by location is what GeoTag does. The legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR).

Billing

Payments are processed by Stripe. Your card details go directly to Stripe — we never see or store them. We keep a record of your customer and subscription status, and we retain invoices for seven years as required by Estonian accounting law.

Usage, Logs & Errors

Our servers keep standard technical logs (IP address, browser type, requested pages), and the app reports basic usage events and error details to our own infrastructure. We built this telemetry ourselves — no third-party analytics service is involved — and it is deleted after 60 days. The legal basis is our legitimate interest in keeping the service secure, reliable, and working (Art. 6(1)(f) GDPR).

Abuse Prevention

Sign-up and sign-in flows are protected by Google reCAPTCHA Enterprise to keep bots out. Google processes this data on our behalf as our processor.

What We Don't Do

We do not sell or rent your personal data. We do not show ads. We do not use advertising trackers or third-party analytics. We do not use your photos for anything other than providing the service to you — including not using them to train AI models.

What We Do With It

When you upload a photo, we read the GPS coordinates embedded in its metadata, store them, and use them to place the photo on your map. You can view, edit, add, or remove location data on your photos at any time in the app.

When Location Data Is Visible to Others

Location data stays private to you and your workspace by default. It becomes visible to others only when you choose to share: workspace members you invite can see content according to their permissions, anyone who has a share link can see the shared photos and their locations, and files you export (for example KMZ files) contain coordinates. Think before sharing links to photos of sensitive locations, such as your home.

Your Control

Deleting a photo or place also deletes its stored location data. Revoking a share link immediately stops further access through it.

Service Providers

We rely on a small number of providers to run GeoTag, each processing data only as needed to provide their service to us and each bound by a data processing agreement:

• Google Cloud Platform — hosting, storage, and content delivery
• Stripe — payment processing
• Amazon Web Services (SES) — transactional email delivery
• Google Maps Platform — map display and place search. Use of the maps in our app is also subject to the Google Privacy Policy
• Google Firebase — mobile app infrastructure and crash reporting
• Google reCAPTCHA Enterprise — abuse prevention

International Transfers

We are an EU company, and some of our providers process data in the United States. Those transfers rely on the EU–US Data Privacy Framework, under which each of our US providers is certified, with Standard Contractual Clauses in place as a fallback.

Retention & Deletion

We keep your data for as long as your account is active. When you delete content, or your whole account, it is removed from our live systems within 30 days, and any copies in backups expire within 90 days. Server logs and usage telemetry are deleted after 60 days. Invoices are kept for seven years because Estonian accounting law requires it.

Security

Your data is encrypted in transit and at rest, and access to production systems is restricted and logged. No system is perfectly secure — if you believe you have found a security issue, please tell us at support@geotag.com.

Cookies

We use only strictly necessary cookies — the ones that keep you signed in. There are no advertising or analytics cookies, which is why you don't see a cookie banner.

Access, Correction, Export & Deletion

Under the GDPR you have the right to access, correct, export, and delete your personal data, to restrict or object to processing, and to data portability. We extend these rights to all users, wherever you live. You can manage your content and account directly in the app; for anything else, email support@geotag.com and we will respond within 30 days.

Complaints

If you are unhappy with how we handle your data, please contact us first — we take this seriously. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, Tatari 39, 10134 Tallinn, Estonia, aki.ee) or with your local EU supervisory authority.

Children

GeoTag is not directed at children. You must be at least 16 to use it, and we do not knowingly collect data from anyone younger. If you believe a child has created an account, contact us and we will delete it.

Changes & Contact

When we change this policy we will post the new version here and update the date at the top; for material changes we will notify you by email or in the app. Questions? Contact Dokotec OÜ, Sepapaja 6, 15551 Tallinn, Estonia, at support@geotag.com.