Privacy Policy

2. Information We Collect

2.1 Information You Provide Directly

• • Account Information: Name, email address, password, and optional profile information
• • Payment Information: Credit card details, billing address (processed securely through third-party payment processors)
• • User Content: Images you upload for geolocation analysis and any contextual information you provide
• • Communications: Messages you send to our support team or feedback you provide

2.2 Information Collected Automatically

• • Usage Data: Pages visited, features used, analysis requests made, and interaction patterns
• • Device Information: IP address, browser type and version, operating system, device identifiers
• • Log Data: Access times, error logs, and system activity
• • Cookies and Similar Technologies: Session data, preferences, and analytics identifiers
• • Performance Metrics: Response times, processing duration, and service reliability data

2.3 Information from Third Parties

• • Authentication Providers: Basic profile information when you sign in using Google OAuth
• • Payment Processors: Transaction confirmation and payment status
• • Analytics Providers: Aggregated usage statistics and demographic information

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Provision and Improvement

• • Process and analyze uploaded images to provide geolocation results
• • Maintain, operate, and improve the Service functionality and performance
• • Develop new features and enhance user experience
• • Provide customer support and respond to inquiries
• • Troubleshoot technical issues and optimize system performance

3.2 AI Model Training and Development

• • Train and improve our AI geolocation models using anonymized and aggregated data only
• • Enhance accuracy and reliability of location predictions
• • Research and develop new machine learning techniques
• • Important: Individual images are never used for training without explicit anonymization and removal of personally identifiable information

3.3 Communications

• • Send service-related notifications and updates
• • Provide technical notices, security alerts, and support messages
• • Send marketing communications (with your consent, where required by law)
• • Respond to your requests, questions, and feedback

3.4 Business Operations

• • Process payments and maintain billing records
• • Detect, prevent, and address fraud and security issues
• • Enforce our Terms of Service and other policies
• • Comply with legal obligations and respond to lawful requests
• • Protect our rights, property, and safety, as well as those of our users

3.5 Analytics and Research

• • Analyze usage patterns and user demographics
• • Conduct research to improve our services and develop new products
• • Generate aggregated, non-personally identifiable statistics

4. Data Sharing and Disclosure

We never sell your personal information to third parties. We may share your information only in the following circumstances:

• • Service Providers: Third-party vendors who perform services on our behalf (cloud hosting, payment processing, analytics) under strict confidentiality obligations
• • Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, where data may be transferred to the acquiring entity
• • Legal Requirements: When required by law, court order, or governmental regulation, or to protect our legal rights
• • Safety and Security: To protect the safety, rights, or property of our users or the public
• • With Your Consent: When you explicitly authorize us to share specific information
• • Aggregated Data: Non-personally identifiable, aggregated, or anonymized data for research, analysis, or marketing purposes

5. Data Security

We implement comprehensive security measures to protect your data:

• • Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.3 or higher
• • Encryption at Rest: Uploaded images and sensitive data are encrypted using AES-256 encryption
• • Access Controls: Strict role-based access controls limiting employee access to personal data
• • Authentication: Multi-factor authentication for administrative access
• • Monitoring: Continuous security monitoring and intrusion detection systems
• • Security Audits: Regular third-party security assessments and penetration testing
• • Incident Response: Established procedures for detecting and responding to security breaches

While we implement industry-standard security measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but continuously work to enhance our security practices.

6. Data Retention

We retain your data for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy:

• • Uploaded Images: Automatically and permanently deleted 30 days after upload
• • Analysis Results: Retained for 90 days or until you delete them, whichever comes first
• • Account Information: Retained while your account is active and for a reasonable period thereafter to comply with legal obligations
• • Transaction Records: Retained for 7 years as required by financial regulations
• • Log Data: Retained for 12 months for security and troubleshooting purposes
• • Anonymized Data: May be retained indefinitely for research and analysis

Upon account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, financial records).

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 Access and Portability

• • Request access to the personal information we hold about you
• • Receive a copy of your data in a structured, machine-readable format
• • Transfer your data to another service provider

7.2 Correction and Updates

• • Correct inaccurate or incomplete personal information
• • Update your account information through account settings

7.3 Deletion and Erasure

• • Request deletion of your personal information (right to be forgotten)
• • Delete your account and associated data
• • Request deletion of specific analysis results or uploaded images

7.4 Objection and Restriction

• • Object to processing of your personal information for certain purposes
• • Restrict processing in certain circumstances
• • Opt-out of marketing communications at any time

7.5 Withdraw Consent

• • Withdraw consent for data processing based on consent (where applicable)
• • Note: Withdrawal does not affect the lawfulness of processing before withdrawal

To exercise these rights, please contact us at support@quesx.com. We will respond to your request within 30 days. You may also have the right to lodge a complaint with a data protection authority.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

• • Essential Cookies: Required for basic Service functionality (authentication, security)
• • Functional Cookies: Remember your preferences and settings
• • Analytics Cookies: Help us understand how users interact with the Service
• • Marketing Cookies: Used to deliver relevant advertisements (with your consent)

You can control cookies through your browser settings. However, disabling certain cookies may limit Service functionality.

9. International Data Transfers

GeoSeer is operated from China. If you are accessing the Service from outside China, please be aware that your information may be transferred to, stored, and processed in China and other countries where our servers and service providers are located. These countries may have different data protection laws than your country of residence. By using the Service, you consent to the transfer of your information to China and other countries as necessary to provide the Service. We implement appropriate safeguards to protect your information in accordance with this Privacy Policy and applicable laws.

10. Children's Privacy

The Service is not directed to children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information promptly.

11. Third-Party Links and Services

The Service may contain links to third-party websites, applications, or services (e.g., Google authentication, Mapbox, payment processors). This Privacy Policy does not apply to these third-party services. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you access through the Service.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• • Right to know what personal information is collected, used, shared, or sold
• • Right to delete personal information held by us
• • Right to opt-out of the sale of personal information (we do not sell personal information)
• • Right to non-discrimination for exercising your CCPA rights
• • Right to request disclosure of information collected in the past 12 months

13. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

• • Legal basis for processing: Contract performance, legitimate interests, consent, or legal obligations
• • Right to lodge complaints with your local data protection authority
• • Right to object to processing based on legitimate interests
• • Right to restrict processing in certain circumstances

Data Controller: Shenzhen Ques Technology Co., Ltd.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of material changes by posting the updated Privacy Policy on the Service and updating the "Last updated" date at the top of this page. For significant changes, we will provide additional notice (such as email notification or a prominent notice on our website) at least 30 days before the changes take effect. Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• • Email: support@quesx.com
• • Company: Shenzhen Ques Technology Co., Ltd.
• • Website: quesx.com

We will respond to your inquiry within 30 days or as required by applicable law.