Privacy, in plain language.

Validation-test privacy notice

Version: 23 July 2026

Controller

What RedGeo processes

When you open this page, RedGeo and its hosting provider process the technical request data needed to deliver and secure it. Vercel Web Analytics records an anonymous page view without cookies and creates a daily request hash that is discarded after 24 hours. RedGeo receives only aggregate reports that cannot be tied to a named person or an IP address.

If you join priority access while storage is enabled, RedGeo stores your work email, product website, the fact that you clicked the US$39/month trial offer, CTA location, and campaign attribution. The work email and website are required to process the request. The current form offers no research-call opt-in and stores no research-call consent. No card or payment data is requested.

The Google Ads tag is blocked until you select Allow measurement. After consent, it may process technical request data, the page URL and Google ad-click identifiers and may set first-party cookies beginning with _gcl_ for campaign attribution. A consented page view and configured funnel milestones may be reported with a random session or submission identifier. These milestones can include demo completion, pricing reach, trial-offer CTA and form progress, checker use, successful waitlist or contact requests, and a successfully stored priority-access request. RedGeo does not send the email address, product website, contact message, other form contents, or enhanced-conversion data to Google.

A separate future AI Visibility Checker waitlist is disabled for the first paid test round. If RedGeo enables it in a later, separately approved experiment, the page will state before the first website field that the checker is not live and no analysis runs. Entering a website will not fetch that website, contact an AI provider, or produce a result. Only an explicit request for one availability email followed by an email submission while storage is enabled will create a waitlist row.

The checker waitlist is separate from the trial-offer and priority-access funnel. Joining it is not a priority-access request, purchase-intent signal, research-call choice, account registration, or consent to general marketing.

For abuse protection, the endpoint converts the platform-provided network address into a one-way, keyed rate-limit value. RedGeo does not write the raw address to its validation tables. RedGeo does not send form contents to advertising platforms. The optional Google Ads tag, if enabled, remains completely blocked until consent and is configured without enhanced conversions, remarketing, personalized advertising, or pre-consent page-view events.

Purposes and legal bases

• To process the priority-access request and contact you when the offer becomes available, as a step requested before a possible B2B contract (Article 6(1)(b) GDPR).
• To keep the public test reliable, deliver the page, and prevent abuse, on the basis of RedGeo's legitimate interests in operating and securing the service (Article 6(1)(f) GDPR). This basis is not used to store optional page-behaviour analytics.
• To evaluate aggregate demand for the proposed pilot with Vercel Web Analytics. Vercel describes these page views and property-free custom events as anonymous, cookieless statistics that are not associated with a person or IP address. To the extent a legal basis is required, RedGeo relies on its legitimate interest in validating a new B2B service with the least intrusive practical measurement (Article 6(1)(f) GDPR).
• To measure consented page behaviour, campaign performance and usability only after your active choice (consent under Article 6(1)(a) GDPR and section 165(3) Austrian TKG 2021). You may withdraw as easily as you gave consent, without affecting earlier lawful processing.
• To attribute paid Google Ads traffic, consented funnel milestones and successful requests only after your active choice (consent under Article 6(1)(a) GDPR and section 165(3) Austrian TKG 2021). Google Ads personalization, remarketing and enhanced conversions are disabled.
• If a later form separately offers an optional research-call checkbox, to arrange that call only after you select it (consent under Article 6(1)(a) GDPR). The current form does not offer this option.
• To send one availability email about the AI Visibility Checker only when you separately ask for it (consent under Article 6(1)(a) GDPR). You may withdraw that consent at any time before the email is sent, without affecting earlier processing.

Service providers and international transfers

Vercel Inc. hosts and delivers the website. Its data-processing addendum describes Vercel as processor for customer data and separate controller processing for service-generated and account contact data. Vercel states that its primary processing facilities are in the United States and incorporates the EU Standard Contractual Clauses for covered transfers. RedGeo uses a commercial Vercel plan covered by that addendum. Vercel Web Analytics is configured without custom properties and provides the anonymous aggregate page-view and interest-event reports described below.

Supabase Pte. Ltd. provides the validation database, configured by RedGeo in an EU region. Before storage is enabled, RedGeo completes the binding Supabase data-processing addendum and records the selected region, current subprocessors, and applicable EU Standard Contractual Clauses for any covered transfer.

Google LLC provides Google Ads campaign and conversion measurement after consent. Google may process technical request data, page and click information, cookie identifiers, the event type and the random session or submission transaction ID under its own roles and applicable Google Ads data protection terms. Google may process data outside the EEA and describes the EU-U.S. Data Privacy Framework and Standard Contractual Clauses as transfer safeguards. Read Google's privacy policy, cookie information and international-transfer information.

You may request a copy of, or information about, the safeguards that apply to your data by using the contact form or emailing kontakt@redgeo.app. RedGeo does not sell validation data and does not create a general marketing list from either form.

Retention and security

Vercel discards the daily visitor-identification hash after 24 hours and makes anonymous aggregate Web Analytics reports available under the current Vercel plan's reporting window. Separate consented raw behaviour events, if that optional feature is enabled and allowed, are deleted after 30 days. A withdrawal through Privacy settings immediately removes behaviour events linked to that consent. Minimal consent evidence is retained until three years after withdrawal or expiry so RedGeo can demonstrate the choice. If Google Ads measurement is enabled, Google states that _gcl_* conversion-measurement cookies last for 90 days; Google's own retention rules apply to data it receives. Pilot leads that do not convert are deleted after 180 days; converted validation leads are deleted from the validation tables after 365 days. AI Visibility Checker waitlist entries, containing the opted-in email address and website, are deleted 180 days after submission. Expired rate-limit values are removed by the daily cleanup. Access is limited to people who need it to operate this validation test.

When the status at the top says pilot storage is disabled, RedGeo stores no pilot lead. This does not disable the anonymous aggregate Vercel Web Analytics measurement described here. The separate, pseudonymous raw behaviour-event store remains off unless the page offers and you grant the explicit optional analytics choice. Hosting providers may still process ordinary technical request logs to deliver and protect the service under their documented retention controls.

No automated decisions

RedGeo does not use this validation data to make decisions that produce legal or similarly significant effects. Campaign and form results are reviewed by a person before any pilot invitation is made.

Anonymous aggregate demand measurement

RedGeo uses Vercel Web Analytics for a small, cookieless fake-door measurement. It records page views, one fixed event when the trial CTA opens the disclosure dialog, and no custom event properties. Contact details, typed text, advertising identifiers, and cross-site profiles are not sent to Vercel Web Analytics. The CTA click is the aggregate purchase-intent signal.

Vercel states that these data points are anonymous and shown only as aggregate statistics. A request-derived visitor hash is valid for one day and cannot be used to follow a visitor across days or websites. RedGeo uses the totals to compare paid link clicks with dialog opens. This measurement is separate from a submitted priority-access request and the optional detailed analytics below; the analytics event itself does not create an account, lead, trial, payment, or marketing contact.

Optional website and Google Ads measurement

Optional measurement is off by default. RedGeo sends no detailed behaviour event and does not load the Google Ads tag before you select Allow measurement, after you select Necessary only, or after you withdraw. Accept and reject are offered on the same layer. You can reopen the choice at any time with the Privacy settings control on this page or in the landing-page footer.

If you allow analytics, RedGeo stores a pseudonymous consent identifier, the consent-text version and time, the RedGeo page where you made the choice, a random page-session identifier, event order, test variant, campaign fields, referring domain, and only the allowlisted events below. The consent identifier lets RedGeo prove the choice and delete all linked behaviour events when you withdraw. It is first-party and is not used across other websites or connected to an email address, priority-access request, Clerk account, advertising profile, or device fingerprint. Identified form submissions use a separate submission identifier.

The same choice permits the Google Ads tag AW-18333033988 to attribute an ad click and, once the corresponding conversion actions are configured, a consented page view and the funnel milestones listed below. Google receives only the event type and a random session or submission transaction ID. RedGeo deliberately disables pre-consent measurement, ad personalization signals, remarketing and enhanced conversions.

Page and sections

Landing-page view; hero, workflow, checker, product-preview, pricing, FAQ and footer reach after the section remains sufficiently visible.

Interactions

Named navigation, CTA, dialog, demo and FAQ actions; form progress, validation field/error categories, and request failures. No email address, website, or free-text value is included.

Google Ads funnel milestones

Consented page view; completed demo; pricing reach; first trial-offer CTA; priority-access form start; valid checker submission; and a successfully stored waitlist, contact, or priority-access request. Repeat calls use the same random transaction ID so Google Ads can deduplicate them. No entered field value is attached.

Engagement

Scroll milestones at 25, 50, 75 and 90 percent plus a coarse active time bucket, maximum scroll bucket and last visible section when the page is left.

Never collected

Email addresses, website entries, free text, keystrokes, passwords, mouse paths, click coordinates, DOM or screen recordings, clipboard data, raw IP addresses, browser fingerprints or cross-site activity in RedGeo's first-party behaviour-event store. If enabled, Google Ads may process ad-click and cookie identifiers after consent as described above.

Cookies and choice record

The first-party, HttpOnly cookie redgeo_analytics_consentrecords the choice, consent version and time for 180 days. When analytics is allowed it also contains a signed random consent identifier. The cookie is used only to remember and enforce the privacy choice; it is marked SameSite=Lax and Secure on production. If enabled and allowed, Google Ads may set separate first-party _gcl_*campaign-measurement cookies.

AI Visibility Checker availability waitlist

This separate waitlist is not offered in Round 1. If it is enabled in a later test, the checker will still not be live and submitting a website will not run an analysis. If you opt in while storage is enabled, RedGeo uses the submitted email address and website only to send one email when the checker becomes available. RedGeo does not use this waitlist to send pilot, pricing, research, newsletter, or other marketing messages.

You can withdraw the availability-notification consent or request deletion at any time before the message is sent by using the contact form or emailing kontakt@redgeo.app. RedGeo will delete the matching waitlist entry and will not send the availability email. Waitlist entries are otherwise deleted 180 days after submission.

Contact messages

If you use the website contact form, RedGeo processes the name you choose to provide, your email address, the message text, a random submission identifier, and basic technical request data needed to deliver and protect the form. The name is optional; the email address and message are required so RedGeo can respond.

RedGeo processes these details to answer your request and take steps you ask for before a possible B2B contract (Article 6(1)(b) GDPR), or on the basis of its legitimate interests in handling ordinary business correspondence and protecting the form from abuse (Article 6(1)(f) GDPR), depending on the request.

Vercel hosts the form and Resend transmits the message to RedGeo's contact inbox as service providers. Resend's data-processing addendum states that its primary processing operations are in the United States and its data-processing addendum includes the EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework where applicable. IONOS SE provides the Mail Basic inbox and processes the delivered message for RedGeo as a processor under the IONOS data processing agreement (AVV). For contact messages, IONOS processes sender and recipient details, the subject, message content, attachments if any, the domain, and necessary delivery and log data to receive, send, store, filter, and display email. The AVV states that contracted processing takes place in the EU or EEA unless a service requires a third-country transfer; in that case IONOS must ensure the safeguards required by Articles 44 et seq. GDPR. IONOS makes its current subprocessor information available through the customer portal. See the IONOS privacy notice. Ordinary contact messages are deleted from the active inbox no later than 180 days after the final response. If a message is needed for a contract, legal claim, or statutory retention duty, RedGeo keeps only the relevant record for the applicable period and deletes it afterward.

Your choices and rights

Depending on the circumstances, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may withdraw website and Google Ads measurement, research-contact, or AI Visibility Checker availability-notification consent at any time. Measurement consent is withdrawn directly through Privacy settings; the other requests can be made through the contact options below. Use the contact form or email kontakt@redgeo.app. RedGeo may need to verify that a request concerns your data before acting on it. The anonymous Vercel aggregate events cannot be retrieved or deleted for a named person because RedGeo cannot connect them to one.

You may also lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde) at dsb.gv.at.

Fake-door test terms

• This is a B2B market-validation test.
• The priority-access flow stores the submitted work email, product website, the US$39/month trial-offer click, CTA location, and campaign attribution so RedGeo can evaluate and answer the request.
• The trial CTA opens an immediate availability disclosure. No account, trial, subscription, or payment starts from this page.
• The public AI Visibility Checker is not live; entering a website does not run a check or create an analysis result.
• Its optional availability waitlist is separate from the pilot and pricing test and authorizes one availability email only.
• The proposed Founder price is US$39 per month plus applicable taxes.
• A request does not guarantee future access.
• RedGeo does not guarantee that any AI tool will mention or recommend your company. AI outputs are controlled by independent third parties and may change.
• Product-interface data and workflows shown on the page are illustrative.
• Any real trial requires a separate availability email, confirmation, and terms.
• RedGeo is independent and is not endorsed by Reddit or any AI provider.