Geisro logoGeisro

Privacy Policy

Last updated: 10 June 2026

This Privacy Policy explains what personal data Geisro ("Geisro", "we", "us") collects when you use our website and the Geisro map editor (the "Service"), why we collect it, who we share it with, and the rights you have under applicable data protection law. By using the Service you acknowledge the practices described here.

1. Who we are (data controller)

Geisro is the service described in this policy and is the controller of the personal data processed through it. For any question about your data, or to exercise any of the rights described below, you can reach us by e-mail at support@geisro.com. If you need our full registration or postal details, you can request them at that address.

2. What personal data we collect

Account data (from Google Sign-In)

Geisro uses Google to sign you in. When you log in we receive from Google and store:

  • your e-mail address;
  • your display name;
  • your Google account identifier (a stable ID Google uses to identify you).

We do not receive or store your Google password. We also store the date your account was created and which subscription plan it is on.

Content you create

The Service stores the data you create in it: projects, layers, map geometries (points, lines, polygons, routes) and any names, attributes or notes you attach to them. This content may itself contain personal data if you choose to put it there - you control what you draw and save.

Technical and usage data

Like any web service, our servers and the third-party providers below automatically process technical data such as your IP address, browser type, and request/error logs, which are needed to deliver the Service securely.

3. Why we use your data and our legal basis

  • To provide the Service - create your account, store and display your maps, projects and layers. Legal basis: performance of a contract.
  • To authenticate you and keep your session - sign-in and the session cookie. Legal basis: performance of a contract.
  • To run search, routing and import features - sending the address you search for, or the area you draw, to map data providers. Legal basis: performance of a contract.
  • To keep the Service secure and prevent abuse - logging and rate limiting. Legal basis: our legitimate interests.
  • To comply with legal obligations where applicable. Legal basis: legal obligation.

4. Cookies

Geisro uses a single essential cookie, Geisro.Auth, to keep you signed in. It is a strictly necessary cookie - without it you could not stay logged in - so it does not require consent. We do not use advertising cookies, and we do not run third-party analytics or tracking scripts on the site.

5. Service providers we share data with

We use the following processors and third parties to run the Service. They process data only as needed to provide their part of the Service:

  • Google (Google Ireland Ltd. / Google LLC) - sign-in (OAuth). See Google's own privacy policy.
  • Cloud hosting provider - a third-party provider hosts the application; our servers and database run in the EU (Frankfurt, Germany).
  • Map and address-search providers - third-party services provide the map tiles and the address search (geocoding). The address text you search for, and your IP address when tiles load, are visible to these providers. Map data is based on OpenStreetMap and other map data sources.
  • Map data import service - when you use "import roads/buildings", the coordinates of the area you draw are sent to a public OpenStreetMap data service to fetch matching map data.

When map tiles load, your IP address is necessarily visible to the tile provider serving them. We never sell your personal data.

6. International transfers

Our hosting and database are located in the EU. Some providers (e.g. Google) may process data outside the European Economic Area. Where that happens, such transfers are covered by appropriate safeguards under applicable data protection law, such as the European Commission's Standard Contractual Clauses.

7. How long we keep your data

We keep your account data and the content you create for as long as your account exists. If you delete your account, or ask us to delete it, we erase your account and the projects, layers, geometries and attributes belonging to it. Technical logs are kept only for a short period for security and troubleshooting and are then deleted or anonymised.

8. Your rights

You have the right to:

  • Access the personal data we hold about you;
  • Rectify inaccurate or incomplete data;
  • Erase your data ("right to be forgotten");
  • Restrict or object to certain processing;
  • Data portability - receive your data in a structured, commonly used format;
  • Withdraw consent at any time, where processing is based on consent;
  • Lodge a complaint with a data protection supervisory authority.

9. Deleting your account and exercising your rights

To delete your account and associated data, or to exercise any of the rights above, contact us at support@geisro.com from the e-mail address linked to your account. We will respond within the time limits set by applicable data protection law (normally within one month).

10. Children

The Service is not directed at children and is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date above and, for significant changes, take reasonable steps to inform you.

12. Contact

Questions about this policy or your data? E-mail support@geisro.com. You also have the right to lodge a complaint with your local data protection supervisory authority.