Privacy Policy

Who we are

Our website address is: https://geekofstates.com.

Effective date: 1 August 2023. Last updated: 26 July 2026.

At Geek Of States we value and respect the privacy of our website visitors and customers. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information when you interact with our website and utilize our services. By visiting our website and engaging with our services, you consent to the practices described in this Privacy Policy.

1. Information We Collect: a. What you give us. When you enquire, buy or work with us we collect what is needed to do the job: your name, work email, phone number, billing address and, where relevant, your company and role. Card details are entered into our payment processors and are not held by us. b. What comes from the work itself. Depending on the service this can include the material you supply to configure an AI system, the access or credentials you grant for a development or support engagement, the details of a support request, and correspondence about the job. Sections 5 to 11 set out how each of those is handled. c. What is collected automatically. Our website records IP address, browser and device type, operating system, referring page and pages viewed. We use that to understand which pages are useful and to keep the site secure, not to identify you personally. d. What we never ask for. We do not ask for passwords by email or chat, and we do not need a card number in order to quote.

2. How We Use Your Information: a. To do the work you asked for. Scoping, quoting, building, supporting and invoicing — across AI projects, software and SaaS licensing, web and app development, digital marketing and managed IT support. b. To keep you informed about it. Answering enquiries, confirming appointments, reporting on work in progress, and telling you about anything that affects a service you already have. c. To run and protect the business. Fraud prevention, tax and accounting records, and diagnosing faults in our own systems. d. To improve what we offer. Using aggregate, non-identifying patterns such as which pages people actually read — never by mining a client’s project data for our own purposes. e. Marketing, only if you opt in. Promotional email is sent only with your consent and every message carries a one-click unsubscribe. Marketing consent is separate from the SMS programme described below. f. What we do not do. We do not sell your personal information, we do not sell or share your customers’ data, and we do not use client material to train general-purpose AI models.

3. How We Protect Your Information:

a. Data Security: We implement reasonable security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, please be aware that no data transmission over the internet or electronic storage is entirely secure, and we cannot guarantee absolute security.

b. Third-Party Service Providers: We may use trusted third-party service providers to assist us in delivering our services. These providers have access to your personal information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.

4. Disclosure of Your Information:

We do not sell, trade, or rent your personal information to third parties. However, we may share your information in the following circumstances:

a. Compliance with the Law: We may disclose your personal information if required by law, court order, or government regulation.

b. Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal information may be transferred as part of the business transaction.

5. AI Projects and Automation Data: When we build or run an AI system for you, we process the material you give us to configure it — your documents, service details, pricing, policies and past correspondence — plus the conversations the system then handles. a. We do not train public models on your data. Your material is used to configure and operate your system, not to improve a general-purpose model. b. Third-party model providers. Generating a response may send the relevant part of a conversation to a model provider we have told you about, and their processing terms apply to that step. c. Conversation logs. Chat and call transcripts are kept so the system can be corrected and audited. You decide the retention period, and you can ask us to purge them. d. Sensitive categories. Do not put health, financial, biometric or government identifiers into an AI system we build unless we have agreed in writing how that data will be handled.

6. Software, SaaS and Account Provisioning: To supply a licence or subscription we need the account details the vendor requires — usually a name, work email and tenant or domain. a. The account is yours. Wherever the vendor allows it we provision to your own tenant, and you remain the account owner. b. Administrative access. If you ask us to administer a tenant, we hold credentials or delegated access only for as long as that arrangement continues, and we remove our access when it ends or when you ask. c. Vendor privacy terms. Data you then put into a third-party platform is governed by that vendor’s privacy policy as well as this one.

7. Web and App Development Project Data: Project work usually means we hold credentials, content, databases and sometimes copies of live data. a. Access is scoped and temporary. We ask for the narrowest access that will do the job and hand back or revoke it at the end of the project. b. Test data. Where we need realistic data to test against, we prefer anonymised or sample data. If a copy of live data is unavoidable we agree it in advance and delete the copy when the work is done. c. Handover. On completion we transfer credentials and repositories to you and remove our copies except where we must keep something for a stated support obligation.

8. CRM and Workflow Automation Data: Automations we build move information between systems on your behalf — a lead from a form into your CRM, a completed job into an invoice. a. We are acting for you. For that data you are the controller and we act on your instructions. b. What we can see. Building and supporting an automation means we can see the records passing through it. Our team accesses them only to build, test or fix the automation. c. Failures. Error logs can contain fragments of the records that failed. Those logs are kept only as long as needed to diagnose the fault.

9. Analytics and Marketing Measurement: We use analytics on our own website to understand which pages are useful. a. On our site. Analytics tools record pages viewed, approximate location, device and referring source. We do not use them to identify you personally. b. On work we do for you. Where we set up analytics, advertising pixels or conversion tracking on your website, that data is collected into your accounts and governed by your own privacy notice — you are responsible for disclosing it to your visitors, and we will tell you what has been installed. c. Advertising platforms. Running campaigns for you means sharing conversion and audience data with the platforms you have chosen, under their terms. We do not sell your data or your customers’ data to anyone.

10. Payments and Payment Processors: a. We do not store card numbers. Card details are entered into and held by our payment processors, not by us. We see only what the processor returns — a confirmation, the last digits, the amount and the outcome. b. What we keep. Invoices, receipts and payment records are retained for the period tax and accounting law requires. c. Subscriptions. For recurring billing the processor holds the payment method on file under its own terms, and you can ask us to cancel a renewal at any time.

11. How Long We Keep Data: We keep information only as long as there is a reason to. Enquiries and quotes are kept while a decision is open and for a reasonable period after; project files and credentials are dealt with at handover as described above; support records are kept so a recurring fault has a history; invoices and payment records are kept for the statutory retention period; AI conversation logs are kept for the period you set. You can ask us what we hold about you and ask us to delete anything we are not required to keep — see your rights and the contact details below.

12. Cookies and Tracking Technologies:

We use cookies and similar tracking technologies to enhance your website experience. These technologies help us analyze website traffic, remember your preferences, and provide customized content. You can modify your browser settings to control or block cookies.

13. Children’s Privacy:

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with their personal information, please contact us, and we will promptly delete such information.

14. Changes to this Privacy Policy:

We reserve the right to update or modify this Privacy Policy from time to time. Any changes will be posted on this page with a revised effective date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

15. Contact Us:

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

support@geekofstates.com

By using our website and services, you acknowledge that you have read, understood, and agreed to the terms and practices outlined in this Privacy Policy.

SMS / Text Messaging Privacy (10DLC Program)

Program description: Geek of States sends SMS text messages to customers who opt in, limited to: responses to inquiries submitted through our website or phone line, order confirmations and delivery updates, appointment and tech-support scheduling, and customer-care follow-ups.

Consent: You opt in to SMS messages only by providing your phone number to us with express consent — for example by submitting our contact form, placing an order, or texting us first. Consent to receive SMS is never a condition of any purchase. We do not send promotional or marketing SMS without separate express consent.

No third-party sharing: Phone numbers collected for SMS consent and SMS opt-in data are not shared with, sold to, or transferred to any third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties, excluding vendors and service providers acting on our behalf solely to deliver the messages.

Message frequency: Message frequency varies based on your interactions with us.

Fees: Message and data rates may apply, depending on your mobile carrier plan.

Opt out: Reply STOP to any message to unsubscribe at any time. Reply HELP for help, or contact us at support@geekofstates.com or 1-800-595-GEEK (4335).