Privacy Policy (GEO Writer)
Last updated: February 1, 2026
This Privacy Policy explains how Manifest Cowboys LLC ("Company," "we," "us," or "our") collects, uses, discloses, and protects personal information when you access or use GEO Writer (the "Service") at writegeo.ai.
Company Address: 1501 South Greeley Highway, Suite C, Cheyenne, WY 82007, United States
Mailing Address: 1501 South Greeley Highway, Suite C, PMB 4019, Cheyenne, WY 82007, United States
Privacy Contact: privacy@writegeo.ai
Support: support@writegeo.ai
Legal: legal@writegeo.ai
If you do not agree with this Privacy Policy, do not use the Service.
1) Scope and Key Definitions
This Privacy Policy applies to personal information we process as a controller in connection with the Service.
- "Personal information" (or "personal data") means information that identifies or relates to an identifiable individual.
- "Content" includes inputs you provide and outputs generated by the Service (e.g., keywords, prompts, business profile details, generated articles/images).
- "Processing" means any operation performed on personal information (e.g., collection, storage, use, disclosure).
This Privacy Policy does not apply to third-party websites or services you connect to or access through the Service (e.g., Shopify, WordPress, n8n). Those services have their own privacy policies.
2) What We Collect
A) Information you provide
When you create an account or use the Service, you may provide:
- Account information: name, email address, profile image (if provided by your identity provider).
- Business/profile information: business/brand name, website URLs, industry, brand details, author details, competitor info, social links, content preferences.
- Support communications: messages you send to support@writegeo.ai or privacy@writegeo.ai and related metadata.
- CTA uploads: a Call-To-Action ("CTA") image you upload and a destination link to insert into articles.
B) Content you generate or store in the Service
We process and store Content you submit or generate through the Service, including:
- keywords, prompts, project details, and settings;
- generated articles and related assets (including header images and metadata);
- publishing schedules/jobs and automation settings; and
- integration-related configuration necessary for publishing actions you request.
C) Integration and credential data
If you connect third-party integrations, we process and store:
- Shopify: OAuth access tokens (we do not collect Shopify admin passwords).
- WordPress: WordPress Application Passwords (not your normal WordPress password).
- n8n: a GEO Writer API key used by workflows (you can rotate/revoke this key).
Security note: Integration credentials are encrypted at rest using AES-256-GCM.
D) Automatically collected information (usage, device, logs)
We collect certain information automatically when you access the Service, such as:
- device and browser information (e.g., IP address, user agent, approximate location derived from IP);
- pages/screens viewed, feature usage, timestamps, and referral URLs;
- session and security-related data.
Application logs: We retain technical logs that may include snippets of user content for debugging/monitoring for 90 days.
E) Cookies, analytics, and advertising data
We and our partners use cookies and similar technologies (e.g., pixels) for:
- Essential operations (authentication, session security, preferences),
- Analytics (e.g., Google Analytics), and
- Advertising/measurement (e.g., Meta, TikTok, Google, and X/Twitter pixels).
See the Cookie Policy for details, including categories and choices.
3) What We Do NOT Collect / Prohibited Personal Data
The Service is intended for business/brand content creation and is not designed for submitting personal data about real individuals.
You must not submit or upload personal data about real people (including sensitive data such as health or financial information) or data about minors. If you do, you are responsible for ensuring you have the legal right to do so.
4) How We Use Personal Information
We use personal information to:
- Provide and operate the Service
- create and manage accounts;
- generate and display content outputs;
- store and organize projects, article sets, and settings;
- enable publishing/automation actions you request.
- Authenticate, secure, and prevent fraud
- maintain sessions and protect accounts;
- detect abuse (including free-access/trial abuse), spam, and unauthorized access;
- enforce our Terms of Service and Acceptable Use Policy.
- Process payments and manage subscriptions
- process billing and subscription events via our payment provider (Stripe);
- maintain token balances and plan entitlements.
- Communicate with you
- send transactional messages (account, security, service notices, billing-related communications);
- send marketing messages (see Section 9).
- Analytics, measurement, and advertising
- measure site/app performance and usage;
- attribute conversions and evaluate ad effectiveness.
- Improve, troubleshoot, and maintain the Service
- debug issues and optimize performance;
- monitor reliability and security using logs and diagnostics.
- Comply with law and protect rights
- comply with legal obligations and lawful requests;
- protect our rights, safety, and property, and that of our users and others.
5) Legal Bases for Processing (EEA/UK and Similar Jurisdictions)
If you are located in the European Economic Area ("EEA") or the United Kingdom, we rely on the following legal bases (as applicable):
- Contract: to provide and operate the Service you request.
- Legitimate interests: to secure the Service, prevent fraud/abuse, improve the Service, and conduct business operations (balanced against your rights).
- Consent: for non-essential cookies/pixels and, where required, certain marketing and advertising activities.
- Legal obligation: to comply with applicable laws and regulations.
You can withdraw consent where we rely on it (e.g., via cookie preferences or unsubscribe links), without affecting processing based on other legal bases.
6) How We Share Personal Information
We may disclose personal information to:
A) Service providers and processors
We share information with vendors who help us run the Service, such as:
- Hosting and infrastructure: Replit Deployments (U.S.-based hosting for the Service and primary data storage).
- Payments: Stripe (billing and subscription processing).
- Email: Klaviyo (transactional and marketing email delivery).
- Analytics: Google Analytics.
- Advertising/measurement: Meta, TikTok, Google, and X/Twitter advertising pixels.
B) AI/ML and research providers (content processing)
To generate outputs, the Service may send portions of your Content to third-party AI/ML and related API providers (e.g., model providers and API aggregators) for processing. These providers process the data to return results to us for delivery to you.
We do not use your Content to train our own models. We also do not use your Content for marketing.
C) Legal, safety, and enforcement
We may disclose information to:
- comply with law, regulation, court orders, or lawful requests;
- investigate, prevent, or take action regarding fraud, abuse, security incidents, or policy violations;
- protect the rights, property, and safety of the Company, our users, or others.
D) Business transfers
If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to appropriate confidentiality safeguards.
No sale of personal information for money. We do not sell personal information for monetary consideration. However, use of advertising pixels may involve "sharing" personal information for targeted advertising as defined under certain U.S. state privacy laws. See Section 11.
7) Cookies and Similar Technologies
We use cookies and similar technologies for essential functionality, analytics, and advertising.
Consent and controls (EU/UK)
If you are in the EU/UK, our cookie banner is designed to block non-essential cookies and pixels (analytics/advertising) until you opt in. You can change your preferences at any time.
For more detail, see the Cookie Policy.
8) Data Retention
We retain personal information only as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
A) While your account is active
- Projects/articles/outputs: retained indefinitely unless you delete them.
- Manual project deletion: hard delete (immediate and permanent). Deleting a project may cascade to associated records (e.g., articles in that project, publish schedules/jobs, link injection records, saved inputs, and certain integration records related to the project).
- CTA images: deleted immediately when you delete the image or remove it from the CTA block.
- Application logs: retained for 90 days.
B) Account deletion (30-day deletion window)
If you initiate account deletion from within the Service:
- your account enters a 30-day deletion window during which you may log in, but the account is limited (view/download existing outputs only; no new generation; no auto-publishing);
- integration credentials and API keys are revoked/deleted immediately when deletion begins; and
- at the end of the 30 days, your stored projects/articles/outputs are deleted.
C) Fraud-prevention / suppression record (retained indefinitely)
After account deletion is completed, we retain first name, last name, and email address indefinitely as a minimal suppression record to help prevent fraud and repeated abuse (including trial abuse). This record is retained for our legitimate interests in protecting the Service.
9) Marketing Emails and Preferences
We send:
- Transactional emails (account, security, service, and billing messages), and
- Marketing emails (product updates, promotions, and related communications).
You may opt out of marketing emails at any time using the unsubscribe link in the email. Even if you opt out of marketing emails, we may still send transactional communications.
10) Security
We use administrative, technical, and organizational safeguards designed to protect personal information. These measures include:
- encryption in transit (e.g., HTTPS/TLS);
- encryption at rest for integration credentials (AES-256-GCM);
- access controls and least-privilege practices; and
- monitoring and logging for security and reliability (logs retained 90 days).
No system is 100% secure. You are responsible for safeguarding your account credentials.
Security incidents
We will notify affected users of a security incident without undue delay when legally required.
11) U.S. State Privacy Rights (Including California)
Depending on your state of residence, you may have rights regarding your personal information (e.g., access, deletion, correction, portability, and opting out of certain processing).
A) "Sale" / "Sharing" / Targeted Advertising
We do not sell personal information for money. However, we may share personal information with advertising partners (e.g., via pixels) for targeted advertising and measurement, which may be considered "sharing" under certain laws (including California's CPRA).
Opt-out: You may opt out of targeted advertising/sharing by adjusting your cookie preferences (rejecting advertising cookies/pixels) where available, and/or by contacting us at privacy@writegeo.ai with your request.
Global Privacy Control (GPC): We do not respond to GPC signals as an automatic opt-out.
B) Categories of personal information (collected in the last 12 months)
We may collect:
- Identifiers (name, email, IP address, device identifiers);
- Internet/network activity (usage data, interactions, cookies/pixel data);
- Commercial information (subscription status, token balances, billing events—payment details are handled by Stripe);
- Inferences (limited, such as feature usage patterns for analytics);
- User content that may include business/brand information (and you are prohibited from submitting personal data about individuals).
C) Purposes
See Section 4.
D) Categories of recipients
See Section 6.
E) Requests
To exercise applicable rights, contact privacy@writegeo.ai. We may need to verify your identity and/or your account. We will not discriminate against you for exercising privacy rights.
12) International Users and Cross-Border Transfers
The Service is hosted and operated primarily in the United States, and we store primary customer data in the U.S. If you access the Service from outside the U.S., your information may be transferred to, stored, and processed in the U.S. and other locations where our service providers operate.
Where required by law for international transfers (e.g., EEA/UK to the U.S.), we rely on appropriate safeguards, such as Standard Contractual Clauses and/or equivalent measures implemented by us and/or our providers.
13) Children's Privacy
The Service is not intended for individuals under 16. We do not knowingly collect personal information from anyone under 16. If you believe a minor has provided us personal information, contact privacy@writegeo.ai.
14) Your Choices and Controls
Depending on where you live and how you use the Service, you may be able to:
- update certain account information within the Service;
- unsubscribe from marketing emails (unsubscribe link);
- manage cookie preferences through the cookie banner/settings (where available);
- delete projects (hard delete);
- initiate account deletion (30-day deletion window as described above).
15) Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will update the "Last updated" date above and may provide additional notice (e.g., email or in-app notice) for material changes. Your continued use of the Service after changes become effective means you accept the updated Privacy Policy.
16) Contact Us
For privacy questions or requests, contact: privacy@writegeo.ai
For support: support@writegeo.ai
For legal notices: legal@writegeo.ai