Prime Team Agency · GEO client application Privacy Policy · Effective 22 September 2026
This Privacy Policy describes how Prime Team Agency (“Prime Team,” “we,” “us”) collects, uses, stores and shares information when you use the GEO client website and workspace at this domain (the “Service”), including when you sign in with Google. It is written to support Google API Services User Data Policy and OAuth verification requirements. The agency’s broader website practices are also described at primeteam.agency/privacy-policy.
1. Who we are
Controller: Prime Team Agency, 141 N Acacia Ave, Solana Beach, CA, United States. Contact: geo.management@primeteam.agency.
2. Information we collect
Google sign-in (OpenID Connect)
When you choose “Sign in with Google,” Google authenticates you and, with your consent, shares limited identity information with us through Google’s OAuth / OpenID Connect flow. We request the scopes openid, email and profile. From Google we receive a verified email address and basic profile identity claims needed to open a session. We do not receive or store your Google password. We do not request Google Drive, Gmail, Calendar or other sensitive Google user data scopes.
Workspace session
After a successful, allowlisted sign-in we create a server-side session identified by an HttpOnly cookie. The session stores a hashed session token, your email, the client you may access, a CSRF token, creation time and expiry (12 hours). Short-lived OAuth state, PKCE verifier and nonce values are used only to complete sign-in and are then discarded.
Workspace and operational data
While signed in, the Service may store client configuration, research jobs, evidence artifacts, drafts, publication versions, rollback records, rate-limit counters and an event log that includes the acting email address for auditability.
Public tools and inquiries (when used)
If you use a website-review tool, we process the public website address you submit, fetch the public homepage, and may cache results briefly. If you submit an inquiry or follow-up, we store the details you provide (such as name, email, company, website and message) and your consent choices. Chat conversation text may remain in browser memory until refresh unless you submit a follow-up.
Technical logs
Hosting infrastructure may retain standard access logs (for example IP address, user agent, path and time). We may store short-lived hashed network identifiers for rate limiting and abuse prevention. This Service does not install advertising pixels, session-replay scripts or third-party marketing cookies.
3. How we use information
- Authenticate allowlisted users and protect the client workspace.
- Provide GEO research, drafting, preview, publish and rollback features you are authorized to use.
- Respond to inquiries and operate optional website-review tools.
- Maintain security, prevent abuse, debug faults and keep an audit trail of workspace actions.
- Comply with law and enforce our Terms of Service.
We do not sell personal information. We do not use Google user data for advertising. We do not use Google user data to train general-purpose AI/ML models.
4. How we share information
We share information only as needed to operate the Service:
- Google — to authenticate you when you sign in (subject to Google’s terms and privacy policy).
- Infrastructure / hosting providers — to run the application and store encrypted-at-rest or access-controlled operational data as configured by the operator.
- OpenAI — only when a live AI assistant feature is enabled and you use it; then your prompt context and relevant published content may be sent to prepare a response under that provider’s terms. Do not enter passwords or payment details in chat.
- Legal / safety — if required by law or to protect rights, security or integrity of the Service.
Authorized Prime Team operators and, where integrated, your organization’s existing client backend may access workspace data for the clients they administer.
5. Retention
Sign-in sessions expire after 12 hours or when you sign out. OAuth handshake values are short-lived (minutes). Inquiry and review caches are retained only as long as needed for the feature (review caches up to about one day). Workspace evidence, drafts, releases and audit events are retained for the life of the client engagement unless you or an operator request deletion earlier, subject to legal hold requirements.
6. Security
We use HTTPS in production, HttpOnly session cookies (Secure on HTTPS), SameSite=Lax, CSRF checks on workspace actions, hashed storage of session and OAuth state secrets, allowlist-based access and rate limits on sign-in and public tools. No method of transmission or storage is perfectly secure.
7. Your choices and rights
You may sign out at any time. You may revoke this application’s access to your Google Account from your Google Account permissions page. To request access, correction or deletion of personal information we hold about you in this Service, email geo.management@primeteam.agency. We may need to verify your identity and will respond as required by applicable law.
8. Children
The Service is for business users. It is not directed to children under 16, and we do not knowingly collect their personal information.
9. International users
The Service is operated from the United States. If you access it from elsewhere, you understand that information may be processed in the United States.
10. Changes
We may update this Privacy Policy. The “Effective” date above will change when we do. Continued use of the Service after an update means you accept the revised policy for future use. Material changes affecting Google user data will be reflected here before new uses begin.
11. Contact
Questions about privacy or Google sign-in data: geo.management@primeteam.agency. Related: Terms of Service.