Privacy Policy
Last Updated :
Geck AI is owned and operated by Aaram Inc., a Delaware corporation. This Privacy Policy explains how Aaram Inc., doing business as Geck AI (“Geck,” “Company,” “we,” “us,” or “our”), collects, uses, discloses, stores, and protects personal data in connection with the Geck website, platform, products, reports, diagnostics, and related services (collectively, the “Services”).
This Privacy Policy is intended to apply globally, subject to jurisdiction-specific supplements, mandatory local law, and any separate notice we may provide for a specific product, country, or service. Where applicable law grants rights or imposes obligations that differ from this Privacy Policy, the applicable law will govern to the extent of the conflict.
By accessing or using the Services, you acknowledge this Privacy Policy. Where required by law, we will seek consent or other valid authorization before processing personal data in particular ways.
1. Scope
This Privacy Policy applies to personal data processed by Geck in connection with:
Our website and landing pages.
Our audit, analysis, reporting, and advisory services.
Account creation and platform access, if applicable.
Communications with prospects, clients, vendors, and partners.
Billing, contracting, onboarding, and customer support.
Analytics, service monitoring, fraud prevention, and security operations.
This Privacy Policy does not apply to third-party websites, services, or platforms not operated by Geck, even if they are linked from our Services.
2. Categories of Personal Data We Collect
Depending on how you interact with Geck, we may collect the following categories of personal data:
2.1 Contact and Business Information
Name.
Work email address.
Phone number.
Company name.
Job title or role.
Country, region, or business location.
Information you submit through forms, demos, or sales inquiries.
2.2 Client Account and Engagement Information
Account credentials, where applicable.
Contract and billing contacts.
Statement of Work details.
Service history.
Communication preferences.
Support requests and related records.
2.3 Website, Platform, and Usage Data
IP address.
Browser type and version.
Device type and operating system.
Referral source.
Pages viewed.
Session activity.
Interaction events.
Error logs.
Approximate location derived from IP address where permitted by law.
2.4 Technical Audit and Diagnostic Data
In providing our Services, we may collect and analyze technical data relating to a client’s website or digital properties, including:
Page structure and DOM elements.
Structured data and metadata.
Crawl behavior and response data.
Rendering outputs.
Accessibility and usability signals.
Performance data.
Task completion and workflow observations.
Automation test results and validation outputs.
2.5 Communications and Support Data
Messages sent through forms, email, or support channels.
Meeting notes and call records where permitted.
Feedback, survey responses, and requested follow-up information.
2.6 Payment and Transaction Data
Billing address.
Invoice details.
Payment status.
Transaction metadata.
We may use third-party payment processors, which may process payment information under their own terms and privacy practices.
3. How We Collect Personal Data
We collect personal data:
Directly from you when you contact us, request a demo, sign an agreement, complete forms, communicate with us, or use our Services.
Automatically through cookies, logs, analytics tools, pixels, SDKs, and similar technologies where permitted by law.
From clients or authorized users during onboarding, service delivery, or support.
From public sources, business networks, or referral partners where permitted by law.
From service providers that help us operate our business.
4. How We Use Personal Data
We may use personal data for the following purposes:
To provide, operate, and improve the Services.
To conduct website audits, diagnostics, testing, reporting, and advisory work.
To communicate with you about demos, onboarding, contracts, deliverables, support, and account matters.
To process payments, invoices, and commercial transactions.
To personalize and improve website and product experience.
To monitor usage, analyze trends, and improve performance.
To detect, prevent, investigate, and respond to fraud, abuse, misuse, and security incidents.
To comply with legal obligations and enforce agreements.
To conduct internal analytics, benchmarking, quality assurance, and product development.
Where we use de-identified or aggregated information for benchmarking, research, or service improvement, we will use reasonable measures designed to prevent that information from being linked back to an identified individual or client.
5. Legal Basis and Permission Framework
Because Geck operates globally, the lawful basis or permission framework for processing may vary depending on the jurisdiction and the nature of the interaction.
Depending on the context, we may process personal data based on:
Your consent or affirmative authorization.
The need to perform a contract or take steps at your request before entering a contract.
Legitimate business interests, where recognized by applicable law and not overridden by your rights.
Compliance with legal obligations.
Protection of rights, safety, security, and prevention of fraud or misuse.
Where consent is required by applicable law, we will request it before processing personal data in the relevant manner.
6. How We Share Personal Data
We do not sell personal data. We may disclose personal data in the following circumstances:
6.1 Service Providers and Processors
We may share personal data with vendors and service providers that assist with:
Hosting and cloud infrastructure.
Analytics and diagnostics.
Customer support.
Payment processing.
CRM and email communications.
Security and monitoring.
Professional services and business operations.
These parties are expected to process data on our instructions and subject to appropriate confidentiality and security obligations.
6.2 Client-Directed or Authorized Sharing
We may disclose data where a client directs us to do so or where sharing is necessary to perform the agreed Services.
6.3 Legal and Safety Disclosures
We may disclose personal data where we reasonably believe disclosure is necessary to:
Comply with applicable law, legal process, or lawful government request.
Enforce agreements.
Protect our rights, safety, or property.
Prevent fraud, abuse, or security threats.
Protect users, clients, or the public.
6.4 Corporate Transactions
We may disclose personal data in connection with a merger, acquisition, financing, restructuring, bankruptcy, or sale of assets, subject to customary confidentiality protections.
7. International Transfers
We may process and store personal data in the United States and in other countries where we or our service providers operate. As a result, personal data may be transferred across borders and may be subject to laws different from those in your country of residence.
Where required by law, we will implement appropriate safeguards for international data transfers.
8. Data Retention
We retain personal data only for as long as reasonably necessary to:
Provide the Services.
Maintain client relationships and accounts.
Deliver reports and contractual work.
Comply with legal, regulatory, tax, accounting, and audit obligations.
Resolve disputes and enforce agreements.
Prevent fraud and maintain security.
Technical audit data, engagement records, and communications may be retained for the period reasonably necessary for service delivery, continuity, support, quality assurance, legal compliance, and internal recordkeeping.
When deletion is requested or an engagement ends, we may retain limited data as necessary for legal obligations, dispute resolution, fraud prevention, backup cycles, or de-identified analytics.
9. Data Security
We implement reasonable administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, loss, misuse, alteration, and disclosure.
Security measures may include access controls, encryption in transit, logging, monitoring, secure storage, vendor diligence, and role-based restrictions. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Cookies and Similar Technologies
We may use cookies, pixels, local storage, SDKs, and similar technologies to:
Operate and secure the Services.
Remember preferences.
Analyze traffic and usage.
Improve performance and experience.
Support marketing activities where permitted by law.
Where required by law, we will provide a cookie notice or consent mechanism for non-essential technologies.
11. Your Choices and Controls
Depending on your relationship with us and applicable law, you may be able to:
Access or update certain account or contact information.
Request deletion of personal data.
Opt out of non-essential marketing emails.
Manage cookies and similar technologies through browser or consent settings.
Withdraw consent where processing is based on consent and the law provides that right.
Request information about how your personal data is used.
We may take reasonable steps to verify your identity before fulfilling certain requests.
12. U.S. Privacy Rights
This section applies to individuals in the United States to the extent required by applicable federal or state law.
Depending on your state of residence, you may have rights such as:
Knowing what categories of personal information we collect.
Accessing certain personal information.
Requesting deletion of personal information, subject to exceptions.
Correcting inaccurate personal information.
Obtaining a copy of certain personal information.
Opting out of the sale or sharing of personal information, where applicable.
Appealing the denial of a rights request where required by law.
To exercise applicable rights, you may contact us using the details in the Contact Information section below.
13. India Privacy Rights
This section applies to individuals in India.
Where required by applicable Indian law, we will provide notice describing the personal data processed, the purpose of processing, how consent may be withdrawn where relevant, and how grievances may be submitted.
Subject to applicable law, individuals in India may have rights to:
Access information made available about the processing of their personal data.
Request correction, completion, updating, or erasure of personal data.
Withdraw consent where processing is based on consent.
Use a grievance redressal channel.
Exercise other rights available under applicable law.
14. Children’s Data
Our Services are generally intended for businesses and professionals, not children.
We do not knowingly collect personal data from children where doing so would violate applicable law. If you believe a child has provided personal data to us in violation of applicable law, please contact us so we can take appropriate steps.
Where Indian law applies, we will comply with any applicable requirements relating to parental consent or other safeguards for children’s personal data.
15. Third-Party Services
Our Services may integrate with or rely on third-party tools, platforms, browsers, analytics providers, cloud services, payment processors, or communication services. Their handling of personal data may also be governed by their own terms and privacy policies.
We are not responsible for the privacy practices of third-party services that we do not control.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we may provide notice through the website, email, product notifications, or other reasonable means.
Your continued use of the Services after an updated Privacy Policy becomes effective will be treated as acknowledgment of the revised policy to the extent permitted by law.
17. Contact Information
For questions, rights requests, or privacy-related concerns, contact:
Aaram Inc. (dba Geck) Email: support@geck.ai Website: https://geck.ai
18. India Grievance Contact
For users in India, Geck may maintain and publish a grievance contact or grievance officer mechanism if required by applicable law, so that grievances and privacy requests can be submitted and addressed through a clearly available channel.