Legal
Privacy Policy
Last updated: 9 September 2026
What this means
By default, Geocentric keeps nothing about your conversations. Your prompt reaches the model, the model answers, and neither is written down. Your history is saved in your own browser.
Two things change that, and both are your choice: turning on the training setting, which is off unless you switch it on, and sending us a report about a bad response, which shows you the transcript before it goes.
Who we are
Geocentric is an independent company operated by an individual owner as a sole proprietorship. It is not a limited liability company or a corporation, and it does not publish a business address. Geocentric operates geocentricai.com and chat.geocentricai.com. Privacy contact: contact@geocentricai.com.
The default is that we keep nothing
When the training setting is off — which is how it arrives — your prompt and the model's response are held in memory for as long as it takes to generate the answer, and then they are gone. They are not written to disk, not logged, and not reviewed.
This is enforced in the serving code rather than promised in prose: the function that writes a conversation to storage is only reached when the request carries your opt-in.
What we handle
| Data | Example | Why we handle it | Shared with | Kept for |
|---|---|---|---|---|
| Prompts and responses (opt-in only) | The text you type and Geocentric's reply | Only if you turn the setting on: to improve and train Geocentric models, and to review safety. Off by default. | No one outside Geocentric. Never sold. | Deleted within 30 days. Not kept at all unless you opted in. |
| Reports you send | A report about a bad response, with the conversation you chose to attach | To investigate and fix what you reported | No one outside Geocentric | Deleted within 30 days |
| Conversation history | Your saved chats, titles, drafts | So you can return to a conversation | No one. It never leaves your device. | Until you delete it or clear your browser data |
| Interface preferences | Theme, creativity setting | To remember how you like the interface | No one. Stored in your browser. | Until you clear your browser data |
| Consent choices | Your age confirmation, acceptance of the terms, and training opt-in | To record what you agreed to, and to avoid asking again on every visit | No one. Held in a cookie on your device. | One year, or until you clear your browser data |
| IP address and request metadata | IP, user agent, timestamp, URL | To deliver the response, and to detect and stop abuse and attacks | Cloudflare, as our network and security provider | Cloudflare applies its own log retention |
| Security events | Rate-limit triggers, blocked requests | To keep the service available and resist attack | Cloudflare | 90 days |
| Correspondence | An email you send us | To answer you | Our email provider | 12 months |
Everything absent from this table is absent from our systems. We do not operate accounts, so we hold no usernames, passwords or authentication data. We run no analytics, no advertising and no session replay. We take no payments, so we hold no billing records. There is no file upload, so we receive no uploaded documents or images.
Model training and your consent
We train models on conversations only if you allow it. The setting reads:
Send my prompts and Geocentric's responses to help improve and train Geocentric models.
It is off by default, it is never pre-ticked, and it is separate from your agreement to the Terms of Service. Continuing to use the service is not consent. You can turn it off at any time in Settings, and doing so stops any further retention immediately.
The part people are not usually told
Training is not reversible in the way deletion is. If your conversation was already included in a training run before you withdrew consent, or before the 30-day deletion, the resulting model has already learned from it. Deleting the stored copy does not remove that influence, and we cannot un-train a checkpoint. We would rather say this plainly than let the deletion right imply something it cannot deliver.
What we do not do
We do not sell prompts, responses, or anything else about you, to anyone, for any price. We do not share them for advertising or for cross-context behavioural profiling. We do not hand them to a third party for that party's own purposes.
Datasets used to train published models are documented on the Training Data Transparency page.
Reports you send us
Each response in the chat interface has a report control. Using it sends us what you write — what went wrong, why it matters, what you expected — together with the conversation up to that response.
Before anything is sent, the interface shows you the exact transcript that will be attached, and the send button stays disabled until you tick a box confirming you understand what you are sending. If you would rather not include the conversation, do not send the report; write to us instead.
Reports are kept separately from anything else, are deleted within 30 days, are never used as training data, and are read only to investigate what you reported.
What is stored in your browser
The chat interface uses your browser's local storage — not cookies — for the following. This data stays on your device and is not readable by any other site.
geocentric.chats.v1— your saved conversationsgeocentric.settings.v1— your theme and creativity settinggeocentric.draft.*— an unsent message, so a refresh does not lose itgeocentric.consent.v1— a mirror of thegc_consentcookie described in the Cookie Notice, used when cookies are unavailable
You can delete all of it at any time by clearing site data in your browser, or by deleting individual conversations in the interface. The interface also has an export function if you want a copy first.
Who else is involved
Cloudflare provides DNS, TLS termination, CDN and network security for both geocentricai.com and chat.geocentricai.com. Requests to either site pass through Cloudflare's network, which means Cloudflare processes the request — including, for the chat service, the prompt in transit — as our service provider. Cloudflare sets its own strictly necessary security cookies; see our Cookie Notice.
That is the complete list of third parties in the request path. We deliberately self-host our fonts rather than loading them from a font CDN, and neither site loads any third-party script. The chat service enforces this in its Content Security Policy, which permits scripts, styles and connections only from its own origin.
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We may disclose information where we are legally required to, and we would narrow the scope of any such request where we reasonably can.
Interception and session recording
Because it comes up with AI chat interfaces specifically: no third party observes what you type. We do not run session replay, keystroke capture, form analytics, heat mapping, or support chat widgets on either site. No vendor receives the contents of your prompt while you are entering it. The only party in the transmission path is Cloudflare, in its role as our network provider.
How long we keep things
The default retention for a conversation is none at all. Where you have opted in, or where you have sent us a report, the stored copy is deleted within 30 days.
Security logs are the exception that needs longer — 90 days — because investigating an attack or an abuse pattern requires looking backwards further than a month. Correspondence is kept for 12 months so we can pick up a thread you started.
The one thing that does not expire is what a model has already learned during a training run you consented to, for the reason given above.
Your choices
- Keep the default — leave the training setting off and there is nothing of yours for us to hold, disclose, or delete.
- Turn training on or off — in Settings, at any time, with no effect on your access to the service.
- Delete your history — delete individual conversations in the interface, or clear site data to remove everything at once.
- Export your data — the chat interface exports a conversation to a file.
- Ask us to delete our copy early — write to contact@geocentricai.com rather than waiting for the 30-day expiry.
- Delete your account — there are no accounts to delete.
You may also ask us to access, correct, or delete personal information, to restrict or object to processing, or to receive it in a portable form. Where a right applies to you under law, we will honour it within the period that law requires. Without an account, we will need enough information to locate the records, and there is a practical limit to what we can find from an IP address alone. If you are in the EEA or UK you also have the right to complain to your data protection authority.
Which privacy laws apply
We would rather assess this honestly than claim blanket compliance with every statute.
California (CCPA/CPRA). The CCPA applies to businesses meeting at least one statutory threshold: annual gross revenue above the adjusted threshold, buying, selling or sharing the personal information of 100,000 or more California consumers or households a year, or deriving 50% or more of revenue from selling or sharing personal information. Geocentric does not sell or share personal information, takes no revenue from the services, and does not have the account infrastructure that would put it near the consumer threshold. On the current assessment we do not meet a threshold and are not a covered "business". We therefore do not display a "Do Not Sell or Share My Personal Information" link, because that would misrepresent what we do. We offer the access, correction and deletion routes above regardless, and we will reassess as the company grows.
GDPR and UK GDPR. Both sites are reachable from the EEA and the UK. Where the GDPR applies to our processing, our lawful bases are: performance of a contract for handling your prompt and returning a response; legitimate interests for security and abuse prevention; and your consent, and only your consent, for retaining conversations and using them to train models. You can withdraw that consent at any time without affecting the lawfulness of what was done before. International transfers may occur because our infrastructure and network provider operate across regions; we rely on the appropriate transfer mechanisms available to us.
Other state privacy laws. We monitor the US state privacy laws now in force. Most carry consumer or revenue thresholds comparable to California's, and our assessment is the same. We will publish updated disclosures if that changes.
Children
You must be at least 16 to use the Services, and we do not knowingly collect personal information from anyone under 16. See our Children's Privacy notice.
Changes
We will update this policy when our practices change, and the "last updated" date reflects the current version. A change that materially affects how we handle your data will be announced on this site before it takes effect.
Contact
Privacy questions and requests: contact@geocentricai.com.