Privacy Policy

Scope

This Privacy Policy explains how GeidID collects, uses, shares, and protects personal information when you use geidid.com and related account, quiz, report, payment, and support features.

Who We Are and Contact

GeidID provides personality-based digital readings and reports. For privacy questions or rights requests, contact support@geidid.com.

Information We Collect

We collect information in the following categories:

• Information you provide: name, date of birth, MBTI type, Enneagram type, focus area, email address, and password.
• Account and sign-in information: account profile details, session information, and optional data from a third-party sign-in provider if you choose that option.
• Generated content: your free microread and paid Core Reports generated from your quiz inputs.
• Payment metadata: purchase selection, unlock status, a payment transaction identifier, and related fulfillment records. Our payment processor handles card and payment method details; GeidID does not store full card numbers.
• Technical information: session tokens, IP address, authentication cookies, and basic request metadata needed to operate and secure the service.

Cookies

GeidID uses essential authentication cookies with the geidid prefix to keep you signed in and protect account flows. These cookies are configured with SameSite=Lax and are secure in production. We do not use advertising cookies or third-party tracking cookies.

How We Use Information

We use personal information to:

• Create and secure your account.
• Generate and store your microread and Core Reports.
• Process purchases and unlock paid reports.
• Send transactional emails such as account and purchase emails.
• Provide support and respond to requests.
• Maintain, debug, prevent abuse, and improve the service.
• Comply with legal, tax, accounting, and security obligations.

Legal Bases

If GDPR or similar law applies, we process personal information under these legal bases:

• Contract: to provide accounts, quiz results, reports, purchases, and support.
• Consent: where you choose optional inputs, communications, or integrations.
• Legitimate interests: to secure, maintain, debug, and improve GeidID and prevent misuse.
• Legal obligation: to comply with applicable tax, accounting, payment, dispute, and regulatory requirements.

AI Processing

GeidID sends your quiz inputs to a third-party AI provider to generate your free microread and Core Reports. The output is stored in your account so you can view unlocked content later. Do not submit information you do not want used for AI-generated readings.

Sub-Processors and Sharing

We do not sell your personal data. We share information with service providers that help us operate GeidID:

• Payment processor: payment processing, payment metadata, fraud checks, receipts, and disputes.
• AI provider: generation of microreads and Core Reports from quiz inputs.
• Email provider: transactional email delivery from noreply@geidid.com.
• Sign-in provider: optional single sign-on if you choose that option.
• Hosting and database provider: storage and retrieval of account, quiz, report, session, and purchase records.

We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, financing, or sale of assets.

Data Retention

We keep account, quiz, report, purchase, and session records while your account is active and as needed to provide the service. We delete or de-identify personal information on request unless we need to keep it for legal, tax, accounting, dispute, fraud-prevention, or security reasons.

Your Rights

Depending on where you live, you may have privacy rights over your personal information. You can exercise rights by contacting support@geidid.com.

For GDPR and similar laws, these rights may include:

• Accessing the personal information we hold about you.
• Correcting inaccurate or incomplete information.
• Requesting deletion of personal information.
• Restricting or objecting to certain processing.
• Receiving a portable copy of your information.
• Withdrawing consent where processing is based on consent.

For CCPA/CPRA and similar laws, these rights may include:

• Knowing the categories and specific pieces of information collected.
• Requesting deletion of personal information.
• Correcting inaccurate personal information.
• Opting out of sale or sharing for cross-context behavioral advertising, where applicable. GeidID does not sell personal data and does not use cross-context behavioral advertising.
• Receiving non-discriminatory treatment for exercising rights.

International Data Transfers

GeidID and its service providers may process information in countries other than where you live. When required, we rely on appropriate transfer safeguards, such as contractual protections, to protect transferred personal information.

Data Security

We use technical and organizational safeguards designed to protect personal information, including TLS in transit, hashed passwords, access controls, and service-provider security controls. No online service can guarantee absolute security.

Children's Privacy

GeidID is not directed to children under 16 and paid features are not intended for anyone under 18 or the age of majority where they live. If you believe a child has provided personal information, contact us so we can review and delete it where appropriate.

Email Communications

GeidID sends transactional emails, such as account messages, password messages, and purchase receipts, from noreply@geidid.com. We do not send marketing emails unless we introduce a separate opt-in mechanism.

Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new last updated date.

Contact

Privacy questions and rights requests can be sent to support@geidid.com.