Privacy Policy

Last Updated: January 15, 2025

1. Introduction

Welcome to GeoServer. We are committed to protecting your privacy and ensuring the security of your personal and geospatial data. This Privacy Policy outlines how we collect, use, store, and share information when you use our platform, APIs, or related services.

By accessing or using GeoServer, you agree to the practices described in this policy. If you do not agree, please discontinue use of our services immediately.

2. Information We Collect

2.1 Personal Information

We collect information you provide directly, including name, email address, company name, role, and billing details when you create an account, subscribe to a plan, or contact support.

2.2 Usage & Log Data

We automatically collect data about your interaction with our platform, such as IP addresses, browser type, device information, pages viewed, features accessed, and timestamps.

2.3 Geospatial & Map Data

If you upload, render, or process spatial datasets, coordinates, or map layers through our API, we may temporarily store or cache this data to ensure service performance and rendering accuracy.

3. How We Use Your Information

We use collected information to:

  • Provide, maintain, and improve our geospatial platform and APIs
  • Process transactions and manage account subscriptions
  • Render, cache, and optimize map layers and spatial queries
  • Communicate with you regarding service updates, security alerts, and support requests
  • Analyze usage patterns to enhance performance and user experience
  • Comply with legal obligations and enforce our terms of service

4. Information Sharing & Disclosure

We do not sell your personal information. We may share data only in the following circumstances:

  • Service Providers: Trusted third-party vendors who assist with hosting, analytics, payment processing, or customer support, bound by strict confidentiality agreements.
  • Legal Requirements: When required by law, regulation, or valid legal process (e.g., court order, subpoena).
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice and continued privacy commitments.
  • With Your Consent: Explicitly when you authorize sharing of specific data.

5. Data Security & Retention

We implement industry-standard technical and organizational measures to protect your data, including TLS encryption in transit, AES-256 encryption at rest, role-based access controls, and regular security audits.

We retain personal information only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Geospatial caches are automatically purged or anonymized after 30 days unless configured otherwise by your enterprise plan.

6. Your Rights & Choices

Depending on your jurisdiction, you may have the right to:

  • Access, correct, or delete your personal data
  • Opt out of marketing communications
  • Request data portability in a machine-readable format
  • Lodge a complaint with a supervisory authority

To exercise these rights, please contact our Data Protection Officer using the information provided in Section 11. We will respond to verifiable requests within 30 days.

7. Cookies & Tracking Technologies

We use cookies, web beacons, and similar technologies to maintain session state, remember preferences, and analyze platform performance. Essential cookies are required for core functionality. Analytical cookies help us understand usage trends and may be disabled via your browser settings or our privacy preferences center.

8. Geospatial Data & Maps

Your uploaded spatial datasets, vector tiles, and raster layers remain your intellectual property. GeoServer acts as a processor on your behalf and does not claim ownership or use your proprietary geospatial data for our own purposes. Publicly shared map layers may be cached by browsers or CDN nodes for performance optimization.

9. Children's Privacy

GeoServer services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware of such collection, we will take immediate steps to delete the data and terminate the associated account.

10. Policy Updates

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. Material changes will be communicated via email or a prominent notice on our platform. Your continued use of GeoServer after such updates constitutes acceptance of the revised policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please reach out:

GeoServer Privacy Team
Email: privacy@geoserver.io
Address: 450 Geospatial Blvd, Suite 300, Portland, OR 97205, USA
DPO Contact: dpo@geoserver.io