Privacy Policy

Last updated: 13 October 2026

1. Introduction

This Privacy Policy explains how Geogrup OÜ (“Kicco”, “we”, “us”) collects, uses and protects personal data when you visit kicco.co or use the Kicco application at app.kicco.co (together, the “Service”).

2. Data controller

3. Information we collect

• Account information: your name, email address and profile picture when you create an account or sign in, including through Google Sign-In.
• Connected store and advertising data: when you connect Shopify, Meta or Google Ads, we access data these platforms make available to the Service, which may include orders, products, inventory, customers, discounts, payouts and advertising performance.
• Communications: information you provide when you contact us for support.
• Technical information: IP address, browser type, device information and log data.

4. How we use information

We use personal data to provide, maintain and secure the Service; authenticate users; generate the analytics, reports and insights you request; respond to support requests; send service-related messages; and comply with legal obligations. We may occasionally send product updates, and you can unsubscribe at any time using the link in the email. We do not sell personal data, and we do not use connected store data for advertising.

5. AI features

Kicco includes an optional AI assistant that answers questions about your data. When you use it, the relevant data is sent to a third-party AI provider solely to generate the response. These providers are contractually prohibited from using your data to train their models, and Kicco does not use your data to train AI models.

6. Google user data

Kicco’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not used to develop, improve or train generalised AI or machine-learning models.

7. Store customer data

Where connected store data includes personal data of a merchant’s customers, Kicco processes that data on behalf of the merchant, as a processor, and only to provide the Service. The merchant remains the controller. Requests from a store’s customers regarding their personal data should be directed to the merchant, and we will assist the merchant in responding. We also honour Shopify’s data request and deletion requests.

We may create aggregated, anonymised statistics that cannot identify any individual or store. Kicco does not make decisions with legal or similarly significant effects based solely on automated processing.

8. Legal bases

We process personal data on the basis of performance of a contract, our legitimate interests in operating, improving and securing the Service, compliance with legal obligations, and your consent where required.

9. Sharing of information

We share personal data only with service providers that help us operate the Service, under written data processing agreements. These include providers of hosting and infrastructure, databases, authentication, AI processing, and the third-party platforms you choose to connect. We may also disclose data where required by law or to protect our rights, and in connection with a merger, acquisition or sale of assets. A list of our service providers is available on request.

Some providers are located outside the European Economic Area. In those cases, transfers are protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.

10. Cookies

We use only cookies that are strictly necessary to sign you in and keep the Service secure. We do not use advertising cookies. If we introduce analytics cookies, we will ask for your consent first.

11. Data retention

We retain personal data for as long as your account is active or as needed to provide the Service. When you disconnect an integration or delete your account, we delete the related data within 30 days, except where we must keep it to comply with legal obligations (for example, accounting records are retained for 7 years under Estonian law).

12. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit and restricted access controls.

13. Your rights

Under the GDPR you have the right to access, rectify or erase your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To exercise these rights, contact geo@answrbeauty.com. We respond within 30 days. You may also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee).

14. Children

The Service is intended for businesses and is not directed at individuals under 16.

15. Links to other websites

The Service may link to third-party websites. We are not responsible for their privacy practices.

16. Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be published on this page with its effective date, and we will notify you of material changes.

17. Contact

For any questions about this Privacy Policy, contact us at geo@answrbeauty.com.