Skip to content
Next GEOAI Agency

Privacy Policy

Last updated:

This policy explains in plain language what data is collected when you visit nextgeoagency.com or use the contact form, where it is stored and who it is shared with. The statutory disclosure (data controller, legal bases, your rights) is in the Privacy Notice issued under KVKK, Turkey’s Personal Data Protection Law No. 6698; this page is its practical companion.

How the site is built: why we collect so little

nextgeoagency.com consists of pre-rendered static HTML files published on Cloudflare Pages. There is no database, no membership and no session system; only two small server-side functions (Cloudflare Pages Functions) run: the endpoint that forwards the contact form to us and the endpoint of the AI bot access checker. Simply reading the site creates no record about you on our side. The two places where you send data are the contact form and the AI bot access checker, both of which you use voluntarily.

All traffic passes through Cloudflare’s network. Cloudflare processes requests on its own infrastructure to speed up the site and protect it from attacks. This is a technical layer the site cannot run without.

Contact form

The form has the following fields:

  • First and last name
  • Company name (optional)
  • Industry (optional)
  • E-mail address
  • Phone number (optional)
  • Your message

When you submit the form, the information goes to an endpoint on our own domain and reaches us as an e-mail delivered through Resend; it is not kept in a separate form database. Submissions pass a simple check that filters out non-human entries. We use the data only to answer your request, prepare a proposal and, where needed, contact you. Filling in the form does not add you to any newsletter or marketing list.

Please do not put sensitive data such as health information, national ID numbers, passwords or payment details in the message field; our services do not need them.

AI bot access checker

Two of the free tools (the GEO readiness score and the llms.txt generator) run entirely in your browser and send no data to our server. The AI bot access checker is different: the web address you enter is sent to the server-side function, because a browser cannot test another site’s server-side blocks on its own.

The function requests that address and the domain’s robots.txt file with fixed user-agent headers; your browser’s headers and cookies are not passed on to these requests. Only metadata about the responses is returned to you: status code, response time, size, redirect address, page title, noindex information and robots.txt decisions. The address you enter and the result are not written to any database or log file, and the response is not cached. Connection records for this request may be processed by Cloudflare, as with every other request to the site.

Measurement: Cloudflare Web Analytics

To understand how fast the site loads and which pages are visited we use Cloudflare Web Analytics. It adds a small script to the page (beacon.min.js from static.cloudflareinsights.com). As Cloudflare documents, this measurement uses no cookies, writes nothing to browser storage, does not fingerprint devices and does not retain IP addresses. We only see aggregated figures (page views, country, browser family, load time); it does not track individual visitors.

Google Analytics, Meta Pixel and similar advertising or behavioural tracking tools are not present on the site.

Third-party services

  • Resend (e-mail delivery): carries contact-form messages to us as e-mail. Its servers are located outside Türkiye.
  • Cloudflare (DNS, CDN, security, analytics): routes requests, applies the firewall and bot protection, and runs cookie-free performance measurement. Its security layer may set a short-lived strictly necessary cookie; details are in the Cookie Policy.
  • WhatsApp (Meta): the WhatsApp button on the site takes you to the WhatsApp app or web version. No WhatsApp code runs on the site before you click; after you click, the conversation is governed by WhatsApp’s own privacy policy.
  • Embedded images: some pages may load photographs from third-party image services; your browser sends your IP address to that service when requesting the image. No referrer information is sent with these requests.

Security of the data

The site is served over HTTPS only; all traffic, including form submissions, is encrypted. Because only two small server-side functions run and there is no persistent data store, the attack surface is narrow. Form data is accessed only by authorised team members through authenticated accounts. Our infrastructure providers are bound by their own security certifications and policies.

Retention and deletion

Form submissions are kept for at most 2 years after your request is closed; if a service relationship follows, statutory retention periods apply. You can ask for your submission to be deleted at any time by writing to info@nextgeoagency.com; the request covers both the delivery record at Resend and the e-mail on our side.

Children

The site is aimed at businesses and professionals; we do not knowingly collect data from anyone under 18. If we notice that a child has submitted the form, we delete the record.

Your rights and contact

Your rights to access, correct, delete and object to processing are described in detail in the Privacy Notice. For any question or request, write to info@nextgeoagency.com.

Updates to this policy

If we add a new tool to the site (for example an analytics cookie or a chat assistant), this page is updated and, where required, your explicit consent is requested. The date at the top shows the last update.