Security & Trust

Merchants entrust BoostGeo with sensitive commercial context — product catalogs, channel strategy, and operational priorities. We treat that trust as a core product requirement, not a side concern.

This page summarizes our current security posture for the BoostGeo marketing site and our product direction. Application-specific controls for installed commerce apps may be documented separately as those products expand.

Principles

• Least privilege — access to systems and data is limited to what is required for the work.
• Merchant control — catalog changes and writebacks should remain reviewable and intentional.
• Clear boundaries — marketing-site inquiries are handled separately from production merchant systems.
• Continuous improvement — security practices mature with product scope and customer requirements.

Marketing website

The public website at www.boostgeo.com collects only the information you choose to submit through contact forms or email. Details are covered in our Privacy Policy.

• Transport encryption via HTTPS
• No advertising trackers currently in use on the marketing site
• Form submissions delivered through a controlled email intake path

Product & data handling direction

As BoostGeo delivers AI visibility, website readiness, and generative engine optimization capabilities, we design around:

• Scoped access to merchant catalog and store data
• Separation between environments (development, staging, production)
• Auditability for operational actions that affect merchant catalogs
• Vendor due diligence for infrastructure and AI providers we rely on

Compliance roadmap

We are building toward enterprise expectations around privacy and security assurance. Formal certifications (such as SOC 2) are on our roadmap and will be published here when completed — we will not claim certifications we have not earned.

Responsible disclosure

If you believe you have found a security issue related to BoostGeo properties, please email security@boostgeo.com with details. Please avoid public disclosure until we have had a reasonable chance to investigate and respond.

Service availability

Current availability and incident updates are published on the independently hosted BoostGeo Status page. Customers can subscribe there for incident notifications.

Enterprise conversations

Security questionnaires, DPAs, and vendor reviews are welcome. Contact hello@boostgeo.com or use the contact form and note that your inquiry is security-related.