--- title: "Privacy policy · butGEO" description: "How Shenzhen Yanyu Technology Co., Ltd. collects, uses, shares and protects your personal information when providing butGEO, and the rights you have." canonical_url: "https://www.butgeo.com/en/legal/privacy" meta: "og:description": "How Shenzhen Yanyu Technology Co., Ltd. collects, uses, shares and protects your personal information when providing butGEO, and the rights you have." "og:title": "Privacy policy" "twitter:description": "How Shenzhen Yanyu Technology Co., Ltd. collects, uses, shares and protects your personal information when providing butGEO, and the rights you have." "twitter:title": "Privacy policy" --- Legal # Privacy Policy Last updated: October 20, 2026 ## **1. Introduction** We protect your personal information as the law requires. This Privacy Policy (the “Policy”) forms part of the Terms of Service and explains how we collect, store, use, share and otherwise process your personal information when you use the Service, and how you can access, correct and delete it and exercise your other rights. Anything that bears materially on your information rights is highlighted so you can find it quickly. Please read and understand this Policy before using the Service. This Policy covers every feature and service that Shenzhen Yanyu Technology Co., Ltd. (“we”, “us”) provides through butGEO (www.butgeo.com) and related services (together, the “Service”). Where a specific feature or scenario has its own information-handling rules, we surface them in a pop-up or on the page, and those notices form part of this Policy. This Policy does not cover products and services provided independently by third parties — for example the third-party AI engines and their answers you see in tracking results, the third-party pages cited inside those answers, or integrations you connect yourself. How those parties handle data is agreed between you and them. ## **2. Definitions** “Personal information” means information recorded electronically or otherwise that relates to an identified or identifiable natural person, excluding anonymized information. “Sensitive personal information” means personal information that, if leaked or misused, could readily harm personal dignity or endanger personal or property safety — including biometric data, religious beliefs, specific identity, medical health, financial accounts and location tracking, as well as information about minors under 14. “Processing” covers collecting, storing, using, transforming, transmitting, providing, disclosing and deleting personal information. “Anonymization” means processing personal information so that it cannot identify a specific natural person and cannot be reversed. “User” means a natural person who registers, logs into or uses the Service, also referred to as “you”. ## **3. Personal Information We Collect and How We Use It** We collect and use your personal information only for the purposes described below. 1\. Account information — When you log in via WeChat QR code, we receive your WeChat identifier (OpenID or UnionID), nickname and avatar from the WeChat Open Platform. We use them to create and recognise your account and show your identity. Without them you cannot register or sign in. 2\. Contact information — When you book a demo, contact us or subscribe to updates, we collect the name, email, company, role and anything else you type in, so we can reply. 3\. Tracking configuration and workspace content — To run AI answer tracking and citability scoring, we process what you create, edit, upload, generate or publish: workspace names, monitored domains, brand and competitor terms, tracked prompts, target markets and languages, plus links to and snapshots of the pages you ask us to score. This is your business input, and we use it only to deliver the corresponding features. 4\. AI answer snapshots — For the prompts you configure, we query third-party AI engines and record the public answers they return, the cited sources, capture timestamps and the visibility metrics we derive. Do not put personal information into prompts or other inputs; if you must include any, use only content you are authorised to submit. 5\. Payment information — Subscription payments run through WeChat Pay or Alipay. We never see your payment password or card details. We keep only the order number, plan snapshot, amount, payment status and receipt, used to activate entitlements, reconcile accounts and support you afterwards. Those records stay for the period tax and accounting rules require. 6\. Integration credentials — When you enable Slack, Looker Studio, BigQuery, Google Sheets or similar destinations, we store the corresponding credentials (webhook URLs, connection parameters) so we can push data. These are sensitive keys into your systems: they are stored encrypted, used under least privilege, and you can disconnect and delete them at any time. 7\. Device and log information — To keep accounts and the service secure, fix faults and improve the product, we automatically collect the essentials: device model, OS version, browser type and version, IP address, access times and error logs. These are kept in server logs and are not used to identify individuals. 8\. Enquiries and correspondence — When you email us or reach out through in-product channels, we keep your contact details and the content of the exchange so we can locate the issue and solve it. ## **4. Cookies and Similar Technologies** We use the cookies and browser storage (localStorage, sessionStorage) we need to keep you signed in and remember language and basic preferences. Without them you cannot log in or use the Service normally. Where we use analytics cookies to measure usage and performance, we use them only to improve the Service, and never to track what you do outside it. Manage or delete cookies from your browser settings; most browsers let you reject all cookies or warn you when one is sent. Blocking them may affect how the Service behaves. Anything collected through cookies and related technologies is handled under this Policy. ## **5. How We Use Collected Information** In line with the law and our agreement with you, we use collected information for the following purposes: 1\. To provide, maintain and improve the Service — account management, AI answer tracking, visibility and citability scoring, reports and alerts, order processing and entitlement activation. 2\. To keep accounts and the Service secure — identity verification, security controls, fraud monitoring, risk assessment, anomaly detection and content compliance review. 3\. To improve the experience — product analytics, performance monitoring, troubleshooting and feature iteration based on usage data. 4\. To communicate with you — service notices such as account changes, order status and feature updates, plus handling your questions, complaints and feedback. 5\. To produce statistical reports or business analysis from anonymized data that cannot identify anyone, for internal research or external publication, such as AI visibility trend reports. 6\. For other purposes the law requires, or that you have consented to. If we want to use your personal information for a purpose this Policy does not describe, or to use for another purpose information collected for one purpose, we ask you first. ## **6. Entrusted Processing, Sharing, and Disclosure** We do not sell your personal information. We share it or entrust its processing only in these cases: 1\. WeChat Open Platform — used for QR code login. We receive the identifier (OpenID/UnionID), nickname and avatar to create and link your account. WeChat Open Platform is operated by Shenzhen Tencent Computer Systems Company Limited. 2\. AI engines and their interfaces — to retrieve the answers that match your configured prompts, we submit those prompts plus the request metadata we need (target region, language) to third-party AI engines, including overseas providers such as OpenAI, Google, Anthropic and Perplexity, and domestic providers such as Doubao, Qwen, Kimi, Hunyuan, MiniMax and GLM. We send only what the feature needs, and we recommend not putting personal or confidential content in prompts. 3\. Payment providers — subscriptions are processed by WeChat Pay (Tenpay Payment Technology Co., Ltd.) or Alipay (Alipay (China) Network Technology Co., Ltd.). We pass only what the transaction needs, such as order number and amount, and receive notice of the payment result when it completes. 4\. Cloud and analytics providers — third-party cloud infrastructure stores and processes your data, and analytics tools help us understand performance. Each gets only the data required for its function, under confidentiality and data-processing agreements that require protection at least as strong as the law demands. 5\. Integration destinations — we push reports to Slack, Looker Studio, BigQuery, Google Sheets and similar targets only once you enable them, and only in the scope you choose. Beyond the above, we disclose personal information only: (1) with your express consent or because you chose to make it public; (2) where law compels it or judicial and administrative authorities lawfully require it; (3) where necessary to respond to a public health emergency or protect life, health or property in an emergency. If a merger, division, dissolution, acquisition or asset transfer moves your personal information to another party, we tell you who that is and how to reach them, and we require them to keep honouring this Policy. If they change the purpose or method of processing, they must obtain your consent again. ## **7. Information Storage and Security** Where it lives: personal information we collect and generate inside China is stored inside the People’s Republic of China, as the law requires. One function necessarily crosses a border: tracking AI answers means submitting the prompts you configure to overseas AI engines and receiving their public answers back. We tell you, as the law requires, why it leaves the country, who receives it, how it is handled, what categories are involved, how long it is kept and how you exercise your rights — and where separate consent is required, we ask for it first. Outside that scenario we do not provide your personal information overseas. How long: we keep personal information only for the minimum period the purposes in this Policy require, unless law mandates longer retention or it is needed to resolve disputes or meet security audit obligations. Once that period ends we delete or anonymize it. Security measures: we apply industry-standard safeguards, including TLS/SSL encryption in transit; access control, permission tiers and least privilege; encrypted storage of sensitive credentials such as integration keys; regular security assessments and vulnerability scans; and privacy training plus confidentiality agreements for staff. Incident response: if a personal information security incident occurs, we activate our emergency plan, tell you promptly what happened, the likely impact, what we have done and will do, and what you can do to protect yourself — and report to regulators as required. We reach you by email or in-product notice. Even so, the internet is not an absolutely secure environment. Protect your account, avoid signing in on devices or networks you do not trust, and keep personal details out of prompts and tickets where they are not needed. If you suspect a leak, contact us right away. ## **8. Your Rights** We protect your right to exercise the following rights over your personal information: 1\. Access and copy — you may request access to and a copy of the personal information we hold. Basic profile fields are visible in account settings; other requests can be made through the contact details in this Policy. 2\. Correction and completion — you may request that inaccurate or incomplete personal information be corrected or completed, and you can change some fields yourself in settings. 3\. Deletion — you may ask us to delete personal information where: (1) the purpose is achieved, cannot be achieved, or is no longer necessary; (2) we stop providing the product or the retention period ends; (3) you withdraw consent and processing rested on it; (4) we processed it in violation of law or our agreement; (5) other circumstances the law provides. Records the law requires us to keep, or that relate to unfinished transactions or disputes, may not be deletable yet; we will explain why. 4\. Portability — subject to law and cyberspace administration rules, you may ask us to transfer your personal information to a processor you designate. 5\. Account cancellation — apply through the contact details in this Policy. Afterwards we stop serving you and delete or anonymize your personal information, except where law says otherwise. 6\. Withdrawing consent — where processing rests on your consent rather than contract or legal duty (submitting prompts to overseas AI engines, publishing case data), you can withdraw it at any time. Withdrawal does not undo processing already carried out on that basis. 7\. Restricting further processing — you can disable third-party integrations, delete stored credentials, or switch off auto-renew at any time in settings to limit further processing. 8\. Close relatives — after a person’s death, close relatives may exercise access, copy, correction and deletion rights over their personal information for their own lawful and proper interests, unless the deceased arranged otherwise. 9\. How we respond — we review and handle your requests promptly. Reasonable requests are free; repetitive, excessive or technically disproportionate ones may attract a reasonable fee or be declined, as the law allows. ## **9. Protection of Children's Personal Information** The Service is aimed at adults. We do not proactively collect personal information from children under 14. If you are under 14, use the Service only once a guardian has read and expressly agreed to this Policy, and only under their guidance. If you are under 18, use the Service only with a guardian’s supervision, guidance and consent, after carefully reading this Policy. Guardians, please check whether the minor in your care is using the Service with your authorisation. If you find they gave us personal information without your consent, contact us as described below and we delete it promptly. We do not push commercial advertising to minors or build profiles of them. ## **10. Updates to This Policy** We may revise this Policy as laws, regulatory requirements or the service change. Revised versions are posted on the Service pages with updated and effective dates. Where the purpose, method or categories of personal information processing change materially, we notify you conspicuously — in-product announcement or pop-up — and re-obtain consent where necessary. Material changes include but are not limited to: (1) a significant change to how the service works, such as the purpose, type or use of personal information processing; (2) a change in ownership or organisation, such as a different controller after a merger or division; (3) a change in who we mainly share, transfer or disclose personal information with; (4) a change in overseas transfer scenarios, recipients or safeguards; (5) a change in your rights over personal information or how you exercise them. Continuing to use the Service after a revision takes effect means you accept it. If you disagree, stop using the Service and contact us as described in this Policy to settle outstanding matters. Check this page periodically for the latest version. ## **11. How to Contact Us** We have designated a personal information protection officer responsible for privacy matters. For questions, comments, suggestions or complaints about this Policy or how we handle personal information, or to exercise your rights, contact us here: Email: red@rainsss.com Company: Shenzhen Yanyu Technology Co., Ltd. This Policy is drawn up in Chinese. This English version is for reference only; in case of conflict, the Chinese version prevails. ## Sitemap See the full [sitemap](/sitemap.md) for all pages.