Last updated: August 20, 2026 · Effective date: August 20, 2026
GenOptima Technology Co., Ltd. ("GenOptima", "we", "us", or "our") respects your privacy.
This Privacy Policy explains how we collect, use, disclose, retain, protect, and otherwise
process personal information when you visit our website, submit a form, request a GEO audit,
communicate with us, use our online services, or otherwise interact with us in connection
with this website (collectively, the "Services").
Important: This Policy is designed to provide broad transparency across
jurisdictions. It does not replace any jurisdiction-specific notice, consent mechanism,
cookie banner, data-processing agreement, or other disclosure that may be required by law
for a particular processing activity. Our actual processing depends on the features,
integrations, cookies, advertising technologies, and services enabled on the relevant page.
1. Who We Are and How to Contact Us
The entity responsible for the processing described in this Policy is
GenOptima Technology Co., Ltd.. For privacy questions, data-subject
requests, complaints, or other privacy matters, contact us at
info@gen-optima.com.
Where applicable law requires the appointment of a data protection officer, local
representative, or other privacy contact, the relevant contact information will be
provided through the applicable jurisdiction-specific notice or by contacting us.
2. Scope and Third-Party Services
This Policy applies to personal information processed by GenOptima through the Services.
It does not govern third-party websites, applications, platforms, or services that are
linked to or integrated with our website but are controlled by independent third parties.
Those parties may have their own privacy notices and terms.
For example, if you choose to contact us through WhatsApp, LinkedIn, email, or another
third-party communication platform, that platform may independently collect and process
information about you. We do not control the privacy practices of those third parties.
You should review their privacy notices before using those services.
3. Personal Information We May Collect
Depending on how you interact with the Services, we may collect the following categories:
3.1 Contact and identification information
- Name, business email address, telephone or mobile number.
- Company name, job title, department, industry, country or region.
- Contact preferences and other information you voluntarily provide.
3.2 Business and service information
- Your company website or other URLs submitted for an audit or assessment.
- Information about your business, products, services, competitors, markets, and GEO objectives.
- Questions, comments, project requirements, meeting information, and communications with us.
- Information contained in documents or attachments you voluntarily submit.
3.3 Technical and usage information
- IP address, approximate location derived from IP address, browser type, device type, operating system, language, time zone, and similar technical identifiers.
- Pages viewed, links clicked, referring pages, dates and times of access, session information, and interaction events.
- Cookie identifiers, advertising identifiers, analytics identifiers, and similar technologies where enabled and permitted.
3.4 Marketing and campaign information
- Campaign source, UTM parameters, landing-page interactions, referral information, and conversion events.
- Marketing preferences, subscription status, and records of opt-outs or consent where applicable.
3.5 Communications and third-party contact information
If you contact us by email, WhatsApp, social media, telephone, or another channel, we may
receive your contact details, message content, attachments, timestamps, and other information
contained in the communication, subject to the practices of the relevant platform.
3.6 Payment information
If payment functionality is introduced or used through the Services, payment-card or other
financial information may be processed by the applicable payment provider. Unless expressly
stated otherwise, we do not intentionally store complete payment-card numbers or security
codes on our own systems.
4. Information We Do Not Intentionally Request
The Services are intended for business and professional use. We do not require you to submit
sensitive personal information such as government identification numbers, financial account
credentials, precise geolocation, health information, biometric identifiers, racial or ethnic
information, religious beliefs, sexual-orientation information, or similar sensitive data.
Please do not submit such information unless we specifically request it through a lawful,
secure process. If you voluntarily provide sensitive information, we may process it only to
the extent permitted by applicable law and only when reasonably necessary for the stated
purpose, or we may delete or securely isolate it where appropriate.
5. How We Collect Information
We may obtain personal information from:
- You directly, including when you complete forms, request an audit, contact us, subscribe, or communicate with us.
- Your device or browser, through server logs, cookies, pixels, tags, SDKs, and similar technologies where enabled.
- Third parties, such as business partners, event organizers, service providers, advertising platforms, or professional networking platforms, where lawful.
- Public or professional sources, such as publicly available business websites or professional profiles, where permitted by applicable law.
When we obtain personal information from a source other than the individual, we will provide
any additional information required by applicable law within the applicable timeframe.
6. Purposes of Processing
We may process personal information for the following purposes:
- Responding to inquiries, requests, and communications.
- Providing GEO audits, visibility assessments, recommendations, and related services.
- Scheduling meetings, managing prospective or existing business relationships, and providing customer support.
- Operating, maintaining, securing, troubleshooting, and improving the website and Services.
- Measuring website performance, traffic, campaign effectiveness, and user experience.
- Detecting, preventing, investigating, and addressing fraud, abuse, security incidents, and other misuse.
- Complying with legal obligations, regulatory requests, court orders, and lawful government requests.
- Establishing, exercising, or defending legal claims and protecting our rights, property, personnel, and users.
- Sending service-related communications and, where legally permitted, business or marketing communications.
- Managing preferences, consent, suppression, and opt-out records.
- Conducting internal reporting, analytics, forecasting, and business administration using information proportionate to the purpose.
7. Legal Bases for Processing (Where GDPR/UK GDPR Applies)
Where the EU GDPR, UK GDPR, or another law requiring a lawful basis applies, we will rely on
an appropriate legal basis for each processing activity. Depending on the circumstances, these
may include:
- Performance of a contract or pre-contractual steps: for providing requested services, responding to an audit request, scheduling or preparing for a business engagement, and taking steps at your request before entering into a contract.
- Consent: where required for optional cookies, certain marketing communications, or other processing for which consent is legally required. You may withdraw consent at any time, without affecting processing that occurred before withdrawal.
- Legitimate interests: for reasonable business operations, security, service improvement, B2B relationship management, fraud prevention, and certain direct marketing activities where permitted and where our interests are not overridden by your rights and freedoms.
- Legal obligation: where processing is necessary to comply with applicable law.
- Vital interests or public interest: only where applicable and legally available.
Where we rely on legitimate interests, we will consider whether the processing is necessary,
proportionate, reasonably expected, and balanced against individual rights and freedoms.
Where electronic marketing laws require consent, we will not rely on legitimate interests as
a substitute for that required consent.
8. Marketing Communications
We may send business-related communications, including responses to inquiries, service
information, product updates, event information, newsletters, or other marketing content,
subject to applicable law.
Where consent is required, we will seek it before sending the relevant marketing. Where a
jurisdiction permits certain B2B marketing without prior consent, we will comply with the
applicable requirements, including providing a clear and easy way to object or unsubscribe.
You may opt out of marketing communications at any time by using an unsubscribe mechanism
or contacting info@gen-optima.com.
Opting out of marketing does not necessarily stop service, security, transactional, or other
non-marketing communications that are necessary to provide requested services or comply with law.
9. Cookies, Analytics, Advertising, and Similar Technologies
We may use cookies, pixels, tags, local storage, server-side measurement, analytics tools,
advertising technologies, and similar mechanisms. These technologies may collect technical
and usage information such as IP address, browser/device information, pages visited,
interactions, referral sources, and conversion events.
9.1 Strictly necessary technologies
These may be used to provide core website functions, security, session management, form
functionality, and other features that cannot reasonably operate without them.
9.2 Analytics and performance technologies
Where enabled, analytics tools may help us understand traffic, engagement, performance,
and conversion activity. We will obtain consent where applicable law requires consent for
non-essential analytics technologies.
9.3 Advertising and remarketing technologies
Where enabled, advertising or remarketing tools may measure advertising performance or help
us reach audiences who have interacted with our website or content. Depending on the
technology and jurisdiction, this activity may constitute "sharing" or targeted advertising
under applicable privacy laws. We will provide the controls and notices required by applicable law.
Cookie notice: The specific cookies and technologies used on a particular
page may change over time. A cookie preference mechanism should be used wherever legally
required for non-essential technologies. Browser-level controls do not always replace
legally required consent or opt-out mechanisms.
10. AI, Automated Processing, and GEO Analysis
Because our Services concern generative-engine optimization and AI visibility, we may use
automated systems or AI-enabled tools to analyze website content, search results, brand
visibility, structured information, submitted URLs, and related business information.
We seek to minimize unnecessary personal information in AI-related processing. You should
not submit sensitive personal information, passwords, authentication credentials, payment
credentials, or confidential personal data in a GEO audit request unless specifically
requested through an appropriate secure process.
Unless a separate notice states otherwise, we do not intend to make decisions producing
legal or similarly significant effects about individuals solely through automated processing.
GEO scores, recommendations, rankings, or visibility assessments are business and marketing
analysis and should not be interpreted as decisions about an individual's employment,
credit, insurance, housing, health, or other legal rights.
If applicable law provides rights concerning automated decision-making, profiling, or similar
technologies, we will provide the notices, human-review mechanisms, opt-out rights, or other
safeguards required by that law.
11. How We Share and Disclose Personal Information
We may disclose personal information only as reasonably necessary for the purposes described
in this Policy, subject to applicable law. Categories of recipients may include:
- Hosting, cloud infrastructure, content delivery, cybersecurity, and IT providers.
- CRM, lead-management, customer-support, email, scheduling, and communication providers.
- Analytics, conversion measurement, advertising, and marketing technology providers.
- AI, search, data-processing, and software providers used to deliver or improve the Services.
- Professional advisers, auditors, insurers, legal counsel, and other professional service providers.
- Affiliated entities or business partners where necessary and lawful.
- Government authorities, regulators, courts, law-enforcement bodies, or other parties where required or permitted by law.
- Parties involved in a merger, acquisition, financing, restructuring, sale of assets, or similar corporate transaction, subject to applicable confidentiality and privacy requirements.
We do not permit service providers to use personal information for purposes inconsistent with
our instructions where they are acting as processors/service providers, except where
independent processing is permitted or required by law.
12. Sale, Sharing, and Targeted Advertising
We do not sell personal information for monetary consideration in the ordinary course of
operating the Services. However, certain advertising or analytics activities may be treated
as "sharing" or cross-context behavioral advertising under laws such as the CCPA even when
no money is exchanged directly for the information.
If an activity is legally considered a sale or sharing, we will provide the applicable
opt-out mechanism, honor applicable privacy preference signals such as Global Privacy Control
where required, and maintain records of valid opt-out requests. We will not discriminate
against you for exercising privacy rights.
13. Categories of Personal Information and Business Purposes
| Category | Examples | Typical purposes |
|---|
| Identifiers | Name, email, phone, IP address, account or device identifiers | Communication, service delivery, security, analytics |
| Professional information | Company, title, industry, business website | GEO audit, sales qualification, account management |
| Commercial information | Services requested, interests, communications, project information | Providing and improving Services |
| Internet or network activity | Pages viewed, clicks, referring URLs, browser/device information | Security, analytics, performance, advertising where enabled |
| Inferences | Business interests or service preferences inferred from interactions | Service personalization and marketing where permitted |
| Geolocation | Approximate location inferred from IP address | Security, localization, analytics where enabled |
| Communications | Messages, support requests, submitted content | Responding, support, recordkeeping, dispute handling |
14. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes
described in this Policy, unless a longer period is required or permitted by law.
Retention depends on the type of information, the nature of the relationship, security
requirements, legal obligations, dispute periods, and business needs.
- Lead and inquiry information: generally retained while the inquiry or business relationship is active and for a reasonable period afterward for follow-up, recordkeeping, legal, and compliance purposes.
- Customer and contract records: retained for the duration of the relationship and for the period required or reasonably necessary for accounting, tax, legal, warranty, dispute, and compliance purposes.
- Marketing preferences and suppression records: retained as necessary to honor opt-outs and prevent future unwanted marketing.
- Security and technical logs: retained for periods appropriate to security, troubleshooting, fraud prevention, and legal requirements.
- Cookie and analytics data: retained according to the applicable technology configuration and retention settings.
When personal information is no longer required, we will delete, anonymize, aggregate, or
securely isolate it, subject to legal or operational exceptions.
15. Data Security
We use reasonable administrative, organizational, physical, and technical safeguards
appropriate to the nature and risk of the information. These may include access controls,
authentication, least-privilege practices, encryption in transit where supported, secure
development practices, monitoring, backups, vendor controls, and incident-response procedures.
No internet transmission, storage system, or electronic communication is completely secure.
Accordingly, we cannot guarantee absolute security. You should avoid submitting passwords,
payment credentials, highly sensitive personal information, or confidential information
through ordinary website forms or email.
16. Data Breaches and Security Incidents
If we become aware of a personal-information security incident, we will investigate,
contain, remediate, document, and notify affected individuals or regulators when and to
the extent required by applicable law. Notification timing and content may depend on the
jurisdiction, nature of the incident, risk of harm, and applicable legal requirements.
17. International Data Transfers
GenOptima and its service providers may operate in different countries. Personal information
may therefore be processed or stored outside your country of residence.
Where a jurisdiction restricts international transfers, we will use an appropriate transfer
mechanism where required, such as an adequacy decision, standard contractual clauses,
contractual safeguards, approved certification mechanisms, or another legally recognized
mechanism. Additional safeguards may be applied based on the nature and risk of the transfer.
If Chinese personal information is transferred outside mainland China, the transfer will be
handled in accordance with applicable Chinese data and personal-information laws and the
applicable cross-border transfer mechanism and filing/assessment requirements, where triggered.
18. Your Privacy Rights — General
Depending on where you live and which law applies, you may have rights including:
- Access to personal information we hold about you.
- Correction of inaccurate or incomplete information.
- Deletion or erasure, subject to legal exceptions.
- Restriction of certain processing.
- Objection to certain processing, including direct marketing.
- Withdrawal of consent where processing relies on consent.
- Data portability in circumstances where legally required.
- Information about categories of recipients and sources.
- Opt-out of certain sales, sharing, targeted advertising, or profiling activities where applicable.
- Rights concerning sensitive personal information where applicable.
- Rights concerning certain automated decision-making or profiling where applicable.
- The right to lodge a complaint with an applicable data protection authority.
These rights are not absolute and may be subject to statutory exceptions, verification
requirements, legal privilege, security needs, contractual obligations, or other lawful
restrictions.
19. European Economic Area and United Kingdom
If the EU GDPR or UK GDPR applies to you, you may have the rights described in the applicable
law, including access, rectification, erasure, restriction, objection, portability, and
withdrawal of consent where relevant. You may also object at any time to direct marketing.
Where we process information based on legitimate interests, you may object to that processing
on grounds relating to your particular situation, subject to applicable legal exceptions.
Where direct marketing is involved, we will stop processing your personal information for
direct marketing after a valid objection.
You may also lodge a complaint with the supervisory authority in the country where you live,
work, or believe an infringement occurred. We encourage you to contact us first so that we
can attempt to resolve the issue promptly.
20. California Privacy Rights
If you are a California resident and the CCPA applies to our processing, you may have rights
to know/access, delete, correct, opt out of sale or sharing, limit certain uses of sensitive
personal information, and receive equal treatment for exercising your rights, subject to
applicable exceptions.
If we engage in a sale or sharing covered by California law, we will provide a clear mechanism
to submit the applicable opt-out request and will honor valid preference signals such as
Global Privacy Control where required.
To submit a California privacy request, contact
info@gen-optima.com. We may need to verify your identity
to protect against unauthorized disclosure. We will only request information reasonably
necessary for verification and will not use verification information for unrelated purposes.
We will not discriminate against you for exercising rights provided by California law.
Authorized agents may submit requests where permitted by law, subject to applicable
authorization and verification requirements.
21. China Personal Information Protection
Where the Personal Information Protection Law of the People's Republic of China ("PIPL") or
other Chinese privacy and data-security laws apply, we will process personal information in
accordance with applicable requirements, including purpose limitation, data minimization,
transparency, security, individual rights, and applicable requirements for sensitive
personal information.
Individuals may have rights including access, copying, correction, deletion where legally
available, withdrawal of consent, explanation of processing rules, and other rights provided
by applicable Chinese law.
Where personal information is provided outside mainland China, we will follow applicable
cross-border transfer requirements, including any required separate consent, personal
information protection impact assessment, standard contract, certification, security
assessment, filing, or other legally applicable mechanism.
22. Other Jurisdictions
Privacy rights vary by jurisdiction. If you are located in Brazil, Canada, Australia, Japan,
Singapore, or another jurisdiction with applicable privacy legislation, you may have
additional rights or protections. We will apply mandatory local requirements to processing
within the relevant scope.
If a local law provides a right or protection that is more protective than this Policy,
the applicable law will prevail to the extent required.
23. How to Exercise Your Rights
Send your request to info@gen-optima.com with enough
information for us to understand your request. Please identify the right you are exercising
and, where possible, the email address or other contact information previously used with us.
We may request additional information to verify identity when reasonably necessary. We will
not ask for unnecessary sensitive information solely to process a privacy request. If we
cannot fulfill a request, we will explain the reason to the extent required by law.
We generally respond within the timeframe required by the applicable law. Some laws allow
extensions for complex or multiple requests; where an extension is permitted, we will notify
you as required.
24. Children and Minors
The Services are intended for business and professional audiences and are not directed to
children. We do not knowingly collect personal information from children through the Services
where prohibited by law. If you believe a child has provided personal information to us,
contact info@gen-optima.com so that we can assess and
take appropriate action.
25. Third-Party Links and Platforms
Our website may contain links to third-party websites, social platforms, messaging services,
event pages, booking tools, or other external services. Clicking those links may cause your
information to be processed by the third party. We are not responsible for the privacy,
security, content, or practices of third-party services. Please review the applicable
third-party privacy notices before providing information.
26. Business Transfers
If GenOptima undergoes a merger, acquisition, financing, restructuring, reorganization,
bankruptcy, sale of assets, or similar transaction, personal information may be transferred
as part of that transaction. We will handle such transfers in accordance with applicable
law and contractual confidentiality requirements.
27. Legal Requests and Protection of Rights
We may disclose personal information when reasonably necessary to comply with applicable
law, lawful process, court orders, regulatory requirements, government requests, or to
establish, exercise, or defend legal claims; prevent fraud or abuse; protect the rights,
property, safety, and security of GenOptima, our users, or others; or enforce applicable
agreements.
28. Changes to This Privacy Policy
We may update this Policy from time to time to reflect changes in our Services, technologies,
business practices, legal requirements, or privacy practices. The "Last updated" date at the
top of this Policy will be changed when material revisions are made.
Where applicable law requires advance notice or consent for a material change, we will provide
the required notice or obtain the required consent. We encourage you to review this Policy
periodically.
29. Data Minimization and Accuracy
We seek to collect information that is reasonably relevant to the purposes for which it is
used. You are responsible for ensuring that information you provide to us is accurate and
appropriate for the purpose. Please notify us if your information changes or if you believe
information we hold about you is inaccurate.
30. Confidentiality and Business Information
A privacy policy does not by itself create a contractual confidentiality obligation for all
information submitted to the website. Do not submit trade secrets, source code, passwords,
security credentials, regulated information, or other highly confidential material through
a public form unless a separate confidentiality or secure-submission arrangement is provided.
Where a separate contract, NDA, data-processing agreement, or service agreement applies, that
agreement may impose additional obligations.
31. Severability and Applicable Law
If any provision of this Policy is determined to be invalid or unenforceable, the remaining
provisions will remain effective to the extent permitted by law. This Policy is intended to
operate together with mandatory privacy, data-protection, consumer-protection, and electronic
communications laws applicable to the relevant processing activity.
32. Contact
For privacy questions, requests, complaints, or concerns:
info@gen-optima.com
Privacy commitment: We aim to collect only what we reasonably need, use
personal information for identified purposes, protect it with appropriate safeguards,
respect applicable privacy choices, and respond to lawful privacy requests.
最后更新：2026 年 8 月 20 日 · 生效日期：2026 年 8 月 20 日
GenOptima Technology Co., Ltd.（“GenOptima”“我们”或“本公司”）重视您的隐私。
本《隐私政策》说明当您访问本网站、提交表单、申请 GEO 诊断、与我们沟通、
使用在线服务，或以其他方式就本网站与我们互动时（统称“服务”），
我们如何收集、使用、披露、保存、保护及以其他方式处理个人信息。
重要说明：
本政策旨在针对不同司法辖区提供较为全面的透明度说明，但不能替代特定地区法律要求的
单独隐私告知、Cookie 同意机制、数据处理协议、跨境传输文件或其他专项披露。
实际的数据处理活动取决于相关页面实际启用的功能、集成、Cookie、广告技术、分析工具和服务。
如本政策与适用法律的强制性要求存在冲突，以适用法律要求为准。
1. 我们是谁以及如何联系我们
本政策所述个人信息处理活动的责任主体为 GenOptima Technology Co., Ltd.。
如您就隐私、个人信息权利、投诉、删除请求、访问请求或其他隐私事项需要联系我们，
请发送邮件至 info@gen-optima.com。
如适用法律要求指定数据保护官、境内代表、欧盟/英国代表或其他本地隐私联系人，
我们将在相应地区的专项隐私告知中提供相关联系方式，或在您联系我们后依法提供。
2. 适用范围与第三方服务
本政策适用于 GenOptima 通过本服务处理的个人信息。对于由独立第三方控制的网站、
应用程序、平台、插件或服务，即使其链接至或集成于本网站，本政策也不直接适用。
第三方可能适用其自身的隐私政策、Cookie 政策和服务条款。
例如，当您选择通过 WhatsApp、LinkedIn、电子邮件、社交媒体或其他第三方平台联系我们时，
相应平台可能独立收集并处理您的账号信息、设备信息、通信内容、使用数据或其他信息。
我们无法控制该等第三方的隐私做法，建议您在使用前查阅其隐私政策。
3. 我们可能收集的个人信息
根据您与服务互动的方式，我们可能收集以下类别的信息：
3.1 联系与身份信息
- 姓名、工作邮箱、电话号码或手机号码。
- 公司名称、职位、部门、行业、所在国家或地区。
- 联系偏好以及您主动提供的其他信息。
3.2 业务与服务相关信息
- 您为 GEO 诊断、评估或项目提交的公司网站、页面 URL 或其他公开链接。
- 与您的业务、产品、服务、竞争对手、目标市场和 GEO 目标有关的信息。
- 咨询问题、项目需求、会议信息、沟通记录和您向我们提出的意见。
- 您主动上传或发送的文档、附件、演示材料中的信息。
3.3 技术与使用信息
- IP 地址、由 IP 推断的大致地理位置、浏览器类型、设备类型、操作系统、语言、时区及类似技术标识符。
- 访问页面、点击链接、来源页面、访问时间、会话信息、滚动或互动事件。
- 在已启用且法律允许的情况下，Cookie 标识符、广告标识符、分析标识符及类似技术数据。
3.4 营销与广告活动信息
- 广告来源、UTM 参数、落地页互动、推荐来源和转化事件。
- 营销偏好、订阅状态以及适用情况下的同意、撤回同意和退订记录。
3.5 通信与第三方联系信息
如果您通过电子邮件、WhatsApp、社交媒体、电话或其他渠道联系我们，
我们可能收到您的联系方式、消息内容、附件、时间戳以及通信中包含的其他信息，
同时相关平台也可能按照其自身政策处理相同或类似数据。
3.6 公开来源与商业信息
为提供 GEO、品牌可见性分析、竞争分析、市场研究或业务开发服务，
我们可能处理来自公开网站、搜索结果、公开社交媒体页面、企业目录、新闻来源、
AI 生成结果或其他合法公开来源中的商业信息。若相关信息构成个人信息，
我们将根据适用法律处理。
4. 我们不会主动要求您提供的信息
除非某项服务明确需要并提供相应的安全与合规安排，我们不会主动要求您通过公开表单提交：
身份证件号码、银行卡完整信息、支付凭证、密码、API 密钥、登录凭证、医疗信息、生物识别信息、
精确定位、儿童信息、政治观点、宗教信仰、工会信息、性生活或其他高度敏感信息。
请勿通过公开表单或普通电子邮件提交商业秘密、源代码、内部访问凭证、
未公开财务资料或其他高度机密内容。如项目确有需要，应通过双方约定的安全渠道和合同机制处理。
5. 我们如何获取信息
- 由您直接提供，例如提交表单、发送邮件、申请 GEO 诊断、预约会议或联系我们。
- 在您访问网站时由技术自动产生，例如设备信息、Cookie、日志和页面互动数据。
- 通过您授权或选择使用的第三方平台获得，例如广告平台、CRM、社交媒体或通信工具。
- 从合法公开来源、企业网站、公开数据库和商业信息来源获得。
- 在企业客户或合作伙伴依法向我们提供业务联系人信息时获得。
6. 我们处理个人信息的目的
我们可能基于以下目的处理个人信息：
- 回复咨询、安排会议、提供 GEO 诊断、报价、演示、咨询或其他您请求的服务。
- 评估品牌 AI 可见性、引用情况、推荐表现、竞争态势及相关业务需求。
- 运营、维护、保护、优化和排查本网站及相关服务。
- 分析流量、广告活动、转化、内容表现和用户体验。
- 进行客户管理、潜在客户管理、合同前沟通和后续服务。
- 在法律允许的范围内开展 B2B 营销、服务更新和相关商业沟通。
- 发现、防范、调查欺诈、滥用、安全事件或其他违法行为。
- 遵守适用法律、监管要求、法院命令及合法政府请求。
- 主张、行使或维护我们的合法权利。
7. 处理个人信息的法律依据（适用于 GDPR / UK GDPR 的情形）
在欧盟、欧洲经济区或英国相关法律适用时，我们会视具体处理活动依赖一种或多种法律依据：
- 合同履行或合同前措施：例如回复您主动提出的服务请求、准备方案或提供已订购服务。
- 合法利益：例如开展合理的 B2B 商务沟通、保护网站安全、改进服务和衡量业务表现，但会权衡您的权益。
- 同意：在法律要求时，用于非必要 Cookie、特定营销通信或某些数据共享活动。
- 法律义务：在我们需要遵守法定保存、税务、监管、诉讼或执法义务时。
如处理依赖同意，您可以随时撤回同意，但撤回不影响撤回前已经进行的合法处理。
8. 营销通信
在适用法律允许的情况下，我们可能向企业联系人发送与 GenOptima 服务、GEO、AI 搜索、
活动、研究或相关解决方案有关的商业通信。我们会根据适用法律使用同意、合法利益
或其他适当法律依据。
您可以通过邮件中的退订方式或直接联系
info@gen-optima.com 停止接收营销通信。
即使您退订营销内容，我们仍可能向您发送与已存在业务关系、交易、安全或法律事项相关的必要通信。
9. Cookie、分析、广告与类似技术
本网站可能使用 Cookie、像素、标签、SDK、本地存储、分析脚本和类似技术，
以维持网站运行、记住设置、衡量使用情况、分析转化、优化广告活动和改善用户体验。
某些技术属于严格必要技术，某些则可能属于分析、功能或广告用途。
在适用法律要求时，我们会在启用非必要技术前取得您的有效同意，并提供拒绝或管理偏好的方式。
您也可以通过浏览器或设备设置控制部分 Cookie，但这可能影响网站功能。
如果我们使用 Google Analytics、Google Ads、LinkedIn Insight Tag、Meta Pixel、
Microsoft Clarity 或其他第三方分析/广告服务，相关第三方可能按照其政策独立处理部分数据。
实际使用情况以网站实际部署为准，本政策并不意味着上述全部工具均已启用。
10. AI、自动化处理与 GEO 分析
GenOptima 的服务可能使用人工智能、机器学习、自动化分析或第三方 AI 工具，
用于评估公开网页内容、品牌可见性、引用、推荐、关键词/Prompt 表现、竞争结果或生成分析建议。
GEO 分析可能涉及向 AI 系统提交公开网页 URL、公开品牌信息、公开问题或业务上下文。
除非服务安排明确允许，请勿向我们提交密码、API 密钥、支付凭证、健康信息或其他敏感个人信息。
本网站展示的 AI Visibility Score、GEO Score、排名、预测或建议主要用于商业分析和营销优化，
不用于对个人进行信贷、就业、保险、医疗、住房或其他具有法律或类似重大影响的自动化决策。
如未来我们开展适用法律所定义的高风险自动化决策，我们将根据法律要求提供额外告知、权利和控制机制。
11. 我们如何共享或披露个人信息
我们不会为了与本政策无关的目的任意披露个人信息。必要情况下，我们可能向以下类别接收方披露：
- 云托管、网站运营、CRM、电子邮件、通信、数据分析、客户支持和安全服务提供商。
- 在项目需要且合同允许时提供专业服务的顾问、承包商或业务合作伙伴。
- 广告、分析或社交媒体平台，仅限网站实际启用且法律允许的范围。
- 法院、监管机关、执法机构或其他有权机构，在法律要求或合法请求下。
- 与企业重组、融资、合并、收购、资产出售或类似交易有关的潜在或实际交易方。
我们要求代表我们处理数据的服务提供商采取适当的保密、安全和数据保护措施，
但独立控制者将依据其自身法律义务处理数据。
12. “出售”“共享”与定向广告
在日常经营中，我们不会以直接金钱对价出售个人信息。
但是，在某些司法辖区（例如加利福尼亚州），广告技术、跨情境行为广告、
像素或第三方标识符的使用可能在法律定义下被视为“共享”或“出售”，即使未支付直接金钱。
如果我们的实际技术部署触发了相关法律要求，我们将提供适用的退出机制、
“Do Not Sell or Share My Personal Information”方式、Global Privacy Control（GPC）响应
或其他法律要求的控制选项。
13. 个人信息类别与业务目的
| 信息类别 | 示例 | 主要用途 |
|---|
| 身份与联系信息 | 姓名、工作邮箱、电话、公司、职位 | 回复咨询、销售沟通、客户管理和服务交付 |
| 商业与项目数据 | 网站、产品、市场、竞争对手、项目需求 | GEO 诊断、咨询、分析和方案制定 |
| 互联网/技术数据 | IP、设备、浏览器、日志、页面行为 | 网站运行、安全、分析和性能优化 |
| 营销与广告数据 | UTM、广告来源、转化、营销偏好 | 活动归因、广告优化和营销合规 |
| 通信内容 | 邮件、表单内容、会议记录、附件 | 响应请求、维护业务关系和履约 |
14. 数据保存期限
我们仅在实现收集目的、履行合同、满足合法业务需求、解决争议、
执行协议或履行法律义务所合理必要的期限内保留个人信息。
保存期限可能因数据类别、业务关系、适用法律、诉讼时效、安全需要和监管要求不同而有所变化。
当信息不再需要时，我们将根据实际情况删除、匿名化、聚合或以其他安全方式处置。
15. 数据安全
我们采用与数据性质和风险相适应的行政、技术和组织措施，旨在防止个人信息遭受未经授权的访问、
使用、披露、修改、丢失或破坏。这些措施可能包括访问控制、最小权限、传输加密、日志、
供应商管理、备份、安全审查和员工保密要求。
但任何互联网传输、电子存储或安全系统都无法保证绝对安全。
因此，我们无法承诺或保证风险为零，也不建议通过公开渠道发送高度敏感或机密信息。
16. 数据泄露与安全事件
如发生可能影响个人信息的安全事件，我们将根据事件性质进行调查、遏制和补救，
并在适用法律要求时向监管机构和受影响个人发出通知。
通知时间、内容和方式将依据适用法律及事件具体风险确定。
17. 跨境数据传输
由于我们可能使用全球化的云服务、供应商、业务团队和通信工具，
您的信息可能在您所在国家或地区以外被处理。不同地区的数据保护法律可能不同。
在 GDPR / UK GDPR 适用时，我们可能采用充分性决定、标准合同条款（SCC）、
英国国际数据传输附录或其他合法跨境机制，并在需要时采取补充安全措施。
在中国《个人信息保护法》适用时，如构成向境外提供个人信息，
我们将根据适用法律评估并采用所需的跨境传输机制、告知、单独同意、
标准合同、认证、安全评估或其他法定措施（如适用）。
18. 您的一般隐私权利
根据您所在地区和适用法律，您可能享有以下一项或多项权利：
- 确认我们是否处理您的个人信息并请求访问。
- 要求更正不准确或不完整的信息。
- 在适用条件满足时要求删除个人信息。
- 要求限制或停止特定处理活动。
- 反对基于合法利益或直接营销进行的处理。
- 在适用时获得数据可携权。
- 撤回此前提供的同意。
- 依法对特定自动化决策提出异议或要求人工干预。
- 向有权的数据保护或隐私监管机构提出投诉。
19. 欧洲经济区与英国
如 GDPR 或 UK GDPR 适用于您的个人信息，您可能拥有访问、更正、删除、限制处理、
数据可携、反对处理以及撤回同意等权利。某些权利受到法定条件、例外和身份验证要求限制。
您也有权向相关监督机构投诉，例如您惯常居住地、工作地或涉嫌侵权行为发生地的监管机构。
在英国，您可以向 Information Commissioner's Office（ICO）投诉。
20. 加利福尼亚州隐私权利
如果加利福尼亚州法律（包括 CCPA/CPRA）适用于我们的处理活动，
符合条件的居民可能享有知情、访问、更正、删除、数据可携、
退出个人信息出售或共享、限制敏感个人信息使用以及免受歧视等权利。
我们不会因为您依法行使隐私权而进行非法歧视。
如网站实际部署涉及法律定义下的出售、共享或跨情境行为广告，
我们将依法提供相应的退出方式并识别适用的浏览器隐私偏好信号。
21. 中国个人信息保护
如果《中华人民共和国个人信息保护法》（PIPL）及相关法律适用，
我们将遵循合法、正当、必要、诚信、目的明确、最小必要、公开透明和安全保障等原则。
在法律要求时，我们会提供个人信息处理规则、告知处理目的、方式、种类和保存期限，
并针对敏感个人信息、向其他个人信息处理者提供信息、公开披露或跨境传输等情形
获取单独同意或履行其他法定程序（如适用）。
您可能依法享有知情、决定、限制或拒绝处理、查阅、复制、更正、补充、删除等权利。
对已故自然人的个人信息，近亲属可能在法律允许范围内依法行使相关权利。
22. 其他司法辖区
加拿大、澳大利亚、新加坡、香港、日本、韩国、巴西以及美国其他州等地区
可能适用各自的数据保护法律。如果这些法律适用于我们的特定处理活动，
我们将根据相应法律要求提供所需权利、告知、同意或其他保障。
23. 如何行使您的权利
如需提交访问、更正、删除、限制、反对、撤回同意或其他隐私请求，
请联系 info@gen-optima.com。
为保护您的信息，我们可能在处理请求前合理验证您的身份和请求范围。
我们将在适用法律规定的期限内响应。某些情况下，我们可能依法拒绝、限制或延长处理时间，
并在法律要求时说明理由。若法律允许您授权代理人提交请求，我们可能要求提供授权证明和身份验证材料。
24. 儿童与未成年人
本服务主要面向企业和专业用户，并非面向儿童。我们不会明知故意通过本网站收集
适用法律规定最低年龄以下儿童的个人信息。如果我们发现误收此类信息，
将采取合理措施予以删除或按照法律要求处理。
25. 第三方链接与平台
本网站可能包含第三方网站、报告、社交平台、消息服务、外部表单或其他资源的链接。
您访问第三方服务时，将受到第三方自身条款和隐私政策约束。
GenOptima 不对独立第三方的隐私做法、内容、安全性或可用性负责。
26. 企业交易
如果 GenOptima 发生合并、收购、融资、重组、破产、资产出售、业务转让或类似企业交易，
个人信息可能作为交易评估、尽职调查或转让资产的一部分被披露或转移。
我们将根据适用法律采取适当措施保护相关信息。
27. 法律请求与权利保护
我们可能在合理认为必要且法律允许的情况下处理或披露个人信息，以遵守法律程序、
响应法院命令或政府请求、调查欺诈或安全事件、保护 GenOptima、客户、用户或公众的权利与安全，
以及建立、行使或维护法律主张。
28. 本政策的更新
我们可能不时更新本《隐私政策》，以反映服务、技术、供应商、法律或数据处理活动的变化。
如发生重大变更，我们将根据适用法律采取适当方式通知，并在政策顶部更新“最后更新”日期。
在新增与原有目的不兼容的重要处理活动前，我们将评估是否需要提供额外告知、取得新的同意
或采取其他法定措施。
29. 数据最小化与准确性
我们力求仅收集与明确业务目的合理相关且必要的信息，并采取合理措施保持信息准确、完整和及时。
您也可以联系我们更新或更正与您有关的信息。
30. 保密信息与商业信息
本《隐私政策》本身并不自动为您提交的所有信息建立合同意义上的保密义务。
除非另有安全提交机制或合同安排，请勿通过公开表单提交商业秘密、源代码、密码、
安全凭证、受监管信息或其他高度机密材料。
如双方另行签署保密协议（NDA）、数据处理协议（DPA）、服务协议或其他合同，
相应合同可能规定比本政策更具体的保密、信息安全和数据处理义务。
31. 可分割性与适用法律
如果本政策任何条款被认定无效或不可执行，其余条款将在法律允许范围内继续有效。
本政策应与适用于具体处理活动的强制性隐私、数据保护、消费者保护和电子通信法律共同适用。
32. 联系我们
如有隐私问题、权利请求、投诉或其他疑问，请联系：
info@gen-optima.com
我们的隐私承诺：
我们致力于仅收集合理必要的信息，将个人信息用于已明确的目的，
采用适当的安全措施进行保护，尊重适用的隐私选择，并依法响应个人信息权利请求。
