GEOForce

1. Scope

This section applies where the Platform provides services to customers (or their end users) in the European Union / European Economic Area (EEA), the United Kingdom, or the State of California, USA. It supplements the Privacy Policy and Terms of Service; where inconsistent, this section prevails.

2. GDPR data subject rights (EU/UK)

Under the General Data Protection Regulation (GDPR) and the UK GDPR, data subjects have the right to access, rectification, erasure (right to be forgotten), restriction of processing, data portability, and to object (including to automated decision-making). You or your end users may exercise these rights via the "Data Export" feature in the admin panel or by contacting us; we respond within 30 days.

3. CCPA/CPRA consumer rights (California)

Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California consumers have the right to know (categories of personal information collected, used and shared), deletion, correction, opt-out of sale or sharing, and to limit use of sensitive personal information. We do not sell personal information. To exercise rights, use "Data Export" or contact us.

4. Lawful bases and cross-border transfers

Our lawful bases for processing include contract performance, consent, legitimate interests (security and anti-abuse), and legal obligations. For transfers of personal information outside China, we rely on appropriate safeguards such as Standard Contractual Clauses (SCC) under Article 46 GDPR, and complete security assessment or certification under the PIPL where required.

5. Retention and security

We retain personal information as described in the Privacy Policy; for EU/UK/California data subjects, retention is limited to the minimum necessary to provide services. We apply industry-standard measures including TLS transport encryption, AES-256 static encryption, access control and audit logging.

6. Complaints and supervisory authorities

If you believe our processing of personal information violates the GDPR, you may lodge a complaint with your local data protection authority (DPA); California consumers may contact the California Privacy Protection Agency (CPPA). We encourage you to contact us first to resolve any concern.

7. Contact us

To exercise overseas data rights or ask about this section, contact the platform operator (contact details in the "Contact us" section of the Privacy Policy).