BETTARANK / POLICIES
Privacy Policy
How BettaRank handles information when you browse our website, sign in and use Keyword Lab.
Effective: · Version 1.0
Table of contents
Who we are and what this covers
BettaRank is operated by 苏州森雨微网络科技有限公司. In this policy, “we”, “us” and “our” refer to that company.
Our services are intended for customers in China and internationally.
This policy covers the marketing website, shared sign-in and Keyword Lab preview. Separate notices or signed agreements may apply to the dashboard, paid engagements and additional services. Contact us if you need information about a service outside this scope.
Information we collect
| When | Information involved |
|---|---|
| You browse | Network and request information needed to deliver and protect the website, such as IP address and requested URLs. Hosting and security providers receive connection information. |
| You sign in | Work email, email domain, organization/member identifiers, verification state and session information. |
| You request a report | Submitted website, recipient email, public page content, product definition, research evidence, recommendations, job status and email submission references. |
| You accept optional analytics | Limited page and interaction events, campaign/referrer information, random in-memory identifiers and permitted browser/device properties. Form values are excluded. |
| You contact support | Your contact details, request and information reasonably needed to investigate or respond. |
Website and community material can contain names, public contact details or other personal information. Public availability does not make information anonymous. Do not submit credentials, private pages or sensitive personal information.
Handbook requests are currently paused. The handbook dialog does not collect contact information.
Why we use information
- Provide email-link sign-in, recognize your session and restrict access to your report.
- Check that a report website and verified work email share the same root domain. This checks a domain match; it does not independently prove employment or authority.
- Review public website pages, research relevant topics and community questions, generate recommendations and email the report you request.
- Support accounts and requested business follow-up, prevent duplicate paid processing, investigate failures, protect the service and handle legal obligations or rights requests.
- Measure limited website activity after you explicitly accept optional analytics.
The applicable processing grounds depend on the activity and jurisdiction: providing a service you request, consent, legal duties, or permitted business/security interests where the law allows them. Consent is requested separately where required. Optional analytics is not necessary to sign in or receive a report.
Signing in or receiving a report does not subscribe you to marketing. Additional marketing requires its own appropriate notice and process. We do not sell personal information or use this tool's data for targeted advertising.
Website analysis and AI processing
Keyword Lab reviews a limited set of public pages. The current scanner checks robots rules, limits requests to the same root domain and reviews at most four pages. It stores page evidence, including HTML and readable text. This is a limited review, not a complete website audit.
Website URLs and text are processed by AI services to produce a product definition. Business context, topic queries and selected public evidence are processed by model, search, keyword-data and community-data services to generate recommendations. The current community research uses Reddit evidence.
Your recipient email supports authentication, report records and delivery; the research integration does not deliberately add it to model prompts. Public website text can itself contain personal information. We do not make a blanket promise that every research provider or upstream service has zero retention or never uses data for training.
Generated definitions and recommendations can be inaccurate, incomplete or outdated. Review the output before using it for business decisions.
Service providers and disclosures
| Service | Role and information |
|---|---|
| Alibaba Cloud / ESA / OSS | Website delivery and security, application infrastructure/databases and encrypted backup storage in Shanghai. Edge delivery can involve other locations. |
| Stytch | Work email, organization/member and session information for authentication. |
| AI and research services | Website text, business context, topic queries and public evidence for analysis and recommendations. These services can use upstream model and data providers. |
| Resend | Sender/recipient addresses, report content and sending/delivery metadata for report emails. |
| PostHog (US) | Limited website analytics from visitors who accept optional collection. |
Contact us for information about the providers involved in a particular request. Providers have their own processing, retention and deletion arrangements. Open and click tracking are disabled on the report-sending domain, while delivery metadata is still processed.
We may disclose information when required by law or a valid legal request, or when necessary to protect the service and people from misuse, subject to applicable requirements.
Cookies and browser storage
| Storage | Purpose and lifetime |
|---|---|
| Shared sign-in cookie | An HttpOnly, Secure cookie on bettarank.com supports sign-in across participating subdomains. It currently lasts one hour. Each service still verifies the session and its own permissions. |
| Temporary login cookies | Host-only state used to complete email-link sign-in, currently lasting 15 minutes. |
| Pending report request | Browser storage holds a website and timestamp so a requested report can start after sign-in. It is accepted for up to 30 minutes and removed on submission or a later visit after expiry. |
| Analytics preference | Acceptance or rejection is timestamped and expires after 183 days. A new choice is then required. PostHog uses in-memory persistence in this integration. |
Optional analytics starts off. Autocapture and session recording are disabled, and form contents are excluded. Rejecting or withdrawing analytics does not prevent browsing, sign-in or report requests.
Use Analytics preferences below or in the website footer to change your choice. Withdrawal stops new collection; it does not erase events already received. A separate deletion request may be needed. Network providers still receive connection information when analytics is off.
How long information is kept
Raw research and saved reports are both due for cleanup 180 days after completion. The cleanup worker runs hourly and checks active work and documented legal holds. Failed or blocked cleanup remains pending for retry or operator review.
| Record | Retention |
|---|---|
| Pending login state | 30 minutes from creation; hourly cleanup and deletion when consumed. |
| Email and company contact records | Ordinary retention of three years after the last meaningful account activity, report request or requested business follow-up. Review then; any extension needs a documented continuing purpose. Applicable law or a valid rights request can require earlier deletion. |
| Account and organization records | While needed to provide the account and handle applicable rights or legal obligations. Removing one user must preserve shared records still needed by other members. |
| Raw website and research evidence | 180 days after completion, including copies in revisions, artifacts and provider-response records held in our application databases. |
| Final reports and delivery references | 180 days after completion. A copy already delivered to your mailbox remains under your control. |
| Minimal job metadata | Identifiers and completion state used to prevent duplicate paid work are reviewed with the associated three-year contact record. Raw evidence and full report content are excluded from this exception. |
| Tool service logs | 185 days with daily rotation. Count-only cleanup audits are retained for 30 days. Other infrastructure/security records follow their applicable provider and legal schedules. |
| Optional analytics | Seven-year event retention under the current PostHog plan. Preference expiry after 183 days does not delete earlier events. Provider erasure is a separate process and can be asynchronous. |
| Encrypted backups | Daily server backup sets older than seven days are pruned, and private off-server objects have a seven-day lifecycle. Lifecycle deletion is asynchronous. Separately held operator recovery copies are restricted and reviewed under the recovery procedure; provider backup arrangements are separate. |
The contact period supports account service, requested follow-up and continuity of the requested service. Retention does not authorize marketing. Legal duties or documented claims may justify retaining only the necessary records for the applicable period.
A restored database must be checked against completed deletion requests before access is reopened. Deleting our saved report cannot delete a message already delivered to your own mailbox.
Processing locations
Application databases and encrypted cloud backups run in mainland China. Other services can process information outside China or your country. The analytics integration uses PostHog's US region, and Resend's published information describes US storage. Authentication, AI/research services and global delivery can involve other processing locations.
Countries can have different data-protection rules. A China-hosted database does not mean every provider or delivery location is in China. Contact us about the providers relevant to your request or any regional processing requirements before submitting information that needs special handling.
This notice does not itself replace any additional consent, notice or transfer arrangement required by applicable law.
Your choices and requests
BettaRank support handles privacy and deletion requests at support@bettarank.com. You can also contact us if your information appears in website or community evidence, even if you do not have an account.
Depending on applicable law, you may request access or a copy, correction, deletion, restriction or objection to processing, withdrawal of consent, or complain to a competent supervisory authority. These rights can have legal exceptions.
We verify identity and authority proportionately, request only what is reasonably needed and coordinate relevant local and provider actions. If a request cannot be fully completed, we explain the applicable limitation. Clearing cookies removes local sign-in state; it does not close an account or delete server records.
Security and intended users
Controls include HTTPS, server-verified sessions, HttpOnly/Secure sign-in cookies, account-scoped report access, restricted credentials and encrypted backups. No system can guarantee absolute security.
The tools are intended for adults authorized to act for their company. They are not designed to collect children's information or sensitive personal information. Contact us if such information has been submitted.
Updates and contact
The effective date and version appear above. Material changes will be communicated appropriately, with additional permission sought where required. This policy does not override mandatory legal rights or a valid signed agreement.
Operator: 苏州森雨微网络科技有限公司.
Business address (English translation): Room 2027, Contemporary Art Exchange Center, Suzhou Imperial Kiln Brick Museum, No. 95 Yangchenghu West Road, Yuanhe Subdistrict, Xiangcheng District, Suzhou, Jiangsu, China.
Address recorded in the company documents: 江苏省苏州市相城区元和街道阳澄湖西路95号苏州御窑金砖博物馆当代艺术交流中心2027室.
Contact and privacy requests: support@bettarank.com
Analytics preferences
Analytics is not initialized on this policy page. Turn optional tracking off now, or return to the homepage to review all choices.