Privacy Policy

1. Information We Collect

We collect the following categories of information:

Account information

When you register, we collect your email address, name (optional), and authentication identifiers. If you pay for a subscription, our payment processor collects billing details; we store only non-sensitive payment metadata (e.g., subscription status, last four digits of card).

Usage information

We collect information about how you interact with the Service, such as pages viewed, features used, and error logs. This helps us operate, debug, and improve the Service.

Content you submit

Domains, keywords, articles, and other content you enter into Rankealo to generate SEO recommendations, reports, or AI-generated articles.

Google user data

If you choose to connect Google Search Console, we access data through Google APIs. See the dedicated section below.

2. Google User Data

Rankealo offers an optional integration with Google Search Console. This integration uses Google's OAuth 2.0 flow. You are prompted to grant access, and you may revoke access at any time.

Scopes we request

We request exactly one Google OAuth scope:

• https://www.googleapis.com/auth/webmasters.readonly — read-only access to your Google Search Console data.

We do not request write access, account information (such as your Gmail contents), Drive access, or any other scope.

Data we access

With the webmasters.readonly scope, Rankealo accesses the following data from your Google Search Console account:

• The list of Search Console properties (websites) you have verified in your Google account.
• Search analytics data for properties you choose to connect to Rankealo, including: search queries, landing pages, clicks, impressions, click-through rate (CTR), and average position.
• Aggregated performance metrics for date ranges you select.

How we use this data

We use data from Google Search Console exclusively to provide features you have requested, including:

• Displaying performance dashboards for your domain inside Rankealo.
• Generating SEO optimization recommendations (for example, identifying striking-distance keywords, low-CTR pages, content refresh opportunities).
• Tracking changes in search performance over time.
• Creating reports that you explicitly generate or export.

We display Google user data only to the authenticated user who granted access. Other Rankealo users and Rankealo staff do not have access to your Google user data, except as described in the Subprocessors section.

3. Limited Use Disclosure

Rankealo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, Rankealo affirms that:

• We do not use Google user data to serve advertisements, including retargeting, personalized, or interest-based advertising.
• We do not sell Google user data to third parties, including for the purpose of training generalized AI/ML models.
• We do not transfer Google user data to third parties except as strictly necessary to provide or improve the Service (see Subprocessors), to comply with applicable law, or as part of a merger, acquisition, or sale of assets with appropriate notice to users.
• We do not allow humans to read Google user data unless (a) we have the user's affirmative consent for specific data, (b) it is necessary for security purposes (such as investigating abuse), (c) it is necessary to comply with applicable law, or (d) the data has been aggregated and anonymized and is used for internal operations.

4. How We Use Information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Authenticate your account and prevent fraud or abuse.
• Process payments and manage subscriptions.
• Generate SEO analytics, recommendations, and reports you request.
• Communicate with you about the Service (e.g., transactional emails, support responses).
• Comply with legal obligations.

We do not sell your personal information. We do not use Google user data for advertising.

5. Personal Context and AI Memories

Paid plans include Personal Context, a set of short notes (“memories”) about you that help the Strategist chat answer the way you like. Memories come from three places:

• Imports you make: text you paste from another AI assistant (for example ChatGPT or Claude) after asking it to export what it knows about you.
• Memories you add or edit by hand.
• Learned from your chats: when you tell the Strategist something lasting (such as “always answer in Spanish” or “we sell to dental clinics”), we automatically save a short note. Only the messages you type are used, never web pages, documents or the assistant's replies. You can turn this off at any time in Agent Memory → Personal Context.

How we use them. Memories are used only to personalise the Strategist chat. They are shared across the websites on your account, and for each website an automated check decides which memories are relevant to it; memories that are not relevant are kept but not used on that website. Memories are not used to write or publish articles, are not shown to anyone else, are not sold, and are not used by us or our AI providers to train models.

Processing. To sort memories by relevance, learn new ones and answer your questions, the relevant text is sent to our AI providers (see Subprocessors), which process it on our behalf.

Your controls. You can view, edit, switch off (kept but never used) or permanently delete any memory, or delete all of them at once. Deleting a memory removes it from our database immediately; copies in encrypted backups are rotated out within 90 days and are never restored into use. Deleting your account deletes all your memories.

Please don't import passwords, API keys, payment details, health information or other people's personal data. We filter obvious secrets from automatically learned memories, but you are responsible for what you choose to import.

6. How We Store and Secure Information

Your data, including Google user data, is stored in secured databases with access controls that ensure each user can only access their own records. Data is encrypted at rest and in transit.

OAuth refresh tokens for Google Search Console are stored encrypted at rest and are accessible only to the Rankealo backend processes that need them to perform actions on your behalf.

Despite our safeguards, no method of transmission or storage is 100% secure. If we become aware of a breach that affects your personal information, we will notify you as required by applicable law.

7. Subprocessors and Third Parties

We use carefully selected service providers (“subprocessors”) to operate the Service, each bound by contractual privacy and security obligations. They fall into these categories:

• Infrastructure and hosting — servers, databases and storage where your account data and cached Google Search Console metrics are kept, encrypted and isolated per user.
• Google — the source of Google Search Console data when you connect your account.
• AI model providers — used to generate recommendations and content and to power AI features such as the Strategist chat and Personal Context. Your raw Google user data is never sent to them; only the specific keywords, page URLs, prompts or memories needed for the task are transmitted, and they are not used by these providers to train their general models.
• Payments, email and analytics — to process subscriptions, send service emails and understand product usage.

A current list of our subprocessors is available on request at contact@rankealo.ai.

We do not sell, rent, or trade your personal information or Google user data to any third party.

8. Data Retention and Deletion

We retain your account information for as long as your account is active. Usage logs are retained for up to 12 months for debugging and security purposes.

Google user data is retained only while your Google Search Console integration is connected. When you disconnect the integration, or when you delete your Rankealo account, we delete stored Google user data (including cached search analytics and OAuth tokens) within 30 days. Backups containing deleted data are rotated out within 90 days.

9. Revoking Access and Deleting Your Data

You can revoke Rankealo's access to your Google account at any time:

• Inside Rankealo: go to Settings → Integrations and click “Disconnect” next to Google Search Console.
• From your Google account: visit https://myaccount.google.com/permissions and remove Rankealo.

Revoking access immediately stops further data collection. To permanently delete your Rankealo account and all associated data, email contact@rankealo.ai.

10. Cookies and Analytics

We use strictly necessary cookies to keep you signed in and to maintain session state. We may use privacy-respecting analytics (e.g., aggregated page view counts) to understand Service usage. We do not use advertising cookies or cross-site tracking.

11. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• The right to access the personal information we hold about you.
• The right to correct inaccurate personal information.
• The right to delete your personal information.
• The right to restrict or object to processing.
• The right to data portability.
• The right to withdraw consent at any time.

To exercise these rights, email contact@rankealo.ai. We will respond within 30 days.

12. International Data Transfers

Rankealo is operated from the United States and uses subprocessors in the United States and the European Union. By using the Service, you consent to your information being transferred to and processed in these jurisdictions, subject to appropriate safeguards such as Standard Contractual Clauses where required.

13. Children

The Service is not directed to children under 18, and we do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, contact us and we will delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or in-app notice. Continued use of the Service after changes become effective constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

• Email: contact@rankealo.ai
• Website: https://rankealo.ai