Privacy Policy

1. Introduction

This Privacy Policy explains how rankrankrank (“we”, “us”, or “our”) collects, uses, stores, and protects your personal information when you use our website and services. By using rankrankrank, you agree to the collection and use of information as described in this policy.

We are based in Belgium and comply with the General Data Protection Regulation (GDPR) and other applicable European data protection laws.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address. If you sign in using Google OAuth, we receive your email address and profile identifier from Google. We do not receive or store your Google password.

2.2 Payment Information

When you purchase credits, payment is processed by our third-party payment provider, Stripe. We do not store your full credit card number, CVV, or other sensitive payment details on our servers. We may receive and store limited transaction information from Stripe, such as the last four digits of your card, card type, billing country, and transaction identifiers, for record-keeping and support purposes.

2.3 Usage Data

We automatically collect information about how you interact with the Service, including the tools and features you use, the number of credits consumed, timestamps of activity, search queries submitted to our tools, and the results generated. This data helps us operate, maintain, and improve the Service.

2.4 Technical Data

When you visit our website, we may automatically collect technical information such as your IP address, browser type and version, operating system, referring URL, pages visited, time spent on pages, and device identifiers. This information is collected through server logs and similar technologies.

2.5 Cookies and Tracking Technologies

We use cookies and similar technologies on our website. These fall into two categories:

• Essential cookies: Required for the Service to function, such as authentication tokens and session preferences. These cannot be disabled.
• Analytics cookies: We use Google Analytics to understand how visitors interact with our website, including pages visited, time on site, and general usage patterns. Google Analytics uses cookies to collect anonymised and aggregated data. This data helps us improve the Service. Analytics cookies are only set if you give your consent via our cookie banner.

When you first visit our website, a cookie banner will ask for your consent before any analytics cookies are placed. You can change your cookie preferences at any time by clicking “Cookie Settings” in the website footer.

3. How We Use Your Information

We use the information we collect for the following purposes:

• to provide, operate, and maintain the Service;
• to process transactions and manage your credit balance;
• to authenticate your identity and secure your account;
• to communicate with you about your account, transactions, or service-related matters;
• to detect, prevent, and address fraud, abuse, or technical issues;
• to analyse usage trends and improve the Service;
• to comply with legal obligations.

4. Legal Basis for Processing (GDPR)

Under the GDPR, we process your personal data on the following legal bases:

• Performance of a contract – when processing is necessary to provide the Service you have signed up for and to manage your account and credits;
• Legitimate interests – when processing is necessary for our legitimate business interests such as improving the Service, preventing fraud, and ensuring security, provided these interests are not overridden by your rights;
• Legal obligation – when processing is necessary to comply with applicable laws and regulations;
• Consent – where you have given specific consent for a particular processing activity (such as analytics cookies), which you may withdraw at any time via the cookie settings in the website footer.

5. Data Sharing and Third Parties

We do not sell, rent, or trade your personal information to third parties. We may share your information with the following categories of recipients, only to the extent necessary:

• Payment processors: We share transaction data with Stripe to process your credit purchases. Stripe's handling of your data is governed by their own privacy policy.
• Hosting and infrastructure providers: Your data is stored on servers provided by our hosting provider (Microsoft Azure). These providers act as data processors on our behalf.
• Analytics providers: We use Google Analytics, a service provided by Google LLC, to help us understand how the Service is used. Google Analytics collects anonymised and aggregated data through cookies, only when you have given your consent. Google's use of this data is governed by their privacy policy. Google may transfer data to servers outside the EEA (see Section 9).
• Legal and regulatory authorities: We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or to protect our rights, privacy, safety, or property.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the Service. If you close your account, we will delete or anonymise your personal data within 90 days, except where we are required to retain certain information to comply with legal, accounting, or regulatory obligations. Transaction records may be retained for up to 7 years for tax and accounting purposes as required by Belgian law.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), secure authentication mechanisms, and access controls. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right of access: You have the right to request a copy of the personal data we hold about you.
• Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
• Right to erasure: You have the right to request the deletion of your personal data, subject to certain legal exceptions.
• Right to restrict processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to the processing of your personal data based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the details provided in Section 13. We will respond to your request within 30 days. If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données) or the supervisory authority of your country of residence.

9. International Data Transfers

Your data is primarily stored and processed within the European Economic Area (EEA). Where we use third-party services that may transfer data outside the EEA (such as Google Analytics), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your personal data in accordance with GDPR requirements. Analytics data is only collected with your consent.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party services you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Your continued use of the Service after any changes constitutes acceptance of the revised Privacy Policy.

13. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at support@rankrankrank.com.