Privacy Policy

Your privacy and data security are our top priorities

Last Updated: January 13, 2025

End-to-End Encryption

All data encrypted at rest and in transit with AES-256

No Data Selling

We never share or sell your data to third parties

You Own Your Data

Export or delete your data anytime, no questions asked

1. Introduction

RankNest ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SEO platform and services.

By accessing or using RankNest, you agree to the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, company name, and password
  • Billing Information: Payment details processed securely through Stripe (we do not store credit card numbers)
  • Profile Information: Optional information like profile photos and preferences
  • Communications: Messages, feedback, and support requests you send us

2.2 Information We Collect Automatically

  • Usage Data: Pages visited, features used, time spent, and interaction patterns
  • Device Information: Browser type, operating system, IP address, and device identifiers
  • Log Data: Server logs including access times, errors, and system events
  • Cookies: Authentication tokens, preferences, and analytics data

2.3 SEO Data You Upload

  • Client Data: Information about your clients and their websites
  • Google Search Console Data: Performance metrics via OAuth integration
  • Website Data: Crawled pages, link maps, content analysis results
  • Review Data: Scraped reviews from public sources for message mining

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain our SEO platform and services
  • Process your transactions and manage subscriptions
  • Send administrative information, updates, and security alerts
  • Respond to your comments, questions, and support requests
  • Analyze usage patterns to improve our platform and develop new features
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations and enforce our terms of service
  • Send marketing communications (only with your consent; you can opt out anytime)

4. How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

  • Service Providers: Trusted third parties who help us operate our platform (Supabase for hosting, Stripe for payments, OpenAI for AI features)
  • Legal Requirements: When required by law, court order, or government regulation
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Your Consent: When you explicitly authorize us to share information
  • Team Members: Other users in your agency account (with appropriate permissions)

5. Data Security

We implement industry-standard security measures to protect your information:

  • AES-256 encryption for data at rest
  • TLS/SSL encryption for data in transit
  • SOC 2 Type II compliance through our infrastructure provider (Supabase)
  • Multi-factor authentication (MFA) support
  • Regular security audits and penetration testing
  • Role-based access controls and row-level security
  • Automatic security updates and patch management

6. Your Data Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your data (right to be forgotten)
  • Export: Download your data in CSV or JSON format
  • Opt-Out: Unsubscribe from marketing emails
  • Restriction: Request limitation of data processing
  • Portability: Transfer your data to another service

To exercise these rights, contact us at privacy@ranknest.io

7. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

  • Active Accounts: Data retained while your account is active
  • Canceled Accounts: Data accessible for 90 days after cancellation
  • Billing Records: Retained for 7 years for tax compliance
  • Backups: May persist in backups for up to 90 days
  • Legal Holds: Data retained longer if required by law

8. Children's Privacy

RankNest is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at privacy@ranknest.io.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place through standard contractual clauses and compliance with GDPR, CCPA, and other privacy regulations.

10. Cookies and Tracking

We use cookies and similar technologies for:

  • Essential Cookies: Required for authentication and security
  • Functional Cookies: Remember your preferences and settings
  • Analytics Cookies: Understand how you use our platform
  • Third-Party Cookies: Provided by service providers like Google Analytics

You can control cookies through your browser settings. Note that disabling cookies may affect platform functionality.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice in the platform. Continued use of RankNest after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

Email: privacy@ranknest.io

Support: support@ranknest.io

Response Time: We respond to privacy requests within 30 days

Regulatory Compliance

RankNest complies with:

  • GDPR (General Data Protection Regulation) for EU users
  • CCPA (California Consumer Privacy Act) for California residents
  • SOC 2 Type II security standards
  • Google API Services User Data Policy for GSC integration