Privacy Policy

• We collect what we need to run your account and the tools you use, and nothing for sale. We never sell personal data.
• Card details go straight to Paddle, our payment provider. We never see or store card numbers.
• Your content is analysed to give you reports. It is never published, shared with other customers, or used to train AI models.
• Analytics and advertising cookies are used only if you allow them in the cookie banner, and you can change your mind at any time.
• You can see, export, correct or delete your data. Write to privacy@rankbist.com.

This policy explains how Rankbist (“we”, “us”) handles personal data when you visit rankbist.com, create an account, or use the Rankbist apps, browser extension, Google Docs add-on or WordPress plugin. We are the controller of that data.

When a business uses Rankbist to work on its own website or its clients' websites, the business decides what content and data it puts into Rankbist. For that content we act on its behalf and only as its instructions (this policy and our Terms) allow.

Account details. Your email address, name if you give one, and a password stored only as a secure hash. With Google sign-in we receive your Google email address and profile name, never your Google password. A phone number only if you add one.

What you put into Rankbist. Text and pages you check, articles you generate, keywords you track, website addresses you audit, business details and photos for Local SEO, questions and competitors for Brand Radar, and settings such as report branding.

Connected accounts. If you connect Google Search Console, Google Analytics 4 or Bing Webmaster Tools, we store the access you grant (encrypted) and the data we read for your reports, such as positions, clicks and impressions for your own verified sites.

Billing. Paddle tells us your subscription, package, payment status and the country and currency of payment. Paddle collects your name, billing address and payment details itself.

Usage and device data. Pages viewed, buttons clicked, approximate country (from your IP address, which we do not store with analytics), browser, operating system, device type, screen size, the page and campaign that brought you, and timings. Without analytics consent we only count an anonymous page view, with no identifiers.

Communications. Messages you send us, newsletter sign-ups and confirmations, and whether newsletter emails were opened or links clicked.

Security records. Sign-in times and, for staff using the admin panel, a record of each change they make.

Where the GDPR or the UK GDPR applies, we rely on these legal bases:

• To provide the service (contract): creating your account, running checks, audits, rank tracking and the other tools, keeping your reports, support, and processing your subscription.
• Legitimate interests: keeping Rankbist secure and preventing abuse, fixing faults, understanding which features are used so we can improve them, and telling customers about changes to the service. We weigh these against your interests and you can object at any time.
• Consent: analytics and advertising cookies and similar technologies, server-side conversion events sent to ad platforms, and the marketing newsletter. You can withdraw consent at any time, which does not affect what happened before.
• Legal obligations: keeping records our accountants, tax authorities or courts require, and answering lawful requests.

Rankbist's scoring engine runs on our own servers. For AI features (AI fixes, the article generator, AI titles, Business Profile descriptions, keyword clustering, Brand Radar and question suggestions) the relevant text is sent to an AI provider through its official business API, only for the request you made.

Under their business API terms, these providers do not use our requests to train their models. We never use your content to train models ourselves, never publish it, and never show it to other customers. Brand Radar sends only the questions you write, not your website content.

Your original video file stays on your device. Your browser makes a small, low-resolution copy of the part you choose (picture and sound) and uploads it to us in pieces. We pass that copy to Google's Gemini API to check it against our Acceptable Use Policy, transcribe the speech and write your results. Our copy is deleted as soon as it has been handed over, and the copy at Google is deleted when the analysis finishes (if a deletion fails, Google removes uploaded files automatically within 48 hours).

The results (transcript, suggested moments, titles, descriptions and tags) are kept for the number of hours shown in Creator Studio, 5 by default, and then deleted. We keep a usage record for each video (file name, length, size, status, plan and the time it took) so we can apply plan limits and keep the service working. Short videos, thumbnails and the ZIP download are made in your browser and are not sent to us. To let an interrupted upload continue, your browser keeps the analysis copy in its own storage until the upload finishes.

Content Keyword, Video ideas and the link check use the YouTube API Services. By using these features you agree to the YouTube Terms of Service, and Google's Privacy Policy applies to that data. We read only public information (public videos, channels and search suggestions); we never ask you to sign in to a video platform and we don't access any account. Public data we fetch is cached for a short time and refreshed or deleted as those terms require. You can delete your creator profiles at any time.

We use a small number of service providers, each bound by a contract to use the data only to provide their service to us:

Ask us at privacy@rankbist.com for the current list. We do not sell or rent personal data, and we do not share it for cross-context behavioural advertising without your consent.

We use essential browser storage to keep you signed in and remember your choices. Analytics and advertising technologies are used only after you allow them in the cookie banner. The Cookie Policy lists each one, and the “Cookie settings” link in the footer lets you change your choice at any time.

Our servers and some providers are outside your country, including outside the EEA and the UK. Where personal data leaves the EEA or UK, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses (with the UK addendum), together with additional safeguards such as encryption.

• Account and content: for as long as your account is open. After you delete your account we delete or anonymise it within 30 days, apart from backups, which are overwritten within a further 30 days.
• Visitor analytics: page views and clicks are deleted automatically after the period set in our settings (about 13 months by default).
• Creator Studio: the uploaded analysis copy is deleted as soon as it is handed to our AI provider; results are deleted after the hours shown in Creator Studio (5 by default); usage records stay with your account.
• Billing records: as long as tax and accounting law requires, usually 6 to 10 years.
• Support messages: up to 3 years after the conversation ends.
• Suspended accounts: if an account is suspended for breaking our terms, we may keep its records for up to 12 months to handle disputes.

Depending on where you live, you can ask us to:

• give you a copy of your personal data, in a portable format;
• correct data that is wrong or incomplete;
• delete your data;
• restrict or object to how we use it, including for direct marketing;
• withdraw consent you gave (cookies, newsletter) at any time.

California residents also have the right to know what we collect and to non-discriminatory treatment; we do not sell or share personal information as those laws define it. Write to privacy@rankbist.com from your account email. We answer within one month (45 days under US state laws) and may need to confirm your identity. You may also complain to your local data protection authority.

Connections are encrypted with TLS, passwords are hashed, access tokens for connected accounts are encrypted at rest, and staff see only what their role allows, with every change recorded. No system is perfectly secure; if a breach affects your data we will tell you and the authorities as the law requires. More on the Security page.

Rankbist is not meant for anyone under 16. We do not knowingly collect data from children; if you believe a child has given us data, tell us and we will delete it.

We will update the date above when this policy changes, and tell account holders by email or in the dashboard before a significant change takes effect.

Privacy questions and requests: privacy@rankbist.com. Anything else: support@rankbist.com or the contact page.