1. Scope of this policy
This Privacy Policy covers the Rankizz.com public website and hosted application. It explains what information Rankizz.com collects, why we use it, when it reaches a service provider, and the choices available to you.
An authorized self-hosted deployment is operated by the person or organization running that deployment. Its operator decides where application data is stored and which provider integrations are enabled. This policy applies to information sent directly to Rankizz.com, such as support requests or a hosted Rankizz.com account, rather than every independently operated deployment.
2. Information we collect
The information we collect depends on the features you use. We do not need every category below for every account.
- Account and workspace information: name, email address, sign-in method, account identifiers, organization membership, project settings, language, location, and notification preferences.
- Research inputs and saved results: domains, URLs, keywords, prompts, brand names, competitors, markets, selected providers, rank snapshots, cited sources, public social results, app-store results, backlink data, and site-audit findings.
- Google Search Console information: the connected Google account and property, read-only performance and URL-inspection data, and the OAuth grant needed to keep the connection working. Connected OAuth tokens are encrypted at rest.
- Billing information: Dodo Payments customer and payment identifiers, purchase amount, currency, payment status, invoice metadata, credit grants, refunds, and disputes. Rankizz.com does not store your full card number.
- API, MCP, and security information: API-key metadata, authorized MCP clients, scopes, request logs, IP address, user agent, timestamps, rate-limit events, and security events. Secret API-key values are only shown when created.
- Communications: support messages, feedback, email-delivery events, and information you send when asking us to investigate an account or provider issue.
- Hosted product usage: page views, feature events, errors, device and browser information, referral data, and masked session recordings when hosted analytics are enabled. Inputs and sensitive URL parameters are configured to be masked.
3. How we use information
We use personal information to provide the service you requested, operate accounts and credits, return and save research, maintain connected integrations, answer support requests, secure the application, prevent abuse, diagnose errors, and improve product reliability.
Where a legal basis is required, processing may be necessary to perform our contract with you, comply with law, protect the service and our legitimate interests, or act on consent. You may withdraw consent for consent-based processing, but that does not affect processing already completed lawfully.
4. Research and connected providers
A research request must leave Rankizz.com when the selected result comes from an external data source. We send only the request context needed for that feature, such as a keyword, domain, prompt, location, app identifier, or public URL.
Current integrations can include Google, DataForSEO, Bright Data, ScrapeCreators, Dodo Payments, PostHog, Plunk, Reddit, and infrastructure providers used to host the application and database. Google Search Console access is read-only. Dodo Payments acts as the merchant of record for hosted purchases and handles payment, tax, fraud, refund, and dispute processing under its own terms and privacy policy.
Provider availability, fields, and retention practices can change. A provider processes information under its own agreement and privacy terms when it acts independently. We review the data needed for each integration and avoid sending unrelated project data.
5. Public-source research
Some Rankizz.com tools save information returned from public webpages, app stores, search results, social posts, videos, ads, or cited sources. A saved result can contain a public author name, handle, post text, thumbnail, media URL, engagement count, publication date, and source URL.
This information is stored so you can revisit research without paying to fetch the same result again. Public availability does not remove the rights of the author or platform. You are responsible for using exported or saved public-source information lawfully and in line with the source platform's terms.
7. AI-assisted features
When you run an AI citation, brand report, prompt research, or agent workflow, the prompt and the minimum project context needed for the request may be sent to the provider you selected. Results can be delayed, incomplete, or wrong and should be reviewed before you act on them.
Do not submit confidential, regulated, or sensitive personal information unless you are authorized to process it and the selected provider is suitable for that information. Rankizz.com does not use these research outputs to make decisions that produce legal or similarly significant effects about individuals.
8. Retention and deletion
We keep account and project data while the account is active or as needed to provide saved history. You can delete supported saved searches and project records in the product. For account-level deletion or a broader data request, email samik@rankizz.com.
Security logs, backups, payment records, credit ledgers, tax records, refund records, and dispute evidence may be retained longer when needed for security, accounting, fraud prevention, legal obligations, or the establishment and defense of claims. Deletion from active systems may not immediately remove information from encrypted backups. External providers retain their records under their own policies.
9. Security
We use technical and organizational safeguards designed for the sensitivity of the data we hold. These include access controls, protected session cookies, rate limits, encryption for connected OAuth tokens, and separation between projects and organizations.
No internet service can guarantee perfect security. Protect your password, API keys, MCP authorizations, and recovery email. Tell us promptly at samik@rankizz.com if you believe an account or credential has been compromised.
10. International processing
Rankizz.com and its providers may process information in countries other than yours. Where applicable law requires transfer safeguards, we rely on recognized contractual or legal mechanisms and the safeguards offered by the relevant provider.
11. Your choices and privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or obtain a portable copy of personal information, and to withdraw consent. California residents may also have rights to know, correct, delete, limit certain uses of sensitive information, and opt out of sale or qualifying sharing without discrimination.
Send a request to samik@rankizz.com from the email address associated with your account. We may ask for information needed to verify the request and protect the account. These rights can be limited by applicable exemptions, such as records we must keep for tax, security, payment, or legal reasons. You may also complain to the privacy regulator where you live.
12. Children
Rankizz.com is a business research service and is not directed to children under 13. We do not knowingly collect personal information from a child under 13. If you believe a child has provided account information, contact us so we can investigate and remove it where required.
13. Changes and contact
We may update this policy when the product, providers, or law changes. The date at the top shows the latest revision. If a change materially affects how we use account information, we will provide an appropriate notice in the product or by email.
For privacy questions or requests, email samik@rankizz.com.