Privacy Policy: Data & Cookies

Last Updated: July 21, 2026

Introduction

Welcome to Rankture (“we,” “our,” or “us”). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SEO audit tool at rankture.com (the “Service”).

Please read this privacy policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide to Us

Account Information:

Email address
Name (optional)
Password (encrypted)
Company name (optional)

Website Information:

Website URLs you want to audit
Sitemap URLs
Audit preferences (mobile/desktop, max pages)

Connected Google Search Console Information (Optional):

Search Console properties and verified website URLs available to your Google account
Search performance data, including search queries, landing pages, dates, impressions, clicks, click-through rate, and average position
Indexing and URL inspection information when that feature is available
OAuth access and refresh tokens needed to maintain the connection; Rankture never receives or stores your Google password

Payment Information:

Payment information is processed by Stripe
We do not store your credit card details
We store your Stripe customer ID for subscription management

Information Collected Automatically

Usage Data:

Audit history (URLs audited, scores, dates)
Feature usage patterns
Subscription tier and usage limits
Number of audits performed per month

Technical Data:

IP address (for rate limiting and security)
Browser type and version
Device type
Operating system
Time zone and language settings

Cookies and Similar Technologies:

Session cookies (for authentication)
We do not use advertising cookies
You can control cookies through your browser settings

Analytics & Product Telemetry (Privacy-Friendly):

We use privacy-focused analytics to understand aggregate usage and improve the Service.
We may use Microsoft Clarity to understand how users interact with the dashboard (e.g., clicks and navigation) to improve UX and troubleshoot issues.

How We Use Your Information

We use your information for the following purposes:

To Provide the Service:

Create and manage your account
Process and perform SEO audits
Store audit history and results
Send audit completion notifications
Enforce usage limits based on your subscription tier

To Improve the Service:

Analyze usage patterns to improve features
Identify and fix technical issues
Develop new features

To Communicate With You:

Send welcome emails
Send audit completion notifications
Send important service updates
Respond to support requests
Send payment confirmations and invoices

For Security and Legal Compliance:

Prevent fraud and abuse
Enforce rate limits
Comply with legal obligations
Protect user rights and safety

Google API Services User Data

Connecting Google Search Console is optional. Rankture requests the read-only https://www.googleapis.com/auth/webmasters.readonly scope. This permits Rankture to view Search Console information for properties you can access, but it does not permit Rankture to modify your Search Console properties or settings.

How We Use Google User Data

We use Google Search Console data only to provide and improve user-facing Rankture features, including:

Displaying search performance in your Rankture dashboard and audit reports
Combining search queries, landing-page performance, and indexing signals with website crawl results
Identifying traffic changes, low-click-through-rate pages, ranking opportunities, content gaps, and indexation issues
Generating prioritized SEO recommendations and agent actions for your connected websites
Monitoring the performance of SEO changes over time

Rankture does not use Google user data for advertising, sell it, create advertising profiles, or use it to determine creditworthiness. Rankture does not use or authorize the use of Google user data to train general-purpose or shared artificial intelligence models.

For user-facing AI recommendations, Rankture may send the minimum relevant SEO signals—such as a query, page URL, performance metrics, indexing status, and audit context—to an AI service provider such as OpenAI. These providers process the information on Rankture’s behalf only to return the requested Rankture feature. We do not transfer Google user data to data brokers, advertising platforms, or unrelated third parties.

Rankture’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Storage, Security, and Human Access

OAuth credentials and imported Search Console data are stored in Rankture’s access-controlled database. Access is limited to the systems and personnel needed to operate, secure, troubleshoot, and support the Service. Personnel do not read Google user data except when necessary for security, legal compliance, support requested by the user, or internal operations where the data has been aggregated or de-identified when practical.

Retention, Disconnection, and Deletion

We retain a connected property’s OAuth credentials and imported Search Console metrics while the connection remains active and as needed to provide the Service. You can disconnect an individual property at any time from Dashboard → Integrations. Disconnecting attempts to revoke Rankture’s Google access and deletes the property’s stored OAuth credentials and imported Search Console metric records from Rankture.

Audit reports and recommendations created before disconnection may remain as part of your account history under our general retention practices. You may request deletion of those records or your entire account by contacting [email protected]. You can also revoke Rankture directly through your Google Account’s third-party access settings.

We do not sell your personal information. We may share your information only in the following circumstances:

Service Providers:

Supabase (PostgreSQL database hosting)
Upstash (Redis queue hosting)
Cloudflare (API, crawler, and background-job hosting)
Vercel (frontend hosting)
Stripe (payment processing)
Resend (email delivery)
Plausible (privacy-friendly analytics)
Microsoft Clarity (product analytics and UX diagnostics)
Crisp (customer support chat in the dashboard, if enabled)
OpenAI (processing limited website, audit, and Search Console signals to provide user-facing AI analysis and recommendations)

All service providers are contractually obligated to protect your data and use it only for the purposes we specify.

Legal Requirements: We may disclose your information if required by law, court order, or government request.

Business Transfers: If Rankture is acquired or merged with another company, your information may be transferred to the new owners.

Data Security

We implement appropriate security measures to protect your information:

Technical Measures:

HTTPS encryption for all data transmission
Encrypted password storage (bcrypt)
Secure database connections
Regular security updates
Rate limiting to prevent abuse

Access Controls:

Limited employee access to personal data
Authentication required for all sensitive operations
Regular security audits

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Data Retention

We retain your information for as long as necessary to provide the Service:

Account Data: Retained while your account is active Audit History: Retained for the duration of your subscription Payment Records: Retained for 7 years for tax and accounting purposes

You can request deletion of your account at any time by contacting us at [email protected].

Your Privacy Rights

Depending on your location, you may have the following rights:

Access: Request a copy of your personal data Correction: Request correction of inaccurate data Deletion: Request deletion of your account and data Portability: Request your data in a machine-readable format Opt-Out: Unsubscribe from marketing emails

To exercise these rights, contact us at [email protected].

If you are in the European Union or United Kingdom, you have additional rights under GDPR:

Right to object to processing
Right to restrict processing
Right to lodge a complaint with a supervisory authority

Our legal basis for processing your data is:

Contract Performance: To provide the Service you subscribed to
Legitimate Interest: To improve the Service and prevent fraud
Consent: For marketing communications (you can opt-out anytime)

For California Users (CCPA)

California residents have the right to:

Know what personal information we collect
Request deletion of personal information
Opt-out of the sale of personal information (we do not sell your data)

Children’s Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Third-Party Links

Our Service may contain links to external websites. We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies.

International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place for such transfers.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

Posting the new policy on this page
Updating the “Last Updated” date
Sending an email notification (for material changes)

Your continued use of the Service after changes constitutes acceptance of the new policy.

We use the following types of cookies:

Essential Cookies:

Authentication session cookies (required for login)
These cannot be disabled

Analytics / Diagnostics (Optional):

We may use analytics/diagnostic tools (e.g., Plausible and Microsoft Clarity) to understand usage and improve the Service.
These tools may set cookies or collect usage/interaction data depending on your browser settings and the tool configuration.

No Advertising Cookies:

We do not use advertising cookies and we do not sell your personal information.

Customer Support Chat (Dashboard)

If enabled for your account, the Rankture dashboard may include an in-app chat widget to contact support.

What it collects:

The message content you submit and any files you choose to upload
Basic metadata such as time of message, browser/device information, and IP address
If you are logged in, we may associate the chat with your account email to help us support you

How it’s used:

To respond to support requests and troubleshoot issues
To improve support quality and resolve product bugs

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us:

Email: [email protected]
Website: https://rankture.com/contact

Data Protection Officer

For GDPR-related inquiries, you can contact our Data Protection Officer at:

Email: [email protected]

Summary (TL;DR)

We collect only the information needed to provide the SEO audit service
We do not sell your data
We use trusted service providers (Stripe, Supabase, etc.)
We use cookies only for authentication
You can request deletion of your account anytime
We encrypt your data and use industry-standard security
We send only transactional emails (no spam)

Thank you for trusting Rankture with your data.