Privacy Policy

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.

Who is responsible?

The party responsible for data processing on this website is:

2. Data Collection on This Website

What data do we collect?

We collect the following types of data:

• Account data: E-mail address, name, profile picture (via Google OAuth)
• Google Search Console data: SEO performance data, search queries, clicks, impressions
• Usage data: Chat history, requests sent to AI
• Payment data: Payment information processed via Stripe
• Technical data: IP address, browser type, access times

Why do we use your data?

• Provision and improvement of our services
• Authentication and account management
• AI-based analysis of your SEO data
• Payment processing
• Communication with you
• Ensuring IT security

Legal basis

Processing is based on:

• Art. 6 (1) lit. b GDPR - Performance of a contract
• Art. 6 (1) lit. a GDPR - Consent
• Art. 6 (1) lit. f GDPR - Legitimate interests

3. External Services and Data Transfer

Google OAuth & Google Search Console

We use Google OAuth for authentication and access your Google Search Console data. During this process, the following data is transmitted to Google:

• OAuth tokens for authentication
• Requests to the Search Console API

Google privacy policy: https://policies.google.com/privacy

AI Service Provider

We use AI technology to provide intelligent analysis of your SEO data. The following data is transmitted to our AI service provider:

• Your SEO performance data (anonymized)
• Your chat requests

Important: Our AI service provider does not use API data to train its models.

Stripe (Payment Processing)

We use Stripe to process payments. Payment data is transmitted directly to Stripe and is not stored on our servers.

Stripe privacy policy: https://stripe.com/privacy

Google Ads API (Optional)

If you use the Google Ads integration, additional keyword data is retrieved from the Google Ads API.

4. Cookies and Tracking

This website uses cookies to improve the user experience:

Essential Cookies

• Session cookies: For authentication (required)
• Security cookies: For protection against CSRF attacks

Functional Cookies

• Preference cookies: Storage of your settings

Statistics Cookies (consent required)

We use Google Tag Manager to load Google Analytics. These services are only loaded after you have given your consent. They help us understand how our website is used.

Marketing Cookies (consent required)

With your consent we use Google Ads conversion tracking and remarketing. For this purpose we store the Google click identifier (gclid, gbraid or wbraid) and, where applicable, campaign parameters (UTM) in a first-party cookie for up to 90 days and link them to your account when you sign up. When you purchase a subscription we additionally transmit an irreversibly hashed (SHA-256) form of your email address and billing name to Google ("Enhanced Conversions") so that advertising performance can be measured. Plain-text data is not transmitted for this purpose.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to the USA on the basis of the EU-US Data Privacy Framework and EU standard contractual clauses.

Legal basis and withdrawal

Statistics and marketing cookies are only used on the basis of your consent (Sec. 25 (1) TTDSG, Art. 6 (1) (a) GDPR). Essential cookies are used on the basis of Sec. 25 (2) TTDSG and Art. 6 (1) (b), (f) GDPR. Your decision is stored for six months in the cookie rc_consent. You can withdraw or change your consent at any time with effect for the future via the "Cookie settings" link in the footer. You can also configure your browser to notify you about cookies and allow cookies only in individual cases.

5. Your Rights

You have the following rights:

• Right of access (Art. 15 GDPR): You can request information about your stored data
• Right to rectification (Art. 16 GDPR): You can request correction of inaccurate data
• Right to erasure (Art. 17 GDPR): You can request deletion of your data
• Right to restriction of processing (Art. 18 GDPR): You can request restriction of processing
• Right to data portability (Art. 20 GDPR): You can receive your data in a machine-readable format
• Right to object (Art. 21 GDPR): You can object to processing
• Withdrawal of consent (Art. 7 (3) GDPR): You can withdraw your consent at any time
• Right to lodge a complaint: You can complain to a supervisory authority

To exercise your rights, contact us at: hello@rank-chat.com

6. Data Retention

We store your data as follows:

• Account data: As long as your account exists
• Chat history: Until you delete it
• Payment data: According to legal retention requirements (10 years)
• Log files: Up to 90 days

7. Data Security

We implement technical and organizational security measures:

• SSL/TLS encryption for all data transfers
• Encrypted storage of sensitive data
• Regular security updates
• Access restrictions and authentication
• Regular backups

8. Transfer of Data to Third Countries

Some of our service providers (AI provider, Stripe) are based in the USA. Data is transferred on the basis of:

• EU-US Data Privacy Framework
• Standard contractual clauses of the EU Commission
• Additional security measures

9. Contact

If you have questions about privacy, contact us: