Privacy Policy

This policy explains what personal data Rankshoot collects, why, where it is kept and what you can ask us to do with it. It covers this website (rankshoot.com), the Rankshoot app and admin, and the Rankshoot WordPress plugin.

Who we are

Rankshoot is operated by [to be confirmed], [to be confirmed], [to be confirmed] ("Rankshoot", "we"). For anything about your data, write to [to be confirmed].

What we collect

When you contact us or request a free preview on this website: your name, email address, phone number, your website address, the reason you chose and your message. We use this only to reply and to discuss the service with you. If you ask for a free preview, we also read the public pages of the site you send us, the same way a search engine does.

When you use Rankshoot (customers):

• Account and billing: names and email addresses of account owners, members and site reviewers; billing name, country, currency, invoices and payment references. Card details are handled by our payment provider; we never see or store them.
• Your sites: the site address, and — through the plugin you install — your posts and pages (their text, titles, links, status and the SEO title, description and indexing settings of Yoast or Rank Math, read only).
• Your business profile: what you sell, to whom, how customers contact you, and the notes and corrections you give us.
• The work: research for each piece (search results and the public pages we read), drafts, versions, your review decisions, change requests and approvals, what was published or handed over, and a change log.
• Operations and security: sign-in events, an audit log of administrative actions, error logs, and the cost of each automated step.
• If you connect Google Search Console: the search performance data of your site that Search Console provides. We only read it, and only for your site.

Previews: when we prepare a free preview for a prospect, we read up to 30 public pages of their website. Previews are deleted after 90 days unless the prospect becomes a customer.

We do not collect sensitive personal data on purpose, and we ask you not to put any into briefs, notes or messages.

How we use it and on what basis

• To provide the service you signed up for (contract): research, writing, review, publishing, handoffs, progress reports and support.
• To bill you and keep records the law requires (contract and legal obligation).
• To keep the service secure and working (legitimate interest): logs, alerts, backups, abuse prevention.
• To answer enquiries (your request, and our legitimate interest in replying).

We do not sell personal data. We do not use your content to advertise to others, and we do not show it to other customers.

Artificial intelligence

Rankshoot uses AI language models to analyse research and to draft and revise content. For each task we send the model provider only what the task needs — the brief, the research excerpts, your business profile and, for revisions, the current draft. Nothing is published to your site until a person on your side approves it.

Who processes data for us

• Supabase — database and sign-in. European Union (Frankfurt).
• Hostinger — hosting of this website and the Rankshoot app. [to be confirmed].
• Contabo — our background worker server. European Union (Germany).
• OpenRouter and the model providers it routes to, and OpenAI — AI analysis and drafting. United States and other regions.
• Serper (or DataForSEO) — search results for your topics. United States / European Union.
• Cloudflare R2 — encrypted backups. [to be confirmed].
• Fawaterak — card and wallet payments. Egypt.
• [to be confirmed] — sign-in and service emails. [to be confirmed].

Each provider receives only what its task needs. Our internal alert channel receives operational messages (for example, "a job failed"), not your content or contact details.

International transfers

Your data is stored in the European Union and some providers process it in other countries, including the United States. Where the law of your country (for example, the Saudi Personal Data Protection Law or Egypt's Personal Data Protection Law) requires a basis or safeguards for such transfers, we rely on the safeguards those laws accept, such as contractual clauses with the provider.

How long we keep it

• Enquiries from this website: 24 months after our last exchange, unless you become a customer.
• Previews: 90 days, unless the prospect becomes a customer.
• Customer data: while your subscription is active. After it ends, the app stays readable for 30 days so you can export your content; we then delete your site data within 90 days, except invoices and payment records, which we keep for as long as tax and accounting law requires.
• Backups: encrypted copies roll off after about two months.

Your rights

You can ask to see the personal data we hold about you, to correct it, to delete it, to receive a copy in a common format, or to object to or restrict a use of it. Write to [to be confirmed]. We answer within 30 days. If you are not satisfied, you can complain to the data protection authority of your country.

Cookies

This website uses no advertising or analytics cookies. The Rankshoot app uses the cookies it needs to keep you signed in and to remember your language.

The WordPress plugin

The plugin connects your site to Rankshoot. It sends data only to Rankshoot, only after you activate it with a site key, and every request is signed. It reads your posts and pages so we can plan and link content, and it creates new posts — or, if you allow it, updates existing posts — only from versions you approved. To make an update reversible it keeps the post's previous content on your own site. It adds nothing to your public pages. Deleting the plugin removes everything it stored, including its secrets and those previous versions.

Security

Data is encrypted in transit; backups are encrypted at rest; access to customer data is limited to what each role needs, and administrative actions are logged. No system is perfectly secure; if a breach affects your personal data, we will tell you and the authorities as the law requires.

Changes

We will post any change here with a new date, and tell customers by email before a material change takes effect.