Privacy Policy

Last updated: August 3, 2026

This policy explains what data RankFlow ("we") collects, why, and how it is handled when you use rankflow.airanker.net.

1. Data We Collect

  • Account data: name, email address, and authentication identifiers (login is handled by Supabase Auth; we never see or store your password).
  • Website data you connect: crawl results from your websites, Google Search Console and Google Analytics data you authorize, and CMS content you connect (e.g. WordPress) — used solely to provide the Service to you.
  • Usage data: feature usage, plan/entitlement state, and technical logs (IP address, browser, timestamps) for security and reliability.
  • Billing data: handled by our payment partner as merchant of record. We never receive or store card numbers; we receive only subscription status and plan identifiers.

2. How We Use Data

To operate the Service (run audits, sync Google data, generate AI suggestions you request), enforce plan limits, secure accounts, provide support, and improve the product. We do not sell personal data, and we do not use your website content to train AI models.

3. Google User Data

Where you connect Google Search Console, Analytics, or Business Profile, our use of Google data complies with the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to display and analyze your own site's performance inside RankFlow, is not sold or used for advertising, and can be disconnected at any time from the Integrations page (which revokes our access).

4. AI Processing

Some features send content you choose to optimize (e.g. a page's text) to AI model providers to generate suggestions. Only the content needed for the feature is sent, and it is not used by us to train models.

5. Sharing

We share data only with processors needed to run the Service: hosting infrastructure, Supabase (authentication), payment partner (billing), AI model providers (content you submit for AI features), and email delivery. Each processes data solely on our instructions. We may disclose data if required by law.

6. Retention and Deletion

Account and website data are retained while your account exists. When your trial ends, data is retained so you can resume later. You may request deletion of your account and associated data at any time by contacting us; we will complete deletion within 30 days, except records we must keep for legal or billing purposes.

7. Security

Data is encrypted in transit (TLS) and at rest. OAuth tokens are stored encrypted, access is role-restricted, and plan enforcement happens server-side. No method of transmission or storage is 100% secure, but we work to protect your data with industry-standard measures.

8. Cookies

We use essential cookies for login sessions and preferences. We do not use third-party advertising cookies for trial or paying users; lapsed free accounts may see first-party promotional content only.

9. Your Rights

You may access, correct, export, or delete your personal data, and object to or restrict certain processing. Contact us and we will respond within 30 days. Depending on your location (e.g. EU/EEA under GDPR, California under CCPA), you may have additional statutory rights, which we honor.

10. International Transfers

Our infrastructure may be located in different countries. Where data crosses borders, we rely on our processors' standard contractual safeguards.

11. Children

The Service is not directed at children under 16, and we do not knowingly collect their data.

12. Changes

We will announce material changes to this policy in the app or by email.

13. Contact

Privacy questions or requests: idhossain00@gmail.com