Privacy policy

Who we are

Rankwise is a software service that audits and optimises websites. We act as the data controller for account information, and as a processor for website data that we analyse on your instruction.

What we collect

Account data: your name, email address, company name and billing details. Billing card data is handled by our payment provider; we never see or store full card numbers.

Website data: the pages of sites you add, the issues we detect, and the changes we propose or apply.

Analytics data: aggregated traffic and search-performance figures retrieved from accounts you connect (for example Google Analytics 4 and Google Search Console) using credentials you authorise.

Usage data: which features you use, so we can keep the product working and improve it.

What we never do

We do not sell personal data. We do not use your connected analytics data to benchmark or advertise to your competitors. We do not attempt to identify individual visitors from analytics data, and country-level reporting is aggregated.

Legal bases

We process account and billing data to perform our contract with you; product usage data on the basis of our legitimate interest in operating and improving the service; and marketing emails only where you have opted in. You can withdraw consent at any time.

Sub-processors

We use hosting, database, email delivery and AI model providers to operate the service. Each is bound by contract to process data only on our instructions. A current list is available on request.

Retention

Account data is kept while your account is active. Website crawl data is retained for 24 months by default, and reports for 36 months. On cancellation, automation stops immediately and data is deleted within 90 days unless a legal obligation requires longer retention.

Your rights

You can access, correct, export or delete your data from the workspace settings. If you are in the EU or UK you also have the right to object to processing and to lodge a complaint with your supervisory authority. Contact us and we will respond within 30 days.

International transfers

Our infrastructure is primarily hosted in the EU. Where a sub-processor processes data outside the EU/EEA, transfers rely on Standard Contractual Clauses or an equivalent safeguard.