RankrRankr

Privacy Policy

Last updated: April 23, 2026

1. Who we are

Rankr is operated by Axel Schapmann, based in France. For any questions regarding this policy, you can reach us at axel.schapmann@gmail.com.

2. What data we collect

When you use Rankr, we collect:

  • Account information: email address, name (from Google OAuth or magic link signup).
  • Brand data: brand name, website, industry, description, competitors, and tracking prompts you configure.
  • Usage data: pages visited, features used, and interactions within the dashboard.
  • Payment data: processed by Stripe. We do not store credit card numbers.
  • Google Analytics connection (optional): if you connect a GA4 property, we store an encrypted OAuth refresh token, the GA4 property ID and display name you selected, and the email address of the Google account you connected. We do not store the analytics metrics themselves — they are fetched live from Google each time you view the Traffic dashboard.

3. How we use your data

  • To provide the Rankr service: tracking brand mentions across AI models, generating insights, and delivering your dashboard.
  • To send transactional emails (scrape completion notifications, team invitations).
  • To improve the product through anonymized usage analytics.
  • To process payments and manage your subscription.
  • If you connect Google Analytics, to fetch and display your site's AI-referred traffic inside the Traffic tab of your dashboard. Your Google Analytics data is never used for any other purpose.

4. Third-party services

We use the following third-party services:

  • Supabase — database and authentication.
  • Stripe — payment processing.
  • Resend — transactional emails.
  • OpenAI, Perplexity, Google (Gemini), Anthropic (Claude) — AI model queries for brand tracking.
  • DataForSEO — Google AI Overview / SERP data for prompts that target a country.
  • Google Analytics Data API — only if you explicitly connect a GA4 property from the Traffic tab. We use the read-only analytics.readonly scope to fetch your site's AI-referred traffic on demand.
  • DataFast — anonymized product analytics.
  • Heyo — customer support chat.

5. Google user data (Limited Use)

Rankr's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We only request the minimum scope needed to power the Traffic feature: analytics.readonly (read-only access to your Google Analytics data).
  • We use this data only to display your site's AI-referred traffic inside your Rankr dashboard.
  • We do not transfer this data to third parties except as necessary to provide the service, for security, or to comply with applicable law.
  • We do not use this data for advertising, profile building, or any purpose unrelated to the Traffic feature.
  • We do not allow humans to read this data, except with your explicit consent, for security or abuse investigations, to comply with applicable law, or on aggregated anonymised data for internal operations.
  • Your OAuth refresh token is encrypted at rest (AES-256-GCM) before being stored.
  • You can revoke access at any time by clicking Disconnect on the Traffic page, or from your Google Account permissions page. We delete the connection record immediately when you disconnect.

6. Data retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days. Aggregated, anonymized data may be retained for analytics purposes.

7. Your rights (GDPR)

As a user based in the EU, you have the right to:

  • Access your personal data.
  • Rectify inaccurate data.
  • Request deletion of your data.
  • Export your data in a portable format.
  • Object to or restrict processing of your data.

To exercise any of these rights, email us at axel.schapmann@gmail.com.

8. Cookies

We use essential cookies for authentication and session management. We use DataFast for anonymized analytics, which does not use cookies. We do not use third-party advertising cookies.

9. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes via email or a notice in the app.