Back to Home

    Privacy Policy

    Effective date: 05/01/2026

    Data Controller: Rank my website, a company incorporated in Portugal, ("Rank My Website," "we," "us," "our").

    Contact: privacy@rankmywebsite.com

    This Privacy Policy explains how we collect, use, disclose, and protect personal data when you access or use our website, applications, and services (collectively, the "Services").

    1) Scope

    This Policy applies to:

    • visitors to our website;
    • users who create an account; and
    • customers who use our SaaS platform to generate and publish SEO-optimized content and images.

    It does not apply to third-party websites, platforms, or services you access through integrations (e.g., WordPress, Webflow, Shopify, Wix, Framer) except to the extent we interact with them on your instructions.

    2) Personal data we collect

    A) Account and contact information

    • name (if provided)
    • email address
    • login credentials (password stored in hashed form)
    • account preferences and settings
    • customer support communications

    B) Billing information (Stripe)

    Payments are processed by Stripe. We do not store full payment card numbers. Stripe may collect and process payment details directly. We may receive:

    • subscription status and plan details
    • payment confirmations and invoice/receipt information
    • limited card metadata (e.g., last 4 digits, card brand)
    • billing country and postal code (depending on your Stripe configuration)
    • Stripe customer/payment identifiers

    C) Usage, device, and log data

    • IP address
    • device type, browser type, operating system
    • pages viewed, clicks, feature usage, timestamps
    • referrer URLs and general location inferred from IP (city/country-level)
    • security and error logs

    D) Cookies, analytics, and tracking pixels

    We use cookies and similar technologies for essential functions, analytics, marketing, and attribution, including:

    • Google Analytics
    • tracking pixels commonly used for advertising and attribution, including (as applicable) Meta (Facebook/Instagram), TikTok, Google Ads/Google Marketing Platform, and LinkedIn pixels/tags, and similar technologies.

    These tools may collect identifiers (e.g., cookie IDs, device IDs), event data, IP address, and information about your interaction with the Services, depending on your consent choices and vendor configurations.

    E) Inputs and content you provide

    • keywords, topics, briefs, prompts, instructions, preferences (tone, language, SEO parameters)
    • generated outputs you create or store in the platform (articles, metadata, images)
    • publishing configurations and preferences

    F) Integration and publishing data

    If you connect publishing integrations (e.g., WordPress, Webflow, Shopify, Wix, Framer, or Custom API), we may process:

    • site URL and site identifiers
    • authentication tokens/keys and integration credentials (stored using reasonable security measures and encryption where feasible)
    • content items, titles, slugs, meta descriptions, tags/categories
    • publishing status, sync records, and error logs

    The exact data depends on the integrations you enable and how you configure them.

    3) How we use personal data

    We use personal data to:

    • provide, operate, and maintain the Services
    • create and manage accounts and subscriptions
    • process payments and subscription management via Stripe
    • generate articles and images based on your inputs
    • publish content to your connected platforms at your direction
    • provide customer support and service communications
    • monitor, secure, and prevent fraud or misuse
    • analyze usage and improve features and performance (including analytics)
    • run marketing and attribution activities (subject to consent where required)
    • comply with legal obligations and enforce our agreements

    4) AI processing (Google Gemini and OpenAI)

    Our platform uses AI to generate articles and images. For these features, we may process your inputs (e.g., keywords, briefs, prompts, and configuration settings) and send relevant data to our AI providers:

    • Google Gemini (Google)
    • OpenAI

    Important notes:

    • We send only the data reasonably necessary to provide AI generation features and improve output quality.
    • AI-generated output may be inaccurate or incomplete. You are responsible for reviewing and approving content before publishing.
    • We do not use AI to make automated decisions that produce legal or similarly significant effects about you (e.g., employment, credit). If that changes, we will update this Policy and provide required notices.

    (Your exact obligations may also depend on the terms you agree to with Rank My Website and the configuration you choose inside the platform.)

    5) Legal bases for processing (EEA/UK – GDPR)

    Where the GDPR applies, we process personal data under one or more of the following legal bases:

    • Contract: to provide the Services you request (account, content generation, publishing integrations)
    • Legitimate interests: security, fraud prevention, service improvement, internal analytics (where permitted), and business operations
    • Consent: for non-essential cookies, analytics, and marketing pixels where required
    • Legal obligation: tax/accounting compliance and responding to lawful requests

    6) How we share personal data

    We may share personal data with:

    A) Service providers (processors)

    Vendors that help us deliver the Services, such as hosting, infrastructure, support, analytics, email delivery, logging/monitoring, and security providers.

    B) AI providers

    Google Gemini and OpenAI, to provide AI-generated article and image functionality, as described above.

    C) Payment processor

    Stripe, for payment processing, subscription management, fraud prevention, and invoicing.

    D) Integrations you enable (at your direction)

    When you connect WordPress/Webflow/Shopify/Wix/Framer or use Custom API publishing, we share data required to publish content and sync status.

    E) Advertising/analytics partners (pixels/tags)

    Where enabled and subject to consent requirements, tracking technologies may collect and share data with advertising and analytics partners (e.g., Meta, TikTok, Google, LinkedIn) for measurement, attribution, and campaign performance.

    F) Legal, safety, and business transfers

    We may disclose personal data to comply with law, enforce our terms, protect rights and safety, prevent fraud, or in connection with a corporate transaction (e.g., merger, acquisition, asset sale), subject to appropriate safeguards.

    We do not sell personal data for money. Some jurisdictions treat certain pixel-based disclosures as "sharing" for targeted advertising; where applicable, we provide cookie controls and opt-outs.

    7) International data transfers

    We are based in Portugal, but some providers (including analytics, advertising pixels, hosting, and AI providers) may process data outside the EEA/UK.

    Where we transfer personal data outside the EEA/UK, we rely on appropriate safeguards such as:

    • adequacy decisions (where applicable), and/or
    • Standard Contractual Clauses (SCCs) and supplementary measures where required.

    8) Data retention

    We retain personal data only as long as necessary for the purposes described in this Policy, including:

    • maintaining your account and providing Services
    • security and fraud prevention
    • dispute resolution and enforcement
    • legal and tax obligations (e.g., invoices/payment records)

    You may request deletion of your account, subject to retention required by law and legitimate business needs.

    9) Security

    We implement reasonable technical and organizational measures designed to protect personal data (e.g., access controls and encryption where appropriate). However, no system is completely secure and we cannot guarantee absolute security.

    10) Your rights (EEA/UK)

    Subject to applicable law, you may have rights to:

    • access your personal data
    • correct inaccurate data
    • request deletion
    • restrict processing
    • object to processing (including certain marketing/legitimate interest processing)
    • request data portability
    • withdraw consent (where processing is based on consent)

    To exercise your rights, contact privacy@rankmywebsite.com. We may need to verify your identity.

    You also have the right to lodge a complaint with the Portuguese supervisory authority: CNPD (Comissão Nacional de Proteção de Dados).

    11) Cookies and your choices (Google Analytics + tracking pixels)

    We use cookies and similar technologies for essential functions, analytics, and marketing/attribution. Where required, we ask for consent for non-essential cookies and pixels via a cookie banner.

    You can control cookies by:

    • adjusting cookie settings in our banner (where available)
    • managing your browser/device settings
    • using vendor opt-outs where provided

    If you disable certain cookies, parts of the Services may not function as intended.

    12) Children

    The Services are not intended for children under 13 (or a higher age where required by law). We do not knowingly collect personal data from children.

    13) Updates to this Policy

    We may update this Privacy Policy from time to time. We will update the "Effective date" and provide additional notice for material changes where required.

    14) Contact details