1. Information we collect
We collect only what we need to run the service:
- Account information. Your name and email address, handled through our authentication provider (Clerk) when you sign up or sign in.
- Information you provide. The website URLs you add, competitor URLs, the keywords you choose to track, your onboarding profile (business type, city/service area, goals), and any messages you send to the in-app AI assistant.
- Information we generate for you. Audit/crawl results for the sites you add, AI-generated fixes and recommendations, and your saved progress (e.g. issues marked as fixed).
- Connected-service data. If you connect Google Search Console, we receive read-only search-performance data for the property you authorize (see section 4).
- Payment information. Payments are processed by our payments provider, DodoPayments, acting as Merchant of Record. We receive confirmation of your plan and subscription status — we do not collect or store your card details.
- Usage & technical data. Standard log data such as IP address, browser and device type, pages viewed, and actions taken, used to keep the service secure and working.
2. How we use your information
- To provide the service — crawl your site, score it, and generate recommendations.
- To power AI features (audit summaries, “Fix This” suggestions, keyword plans, the chat assistant, and AI-visibility checks).
- To show your connected Google Search Console performance inside your dashboard.
- To process payments, manage your subscription, and provide support.
- To send you transactional emails (e.g. welcome, alerts, weekly pulse) and occasional product updates. You can opt out of non-essential emails at any time.
- To maintain security, prevent abuse, and comply with our legal obligations.
3. AI processing
To generate summaries, fixes, keyword plans, and chat answers, we send relevant content — such as your site's audit data, your business profile, and the questions you ask — to our AI provider (OpenRouter, which routes requests to underlying model providers). This data is used to produce your result and is not used by us to train AI models. We send only what is needed to generate the response.
4. Google Search Console data
Connecting Google Search Console is optional. If you connect it, you grant RankAgent read-only access to your Search Console data (the webmasters.readonly scope). We use it for a single purpose: to display your search performance (queries, clicks, impressions, and average position) inside your dashboard.
Limited Use disclosure.RankAgent's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We only request read-only access, and only use the data to provide the dashboard features described above.
- We do not sell this data, and we do not use it for advertising.
- We do not transfer it to others except as needed to provide the service, to comply with the law, or as part of a merger/acquisition.
- We do not use it to train generalized AI/ML models.
- We store an OAuth refresh token securely on our servers solely to fetch your data on your behalf. You can disconnect at any time from the project page, which removes the stored connection.
5. Cookies & local storage
We use essential cookies set by our authentication provider to keep you signed in. We also store a referral code in your browser's local storage if you arrive via a referral link. We do not use third-party advertising cookies.
6. Service providers we share data with
We share data only with the providers that help us run RankAgent:
- Clerk — authentication and account management.
- Convex — application database and backend.
- Vercel — hosting.
- DodoPayments — payment processing (Merchant of Record) and billing.
- Brevo — transactional and product emails.
- OpenRouter — AI processing for our AI features.
- Google — Search Console data, only when you connect it.
- DataForSEO — keyword ranking data, only where rank tracking is used.
We do not sell your personal information. We may disclose information if required by law or to protect our rights and users.
7. Data retention
We keep your information for as long as your account is active or as needed to provide the service. You can ask us to delete your account and associated data by emailing us; we will delete it except where we are required to retain certain records (e.g. billing/tax).
8. Security
We use reasonable technical and organizational measures to protect your data, including encrypted transport (HTTPS) and storing sensitive tokens server-side only. No method of transmission or storage is 100% secure, but we work to protect your information.
9. Your rights & choices
- Access, correct, or delete your personal information.
- Disconnect Google Search Console at any time from the dashboard.
- Unsubscribe from non-essential emails using the link in any email.
- Close your account by contacting us.
To exercise any of these, email hello@therankagent.com.
10. International transfers
Some of our service providers process data outside India. Where that happens, we rely on those providers' safeguards to protect your information.
11. Children
RankAgent is intended for businesses and is not directed to anyone under 18.
12. Changes to this policy
We may update this policy from time to time. We'll change the “Last updated” date above and, for material changes, notify you where appropriate.
13. Contact us
Questions about this policy or your data? Email hello@therankagent.com.