Legal
Privacy Policy
This Privacy Policy explains what information we collect, why we collect it, how we use and share it, and the choices you have. It applies to rank4geo.com and the RankForGEO service. RankForGEO is in early access: this page describes practices for the Service as offered today, and we will update it when material features change how we process data.
Last updated July 26, 2026
1. Overview
RankForGEO (“RankForGEO”, “we”, “us”, or “our”) operates the website rank4geo.com and the RankForGEO platform (together, the “Services”). RankForGEO is an organic growth platform for traditional search and AI search visibility: audits, keyword research, editorial content workflows, scoring, AI-visibility measurement, and related tools.
This Policy applies to:
- visitors to our marketing website and related pages;
- account holders and Authorized Users (people invited to an account, such as teammates or client stakeholders);
- people who contact us (for example, via our contact form, email, or early-access signup); and
- people who view Shared Content (for example, a public AI-visibility report or article review link), to the limited extent we process technical data about that visit.
When you create an account, we determine how account, billing, and product usage data are processed to run RankForGEO. When you put content about your clients, customers, or other third parties into the Service (for example, client brand materials, site content, or competitor domains), you are responsible for that content and for any privacy obligations you owe to those people. Account administrators are responsible for providing appropriate notices to Authorized Users they invite. Our Terms of Service describe ownership and acceptable use of Customer Data.
By using the Services, you acknowledge the practices described in this Policy. If you do not agree, please do not use the Services.
2. Information we collect
We collect information in three ways: you provide it, we collect it automatically, and we receive it from integrations or partners you enable.
| Category | Examples | Source |
|---|---|---|
| Account information | Name, email address, authentication credentials, company name, role | You, or an admin who invites you |
| Workspace & product data | Connected domains, crawl and audit results, competitor domains you add, keywords, article drafts and revisions, scores, AI-visibility results, brand or writing-style settings, teammate invites, CMS connection metadata | You and your Authorized Users |
| Billing information | Plan, subscription status, invoices, and processor customer IDs when paid billing is enabled; full card numbers are held by the payment processor, not by us | You and our payment processor (when billing is enabled) |
| Communications | Contact-form fields (name, email, company, job title, company size, how you heard about us), support emails, early-access or waitlist details, newsletter signups | You |
| Usage & device data | IP address, browser and device type, pages viewed, approximate location derived from IP, timestamps, error and security logs | Automatic when you use the Services |
| Integration data | OAuth tokens and metadata when you connect third-party services (for example, Google Search Console or a CMS) | You authorize; the third-party service provides |
| Free audit / domain analysis inputs | Domain or URL you submit for an audit or visibility check, and related configuration (for example, market or country) | You, including before or without a full paid Subscription |
The Services are not intended for special-category or highly sensitive personal data (such as health data, government ID numbers, or precise biometric data). Please do not submit that information unless we have expressly agreed in writing to support that use.
3. How we use information
We use personal information to:
- provide, operate, secure, and support the Services;
- create and authenticate accounts and provide customer support;
- process payments and manage Subscriptions;
- send transactional messages (account, security, billing, and important product notices);
- send product or marketing communications where permitted by law and consistent with your choices (for example, where you subscribe to a newsletter or do not opt out of marketing where soft opt-in is allowed); marketing emails include an unsubscribe option;
- understand product usage, debug issues, and prevent fraud or abuse;
- comply with law and enforce our Terms of Service;
- enable sharing features you turn on (public reports, review links) and related technical delivery; and
- perform the AI-related processing described in Section 4.
Where data-protection laws require a legal basis (for example, GDPR/UK GDPR for people in the EEA or UK), we typically rely on: performance of a contract; legitimate interests in operating and securing a B2B SaaS product; consent where required (such as certain marketing); and legal obligations.
4. AI processing & visibility measurement
RankForGEO includes (a) AI Features that help research, draft, score, and analyze content, and (b) Visibility Measurement features that query third-party AI answer platforms and related data sources to assess brand or domain presence in AI answers.
4.1 What we send and to whom
Depending on the feature, we may send Inputs—such as prompts, brand or domain context, questions, outlines, draft text, site content you ask us to process, and operational metadata—to:
- Generative model providers used in editorial and product workflows (for example, Anthropic); and
- AI answer platforms / APIs used for visibility measurement (for example, services associated with ChatGPT/OpenAI, Claude/Anthropic, Gemini/Google, and Perplexity); and
- SEO and research data providers (for example, DataForSEO) for crawl, keyword, on-page, and related signals, which may include third-party web content.
We may add, remove, or change providers over time. Providers process data under their terms and our configuration of their APIs. We do not control how independent AI products generate public answers for end users outside RankForGEO.
4.2 No training on Customer Data
We do not use Customer Data to train or fine-tune general-purpose, foundation, or large language models offered by RankForGEO or by our model providers, except if you expressly opt into a separate program that clearly describes that use. We may use de-identified and aggregated data that does not identify you or any individual to operate, secure, debug, evaluate, and improve the Services (including AI Feature quality and safety).
4.3 Human review
AI Outputs and visibility results can be inaccurate or incomplete. You should review them before publishing, sharing, or relying on them. See our Terms of Service for ownership and responsibility for Outputs.
5. Google user data & Limited Use
If you choose to connect Google Search Console, RankForGEO accesses a limited set of Google user data on your behalf. This section describes that access specifically. Connecting Google Search Console is entirely optional — the rest of the Service works without it.
RankForGEO’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
What we access. With your authorization we read your Search Console properties and their search performance data — the queries your site appears for, along with clicks, impressions, click-through rate, and average position. We request read-only access. RankForGEO does not create, modify, or delete anything in your Search Console account.
Why we access it. This data powers the parts of the Service that depend on knowing how your site actually performs in Google: identifying pages ranking just below the first page that are worth optimizing, finding queries you already have visibility for, surfacing content gaps and opportunities, and measuring whether published work improved.
How it is handled. Search Console data is used only to provide and improve these user-facing features for your workspace. We do not sell it, we do not use it for advertising or to build advertising profiles, and we do not transfer it to third parties except the infrastructure and AI subprocessors described in this Policy, who process it on our instructions to deliver the Service. Humans do not read your Search Console data except where you explicitly ask us to (for example, in support), where it is necessary for security or to comply with law, or where the data has been aggregated and de-identified.
How to revoke it. You can disconnect Google Search Console at any time from your workspace settings, which removes our stored authorization. You can also revoke access directly from your Google Account’s third-party app permissions. On disconnection we delete the stored OAuth tokens; derived insights already generated in your workspace are removed on account deletion as described in the retention section below.
6. Public reports & share links
If you use features that create a public AI-visibility report, article review link, or similar shareable page, the content you choose to share may be accessible to anyone with the link, without an account. That content may include a domain name, insights, sample AI answers, competitor names, article text, or other Customer Data you include.
Creating or distributing a share link is your choice. You can revoke certain share links in the product where that control is offered (for example, unsharing a public audit report). You are responsible for not sharing client-confidential information unless you have the right to do so. Visitors to shared pages may generate ordinary technical logs (such as IP address and user agent) as described in Section 2.
7. How we share information
We share personal information with service providers that help us run RankForGEO, only as needed for their role, and under obligations to protect it. Categories include:
| Category | Examples | Purpose |
|---|---|---|
| Application hosting & edge delivery | Cloudflare (Workers and related infrastructure) | Host and deliver the web application and static assets |
| Cloud database, auth & backend functions | Supabase | Store data, authenticate users, run backend functions |
| Generative AI providers | Anthropic (and other providers we may add for AI Features) | Generate and process content for AI Features |
| AI answer platforms (visibility measurement) | OpenAI (ChatGPT-related APIs), Anthropic (Claude), Google (Gemini), Perplexity, and similar providers we may use | Query AI answer surfaces to measure visibility |
| SEO & research data APIs | DataForSEO | Audits, keyword and on-page research signals |
| Payments | Polar (merchant of record) when paid billing is enabled — checkout, tax, invoices, and the customer portal. Card details are handled by Polar, not stored by RankForGEO. | Checkout, subscriptions, tax, invoices, customer portal |
| Transactional & product email | Resend (or equivalent provider) | Account, support, and operational email |
| Integrations you enable | Google Search Console and other optional connections (for example a CMS, when available) | Provide the integration or publish flow you authorized |
We may also share information:
- with professional advisors (legal, accounting) under confidentiality;
- with authorities when required by law or to protect rights, safety, and security;
- in connection with a merger, financing, acquisition, sale of assets, or transfer to a company formed to operate RankForGEO, subject to appropriate confidentiality; and
- with your consent or at your direction (including when you create Shared Content).
We do not sell your personal information for money. We do not rent contact lists. If we ever use advertising technologies that some laws treat as a “sale” or “share” of personal information, we will update this Policy and provide required choices.
8. International transfers
RankForGEO is operated with India as its primary business base. Personal information may be transferred to, stored in, or processed in India, the United States, the European Economic Area, or other countries where our service providers operate (for example, U.S.-based AI providers and infrastructure). Those countries may have data-protection laws different from yours.
Where required by applicable law for cross-border transfers (including from the EEA, UK, or Switzerland), we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, provider terms that incorporate those mechanisms, or other lawful transfer tools. We will update this Policy as our transfer documentation matures. You may contact us for more information about transfers applicable to your use of the Services.
9. Retention, cancellation & deletion
We retain personal information only as long as needed for the purposes described in this Policy, or as required by law.
| Type | Typical retention |
|---|---|
| Active account & workspace data | While the account is active, plus a reasonable period after closure |
| After subscription cancellation (billing only) | Account and Customer Data may remain so you can reactivate or export; cancellation alone does not delete data |
| After verified account deletion request | Delete or anonymize within about 30 days, except backups, legal holds, security logs, or records we must keep by law |
| Billing & tax records | As required by applicable tax and accounting rules (often several years) |
| Support & contact enquiries | As needed to respond and for a reasonable follow-up period |
| Security & application logs | Shorter operational windows, longer if needed for security investigations |
| Marketing preferences | Until you unsubscribe or after a period of inactivity |
| Shared Content you created | Until you revoke the share (where supported) or the underlying data is deleted |
How to request deletion or export. Email contact@rank4geo.com. In the product, workspace owners can delete a workspace (and, if it is their last workspace, their account). Some screens also allow downloading specific artifacts (for example, an article or a CSV). There is no single self-serve export of every data type today; we will use commercially reasonable efforts to help with verified requests by email as required by law and technical feasibility.
10. Security
We implement commercially reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, or alteration. Measures may include access controls, encryption in transit, and monitoring appropriate to our stage and risk profile.
No method of transmission or storage is completely secure. We cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will investigate and provide notifications as required by applicable law and, where appropriate, to affected account owners.
11. Your rights & choices
Depending on where you live and the laws that apply, you may have rights to access, correct, update, delete, or obtain a copy of personal information we hold about you, or to object to or restrict certain processing. You may also have the right to withdraw consent where processing is based on consent.
To exercise a privacy request:
- email contact@rank4geo.com with enough detail for us to understand and verify the request; or
- use in-product account or workspace settings where available (for example, profile updates or resource deletion).
We may need to verify your identity before responding. We aim to respond as soon as reasonably practicable and within the time required by applicable law (where those laws apply to us). If we deny a request where an appeal is required by law, we will explain how to appeal.
Marketing. You can opt out of marketing emails using the unsubscribe link in those emails or by contacting us. You will still receive transactional messages related to your account.
EEA/UK residents. Where GDPR or UK GDPR applies, you may also lodge a complaint with your local supervisory authority. You may request information about the legal bases and transfer safeguards we rely on for specific processing by contacting us.
California and other U.S. state residents. Where U.S. state privacy laws apply, you may have rights to know, access, correct, delete, and opt out of certain targeted advertising or “sharing.” We do not sell personal information for monetary consideration. Submit requests to the email above.
India. Where the Digital Personal Data Protection Act, 2023 and related rules apply, RankForGEO acts as a data fiduciary for personal data we determine the purpose and means of processing (for example, account and billing data). We will honor applicable rights of data principals—including access and correction, and withdrawal of consent where consent is the basis—as required by law. Contact us using the details below. Certain obligations under DPDP and its rules may phase in over time; we will update this Policy as our compliance program matures.
12. Cookies & similar technologies
We use cookies and similar technologies that are necessary to operate the Services—for example, to keep you signed in, maintain session security, and remember basic preferences.
We may also use limited first-party analytics or error logging to understand product performance. We do not currently rely on a third-party advertising cookie stack on the marketing site. If we introduce third-party analytics or advertising cookies, we will update this Policy and, where required by law, obtain consent or provide opt-out mechanisms.
You can control cookies through your browser settings. Blocking necessary cookies may prevent parts of the Services from working. We do not currently respond to generic “Do Not Track” browser signals because there is no consistent industry standard for them; if we honor Global Privacy Control or similar signals in the future, we will describe that here.
13. Children
The Services are intended for users 18 years of age or older and for business use. We do not knowingly collect personal information from children under 18. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.
14. Changes
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the latest version. For material changes, we will provide additional notice where appropriate (for example, by email to the account owner or a notice in the Services). Continued use after the effective date constitutes acceptance of the updated Policy.
15. Contact
For privacy questions, rights requests, deletion, export, or IP-related privacy concerns, email contact@rank4geo.com.
RankForGEO
Website: https://rank4geo.com
If you need a registered postal address for legal notices, email us and we will provide the current business address on file.
Related: Terms of Service