Privacy Policy

Last updated: June 19, 2026

1. Introduction

RankSpy ("we", "us", "our") operates the website rankspy.app and the RankSpy platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account Information: When you register, we collect your email address, name (optional), and encrypted password.

Usage Data: We automatically collect information about how you interact with the platform, including pages visited, features used, app imports, keyword searches, and AI requests.

Device Information: We collect browser type, operating system, IP address, and device identifiers for security and analytics purposes.

Payment Information: If you subscribe to a paid plan, payment processing is handled by our third-party payment processor. We do not store credit card numbers on our servers.

3. How We Use Your Information

  • To provide, maintain, and improve the RankSpy platform
  • To process your transactions and manage your subscription
  • To send you service-related communications and updates
  • To monitor usage patterns and enforce plan limits
  • To detect and prevent fraud, abuse, and security incidents
  • To comply with legal obligations

4. Data Sharing & Third-Party Services

We do not sell your personal information. We may share data with:

  • Stripe (Payment Processing): We use Stripe, Inc. to process payments. When you subscribe, Stripe collects your payment card details, billing address, and transaction data directly. Stripe's use of your data is governed by Stripe's Privacy Policy. We do not store credit card numbers on our servers.
  • Resend (Email Delivery): We use Resend to send transactional emails (verification, password reset). Resend processes your email address for delivery purposes only.
  • Infrastructure Providers: We use cloud hosting services to store and process data. These providers maintain industry-standard security certifications.
  • Legal Requirements: When required by law, court order, or governmental authority
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted password storage (bcrypt), and secure infrastructure hosting. However, no method of transmission over the Internet is 100% secure.

7. Your Rights (GDPR & CCPA)

Depending on your jurisdiction, you may have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your account and associated data
  • Data Portability: Export your data in a machine-readable format
  • Restriction: Request that we restrict processing of your data
  • Objection: Object to processing based on legitimate interests
  • Opt Out: Opt out of marketing communications at any time

How to exercise your rights: Send your request to privacy@rankspy.app. We will respond within 30 days. We may ask you to verify your identity before processing your request.

California Residents (CCPA/CPRA): You have the right to know what personal information we collect, request its deletion, and opt out of its sale (we do not sell personal information). You will not be discriminated against for exercising these rights.

8. International Data Transfers

Your data may be processed on servers located outside your country of residence. We ensure that any cross-border data transfers comply with applicable data protection laws through appropriate safeguards, including standard contractual clauses where required.

9. Children's Privacy

RankSpy is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will promptly delete it. If you believe a child has provided us with personal information, please contact us at privacy@rankspy.app.

10. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. See our Cookie Policy for more details.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@rankspy.app.