Privacy policy

Last updated: 16 October 2026. This is a starting template — have it reviewed by a qualified lawyer for your jurisdiction (e.g. India's Digital Personal Data Protection Act, 2023, and GDPR if you serve EU users) before launch.

What we collect

  • Account data: name, email address, password hash (never the password itself), optional two-factor secret (encrypted), and workspace membership.
  • Website data: URLs you add and the public pages our crawler fetches from them, audit findings, and data you import from Google Search Console or rank-tracking providers.
  • Integration credentials: CMS Application Passwords, Shopify access tokens and Google OAuth tokens, stored encrypted and used only to perform actions you authorise.
  • Billing data: plan, payment status, amounts and receipts. Card and UPI details are handled by our payment processor (Razorpay); we never receive or store card numbers or CVV.
  • Technical data: IP address, browser user agent and security logs (sign-ins, sensitive actions) for fraud prevention and auditing.

How we use it

To provide the service you requested (audits, monitoring, fixes, reports), to secure accounts, to bill subscriptions, to send transactional and alert emails you can configure, and to meet legal obligations. We do not sell personal data or use it for advertising.

AI processing

If AI features are enabled, excerpts of crawled page content and search data are sent to our AI provider to generate recommendations. We send only what is needed for the requested recommendation.

Sharing

We share data only with processors needed to run RankPilot (hosting, email delivery, payment processing, rank-data and AI providers you or your operator enable) and when legally required.

Retention

Audit history is kept according to your plan's history window. Deleting a project removes its data. Deleting your account removes your profile and the workspaces you solely own; billing records may be retained as required by tax and accounting law.

Your rights

You can access and export your data (Settings → Security & data), correct your profile, and delete your account. Contact us for any other request.

Contact

Email support@example.com or use the contact form.