Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, subscribe to our service, or contact us for support.

Personal Information

• • Name and email address
• • Business name and website URL
• • Payment information (processed securely by our payment providers)
• • Communication preferences

Usage Information

• • How you use our service
• • Features you access
• • Time spent on our platform
• • Technical information about your device and browser

2. How We Use Your Information

We use the information you give us, and the information we generate as you use the service, to operate RnkRocket and contact you about it.

Service emails (always sent)

These emails are part of operating your account. They are sent regardless of any marketing preference.

• • Account: welcome, email verification PIN, password reset
• • Trial state: when your free trial starts, when it has 2 days left, 1 day left, and when it expires or is upgraded
• • Billing: payment receipts, payment failures, subscription changes
• • Security: login alerts where applicable
• • Support replies in response to messages you send us

Marketing emails (you can opt out)

We may also email you with product news, SEO tips and re-engagement messages (for example, "your top issues still look broken — finish setting up RnkRocket"). You choose at registration whether you want these by leaving the "I don't want marketing emails" checkbox unticked or ticking it. You can change your preference any time in your account settings, or by replying to any marketing email asking to be removed.

Operating the service

• • Run SEO analyses, crawls and reports for the websites you connect
• • Personalise the dashboard and remember your preferences
• • Detect abuse, debug problems and improve the product
• • Aggregate, anonymous statistics about how the service is used

3. Information Sharing & Processors

We do not sell your personal information. We use a small number of trusted processors to run RnkRocket. Each is contractually bound to handle data only for us:

• • Supabase (database & authentication) — stores your account, subscription, projects, crawl results and notification preferences
• • Stripe (payments) — processes card details and subscription billing. We never see your full card number
• • Microsoft 365 / Microsoft Graph (transactional & marketing email delivery) — sends the emails listed in section 2 from website@rnkrocket.com
• • Google Cloud Platform (hosting) — runs the API and analysis services
• • Vercel (frontend hosting) — serves the dashboard and marketing site
• • Sentry (error tracking) — receives stack traces and request metadata when something goes wrong

We may also disclose information when required by law, or with your explicit consent.

4. Data Security

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure servers, and regular security audits.

5. Your Rights

You have the right to:

• • Access your personal information
• • Correct inaccurate information
• • Delete your account and data
• • Export your data
• • Opt out of marketing communications

6. Google API Services & Third-Party Integrations

RnkRocket offers optional integration with Google Search Console via Google OAuth 2.0. When you connect your Google account, we request read-only access to your Search Console data (the webmasters.readonly scope).

What we access

• • Search performance data (queries, clicks, impressions, position)
• • List of verified sites in your Search Console account

What we do NOT access

• • We do not access your Gmail, Google Drive, or any other Google service
• • We do not modify any data in your Google account
• • We do not store your Google password

How we use this data

Search Console data is used solely to provide you with SEO analysis, keyword tracking, and performance insights within your RnkRocket dashboard. We do not sell, share, or use your Search Console data for advertising purposes.

Revoking access

You can disconnect your Google account at any time from your RnkRocket account settings. You can also revoke access directly from your Google Account permissions page. Upon disconnection, we delete your stored OAuth tokens.

RnkRocket's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Payment processing

Payments are processed securely by Stripe. We do not store your full card number. Stripe's privacy policy applies to payment data they process on our behalf.

7. Cookies and Tracking

RnkRocket uses a small, clearly disclosed set of tracking mechanisms. Our full Cookie Policy lists each cookie and vendor. In summary:

• • First-party anonymous funnel tracking — while you browse the marketing site we record page views, CTA clicks and scroll depth against a per-tab identifier stored insessionStorage(key rnk_funnel_jid). No persistent cookie, no cross-site identifier. The identifier is cleared when you close the tab.
• • Consent-gated analytics — Google Analytics 4 and the Meta Pixel only fire after you accept the cookie banner. With consent denied, Google Consent Mode v2 may send cookieless pings that contain no user identifiers.
• • Essential cookies — session, authentication and security cookies required to keep you logged in and protect the service. These are exempt from consent under UK/EU law.

You can accept or decline non-essential tracking from the cookie banner shown on your first visit. To change your choice later, clear the rnk_cookie_consent entry in your browser's site data — the banner will reappear on your next visit. You can also block cookies entirely from your browser settings.

8. Contact Forms & Lead Submissions

When you submit the contact form on rnkrocket.com we store your message, the contact details you provided, and basic attribution metadata (UTM tags, the page you arrived on, your device / browser / OS). This lets us reply to you, reduce spam, and understand which marketing channels produce genuine enquiries. Submissions are kept for as long as we may reasonably need them to respond and for accounting purposes. You can request deletion any time by emailing website@rnkrocket.com.

9. Your Marketing Preferences

At registration you can choose whether you want marketing emails from RnkRocket. The choice is captured on a separate, non-mandatory checkbox below the terms of service: leaving it unticked means you're happy to hear from us; ticking it records your opt-out.

You can change this preference at any time from your account settings, or by asking us directly. Opting out does not stop service, billing, security or trial-state emails — those are required to operate your account.

10. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations. You can request deletion of your data at any time.

11. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data.

12. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal information from children under 16.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by email or through our service.