Legal

Privacy Policy

Last updated: July 22, 2026

Your privacy matters. This Privacy Policy explains how we collect, use, share, protect, retain, and delete your personal information, including Google user data accessed through Google APIs.

1. Introduction

Rankerli ("Rankerli," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains our practices regarding the collection, use, and disclosure of information we receive when you use our website (rankerli.com) and our services (collectively, the "Services").

Rankerli connects to Google APIs — including the Google Search Console API and the Google Analytics (GA4) API — with your explicit consent via Google OAuth. Sections 3 through 7 of this policy describe specifically what Google user data we access, how we use it, with whom we share it, how we protect it, and how we retain and delete it.

By accessing or using our Services, you agree to this Privacy Policy.

2. Information We Collect

Personal Information

  • Name
  • Email address
  • Company name
  • Billing information
  • Account preferences

Automatic Data Collection

  • Device information (browser type, OS, IP address)
  • Usage data (pages visited, time spent, links clicked)
  • Log data
  • Cookies and similar tracking technologies

3. Google User Data We Access

When you sign in with Google and grant Rankerli access, we request the following OAuth scopes and access only the Google user data listed below:

Google Account Profile (openid, email, profile scopes)

  • Your name
  • Your email address
  • Your Google profile picture

Google Search Console (webmasters and webmasters.readonly scopes)

  • The list of sites (properties) in your Search Console account
  • Search performance data: clicks, impressions, CTR, and average position
  • Query, page, country, device, and search appearance dimensions
  • URL inspection and index coverage data
  • Sitemap information

Google Analytics (analytics.readonly scope)

  • The list of GA4 accounts and properties you have access to
  • GA4 reporting data: users, sessions, engagement, conversions, traffic sources, and page metrics

We do not access any other Google user data. We never access your Gmail, Google Drive, Contacts, Calendar, or any other Google service.

4. How We Use Google User Data

We use Google user data solely to provide and improve the user-facing features of Rankerli that you request. Specifically, we use it to:

  • Create and authenticate your Rankerli account (name, email, profile picture)
  • Display your Search Console and Google Analytics properties inside your dashboard
  • Generate the analytics reports, charts, keyword insights, content groups, topic clusters, and site audit features you see in the app
  • Cache report data temporarily so your dashboards load quickly
  • Generate AI-powered insights and chat answers about your own site's performance, when you explicitly use those features

Limited Use disclosure: Rankerli's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

AI/ML model training: We do not use Google user data to develop, improve, or train generalized artificial intelligence (AI) or machine learning (ML) models. When you use our AI insight features, your data is processed only to generate a response to your specific request, and our AI providers are contractually prohibited from using it to train their models.

We do not use Google user data for advertising, we do not sell it, and we do not use it for any purpose other than providing or improving the features described above.

5. How We Share, Transfer, or Disclose Google User Data

We do not sell Google user data, and we do not share it with third parties for advertising or marketing purposes. We only transfer Google user data in the limited situations below:

Infrastructure Service Providers (Subprocessors)

Google user data is stored and processed on our hosting infrastructure (cloud servers, managed database, and cache providers) acting on our behalf under data processing agreements. These providers may not use the data for their own purposes.

AI Processing Providers

When you explicitly use an AI insight or chat feature, the relevant portions of your Search Console or Analytics report data are sent to our AI providers (such as OpenAI and Anthropic) solely to generate your requested response. These providers process the data on our behalf and do not use it to train their models.

Users You Authorize

If you invite team members or clients to a website in Rankerli, the report data for that site is visible to the users you authorize.

Legal Requirements

We may disclose information if required by law, subpoena, or other legal process, or in response to valid requests by public authorities.

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction. We will notify you before your Google user data becomes subject to a different privacy policy.

With Your Consent

We may share information with your consent or at your direction.

6. How We Protect Google User Data

We apply administrative, technical, and physical safeguards to protect all user data, with specific mechanisms for sensitive data such as Google OAuth tokens and Google user data:

  • Encryption in transit: All data is transmitted over HTTPS/TLS, including all communication with Google APIs.
  • Encryption at rest: Databases and backups storing Google user data are encrypted at rest.
  • OAuth token protection: Google access and refresh tokens are stored encrypted, are never exposed to the browser, and are used only server-side to call Google APIs.
  • Access controls: Access to production systems is restricted to authorized personnel on a least-privilege, need-to-know basis and is logged.
  • Authentication: User sessions are secured with signed JWTs; API requests require authentication and are authorized per site.
  • Monitoring: We monitor our systems for vulnerabilities, unauthorized access, and abuse, and we apply security patches promptly.
  • Minimum scope: We request only the OAuth scopes necessary for the features described in this policy.

No method of transmission or storage is 100% secure. If we become aware of a breach affecting your data, we will notify you and the relevant authorities as required by applicable law. Contact [email protected] if you believe your interaction with us is no longer secure.

7. Retention and Deletion of Google User Data

We retain Google user data only for as long as needed to provide the Services to you:

  • Active accounts: Search Console and Analytics data is retained while your account remains active, so we can render your dashboards and historical reports. Cached report data expires and is refreshed automatically.
  • Account deletion: When you delete your Rankerli account, we delete or anonymize all Google user data associated with it — including stored reports and OAuth tokens — within 90 days, unless we are legally required to retain it longer.
  • Deletion on request: You may request deletion of your Google user data at any time, without deleting your account, by emailing [email protected]. We will complete the deletion within 30 days and confirm it to you.
  • Revoking access: You can revoke Rankerli's access to your Google account at any time from your Rankerli account settings or via Google Account → Security → Third-party access. Upon revocation, we can no longer retrieve any new data from Google, and previously stored data is handled as described above.

8. How We Use Your Other Information

Beyond Google user data, we use the information described in Section 2 to:

  • Provide, operate, and maintain our Services
  • Improve, personalise, and expand our Services
  • Process your transactions and manage your account
  • Send technical notices, updates, security alerts, and support messages
  • Respond to your comments, questions, and requests
  • Monitor and analyse trends, usage, and activities
  • Detect, prevent, and address technical issues and security breaches
  • Comply with legal obligations

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Services. We use the following types:

  • Essential cookies: Necessary for the functioning of our Services
  • Preference cookies: Remember your settings and preferences
  • Analytics cookies: Help us understand how visitors interact with our Services
  • Marketing cookies: Track browsing habits to enable more relevant advertising

You can instruct your browser to refuse all cookies, though some portions of our Services may not function if you do.

10. Your Data Protection Rights

Depending on your location, you may have rights to access, correct, delete, restrict processing, data portability, and object to processing.

EEA Residents (GDPR): You have rights to access, rectification, erasure, restriction, data portability, and objection.

California Residents (CCPA): You have rights to know about data collected, request deletion, opt-out of sales, and non-discrimination for exercising these rights.

To exercise any rights, contact us at [email protected]. We will respond within the timeframe required by applicable law.

11. Children's Privacy

Our Services are not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If we learn that we have done so, we will delete such information immediately.

12. International Data Transfers

Your information may be transferred to and maintained on computers located outside your state, province, country, or other jurisdiction where data protection laws may differ.

When we transfer personal information from the EEA to countries not deemed adequate by the European Commission, transfers will be protected by appropriate safeguards such as Standard Contractual Clauses.

13. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

If we make material changes, we will notify you either via email or by placing a prominent notice on our website.

14. Contact Us

If you have questions about this Privacy Policy or how we handle Google user data, please contact us:

Rankerli

Email: [email protected]

Data Protection Officer: [email protected]