Privacy Policy

Last Updated: December 24, 2024

1. Introduction

RankMapped ("we," "our," "us," or the "Company") operates the RankMapped platform and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Personal Information You Provide

When you register for an account, use our Service, or contact us, we may collect the following personal information:

Account Information: Name, email address, password (encrypted), and profile picture
Business Information: Business name, domain name, website URL, business address, and service areas
Payment Information: Billing address, payment method details (processed securely through Stripe; we do not store complete credit card numbers)
Communication Data: Messages you send to us, support tickets, and feedback
Marketing Keywords: Search terms and keywords you wish to track for ranking purposes
Location Data: Geographic locations (postal codes, cities, regions) you select for ranking analysis

2.2 Information Collected Automatically

When you access our Service, we automatically collect:

Device Information: Device type, operating system, unique device identifiers, browser type and version
Log Data: IP address, access times, pages viewed, referring URL, and actions taken within the Service
Usage Data: Features used, reports generated, frequency of access, and interaction patterns
Cookies and Similar Technologies: Session cookies, preference cookies, and analytics cookies (see Section 8)

2.3 Information from Third Parties

We may receive information from third-party services including:

Authentication Providers: If you sign in using Google, GitHub, or other OAuth providers, we receive your basic profile information
Payment Processors: Transaction status and payment confirmation from Stripe
Map Services: Geographic data from Mapbox for location visualization
Search Data: Publicly available search ranking data from search engines

3. How We Use Your Information

We use the information we collect to:

3.1 Provide and Maintain the Service

Create and manage your account
Process your ranking reports and deliver results
Generate AI-powered insights and recommendations
Display interactive maps showing ranking data
Process payments and manage subscriptions

3.2 Improve and Develop the Service

Analyze usage patterns to improve functionality
Develop new features and services
Conduct research and analytics
Debug and fix technical issues

3.3 Communicate with You

Send transactional emails (account verification, password resets, report completions)
Respond to your inquiries and support requests
Send service updates and announcements
With your consent, send marketing communications

3.4 Ensure Security and Compliance

Detect and prevent fraud, abuse, and security incidents
Enforce our Terms of Service
Comply with legal obligations
Protect rights, privacy, safety, and property

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, our legal basis for collecting and using your personal information depends on the specific information and context:

Contract Performance: Processing necessary to provide the Service you requested
Legitimate Interests: Processing for our legitimate business interests (improving services, security, fraud prevention) where not overridden by your rights
Consent: Where you have given explicit consent for specific processing activities
Legal Obligation: Processing necessary to comply with applicable laws

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We share information with third-party vendors who perform services on our behalf:

Stripe: Payment processing
Mapbox: Map rendering and geocoding services
Cloud Hosting Providers: Data storage and infrastructure
Email Service Providers: Transactional and marketing emails
Analytics Providers: Usage analytics and performance monitoring

5.2 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your personal information.

5.3 Legal Requirements

We may disclose your information if required by law or in response to:

Valid legal process (subpoenas, court orders, legal requests)
Government requests from law enforcement or regulatory authorities
Protection of our rights, privacy, safety, or property
Emergency situations involving potential threats to safety

We may share your information with third parties when you have given us explicit consent to do so.

6. Data Retention

We retain your personal information for as long as necessary to:

Provide the Service and maintain your account
Comply with legal, accounting, or reporting requirements
Resolve disputes and enforce our agreements
Maintain backup archives for disaster recovery

Retention Periods:

Account Data: Retained for the duration of your account plus 30 days after deletion request
Report Data: Retained for 2 years or until you delete your account
Payment Records: Retained for 7 years for tax and accounting purposes
Server Logs: Retained for 90 days
Analytics Data: Retained in aggregated, anonymized form indefinitely

When retention periods expire, we securely delete or anonymize your information.

7. Data Security

We implement appropriate technical and organizational measures to protect your information:

Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL. Sensitive data is encrypted at rest
Access Controls: Strict access controls limit who can access your data
Authentication: Strong password requirements and support for two-factor authentication
Infrastructure Security: We use secure cloud infrastructure with regular security audits
Monitoring: Continuous monitoring for security threats and anomalies

Despite these measures, no method of transmission or storage is 100% secure. If you have reason to believe your interaction with us is no longer secure, please contact us immediately.

8. Cookies and Tracking Technologies

8.1 Types of Cookies We Use

Essential Cookies: Required for the Service to function (authentication, security)
Preference Cookies: Remember your settings and preferences
Analytics Cookies: Help us understand how you use the Service
Marketing Cookies: Track effectiveness of our marketing campaigns (only with consent)

You can control cookies through your browser settings. Note that disabling certain cookies may affect Service functionality. You can also opt out of analytics tracking through our cookie preferences.

9. Your Rights and Choices

9.1 Account Information

You can access, update, or delete your account information through your account settings at any time.

9.2 Communication Preferences

You can opt out of marketing communications by clicking "unsubscribe" in any email or updating your preferences in account settings. You cannot opt out of transactional emails related to your account.

9.3 Data Subject Rights (GDPR/CCPA)

Depending on your location, you may have the right to:

Access: Request a copy of the personal information we hold about you
Rectification: Request correction of inaccurate information
Erasure: Request deletion of your personal information ("right to be forgotten")
Restriction: Request restriction of processing of your information
Data Portability: Request your data in a structured, machine-readable format
Object: Object to processing based on legitimate interests
Withdraw Consent: Withdraw previously given consent at any time
Non-Discrimination: Not receive discriminatory treatment for exercising your rights

To exercise these rights, contact us at [email protected]. We will respond within 30 days (or as required by applicable law).

9.4 California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

Right to know what personal information is collected, used, shared, or sold
Right to delete personal information held by businesses
Right to opt-out of sale of personal information (we do not sell personal information)
Right to non-discrimination for exercising CCPA rights

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your country.

When we transfer data outside the EEA, UK, or Switzerland, we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses approved by the European Commission
Adequacy decisions for countries deemed to have adequate data protection
Other legally approved transfer mechanisms

11. Children's Privacy

Our Service is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us. If we discover we have collected personal information from a child under 16, we will delete it promptly.

12. Third-Party Links and Services

Our Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

Posting the new Privacy Policy on this page
Updating the "Last Updated" date
Sending you an email notification (for material changes)

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

14. Data Protection Officer

For questions about this Privacy Policy or our data practices, contact our Data Protection Officer:

Email: [email protected]

15. Supervisory Authority

If you are located in the EEA, UK, or Switzerland and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy: