1. Introduction & Scope
RankingsFactor provides an all-in-one search intelligence, technical SEO auditing, content optimization, and AI answer engine optimization (AEO) platform. We take privacy, data protection, and transparency extremely seriously.
This Privacy Policy applies to all services offered through https://rankingsfactor.com and associated subdomains, web applications, and APIs (collectively, the “Service”). By accessing or using RankingsFactor, you consent to the collection, processing, and storage of your information as outlined herein.
2. Information We Collect
We collect information in the following categories:
Account & Registration Information
When you create an account, we collect your full name, email address, password hash, and optional profile image. If you authenticate through a third-party identity provider (such as Google OAuth, GitHub, or LinkedIn), we receive your verified email address, public profile name, and unique account identifier.
Website & Audit Data
When you audit a domain or project, we collect the public URLs, domain names, robots.txt configurations, sitemap locations, and technical page metadata (HTML markup, response codes, header tags, and page rendering metrics) for the target websites you specify.
Log, Technical & Device Data
We automatically log request metadata including your Internet Protocol (IP) address, browser user-agent, operating system, referrer URL, pages visited, and timestamped error reports to ensure security and maintain system availability.
3. Google API Data & Scopes (Google Search Console & Google Sign-In)
RankingsFactor allows users to connect their Google account to enhance their workflow. We utilize the following Google APIs:
openid, https://www.googleapis.com/auth/userinfo.email, https://www.googleapis.com/auth/userinfo.profile
Purpose: Allows you to register and securely log in to RankingsFactor using your Google credentials. We access your email address, name, and profile picture strictly to create and authenticate your account.
https://www.googleapis.com/auth/webmasters.readonly
Purpose: Allows RankingsFactor to fetch and display search performance metrics for domains you have verified in Google Search Console.
Specifically, we retrieve:
- List of verified site properties: To let you select which website to connect.
- Search analytics performance: Aggregated clicks, impressions, click-through rate (CTR), and average ranking position per query, page, country, and device.
- URL inspection data: Indexing status, canonical URL, crawl timestamps, and mobile usability state.
- Sitemap submissions: Submitted sitemaps, submission date, and indexed URL counts.
4. How We Use Your Information
We process your data for the following lawful purposes:
- Delivering Platform Features: Displaying your website search metrics, calculating keyword opportunity scores, highlighting lost or declining search queries, and generating technical crawl audits.
- User Authentication & Account Maintenance: Verifying your identity, authenticating sessions, enforcing password security, and maintaining multi-tenant data isolation.
- Critical Transactional Communications: Sending essential notifications such as email verification links, password reset instructions, crawl completion summaries, and security alerts. We do not send unsolicited spam.
- Security & Abuse Prevention: Detecting fraudulent sign-ups, preventing credential brute-forcing, preventing denial-of-service attacks, and enforcing platform rate limits.
- Billing Administration: Managing subscription plans, invoices, and payment statuses via our payment partner, Lemon Squeezy.
5. Storage, Encryption & Security Measures
We implement comprehensive technical, administrative, and physical security measures to safeguard your personal data and Google user data:
Sensitive authentication tokens (including Google OAuth refresh and access tokens) are encrypted at rest using industry-standard AES-256-GCM encryption prior to storage in PostgreSQL.
All communication between your browser, our servers, and Google APIs is enforced over HTTPS with TLS 1.3 / TLS 1.2 encryption using valid certificates. Unencrypted HTTP is strictly disallowed.
Additionally, RankingsFactor utilizes strict multi-tenant isolation with database foreign key constraints and row-level authorization logic to ensure that your website data and Google analytics are strictly confidential and invisible to other users.
6. Data Retention & Deletion Policy
We retain your information only for as long as necessary to provide the services requested, or as required for legal, audit, and security compliance:
- Account Data: Retained for the lifetime of your account. If you delete your account, your profile, sessions, and credentials are permanently purged from active databases immediately.
- Google Search Console Data: Performance metrics are retained during your active subscription to show longitudinal ranking trends. If you disconnect your Google Search Console property or delete your account, stored GSC analytics and tokens are permanently erased within 30 days.
- Audit & Crawl Logs: Historical crawl records and technical audit snapshots are retained for up to 180 days (or based on your active plan tier) and automatically purged thereafter.
7. How to Revoke Access & Request Data Deletion
You maintain complete, unilateral control over your Google user data at all times. You can disconnect RankingsFactor or delete your data using any of the methods below:
Method 1: Disconnect Google Search Console in RankingsFactor
Log in to your RankingsFactor dashboard and navigate to Settings > Integrations. Click “Disconnect GSC”. This immediately deletes your stored Google OAuth access and refresh tokens from our database, halting all background synchronization.
Method 2: Revoke Access via Google Security Settings
You can revoke RankingsFactor’s access directly from your Google Account at any time:
- Visit your Google Account Permissions page: https://myaccount.google.com/permissions
- Select “RankingsFactor” from the list of third-party apps.
- Click “Remove Access”. Google will instantly invalidate all tokens previously issued to RankingsFactor.
Method 3: Complete Account & Data Deletion Request
To completely erase your account, audits, crawl history, and all stored Google data, you can:
- Go to Settings > Privacy and select “Delete Account”.
- Or send an email to [email protected] with the subject line “Data Deletion Request”. We will confirm and purge all associated records within 30 days.
8. Third-Party Services & Subprocessors
We do not sell your personal data. We engage vetted third-party service providers (“Subprocessors”) only to provide essential infrastructure, payment processing, and transactional messaging:
| Subprocessor | Role / Service | Data Handled |
|---|---|---|
| Lemon Squeezy | Merchant of Record & Billing | Subscription status, order ID (payment details processed directly by Lemon Squeezy) |
| Google LLC | Google OAuth & GSC API | Google profile & Search Console performance metrics (upon explicit user consent) |
| Resend / Brevo | Transactional Email Delivery | Email address, recipient name, transactional verification links |
| Cloud Infrastructure | Application & Database Hosting | Encrypted application databases and secure server hosting |
10. Your Privacy Rights (GDPR & CCPA/CPRA Compliance)
Depending on your geographical location (e.g. European Economic Area, United Kingdom, or California), you are entitled to specific statutory rights regarding your personal information:
To exercise any of these rights, contact us at [email protected]. We respond to all verified requests within 30 days without charge.
11. Contact Information & Data Protection Officer
If you have any questions, concerns, or inquiries regarding this Privacy Policy or our Google API compliance, please contact our Data Protection and Privacy team:
RankingsFactor Privacy Team
Privacy Inquiries: [email protected]
General Support: [email protected]
Website: https://rankingsfactor.com