Privacy Policy

1. Information we collect

• Account: name, email, organization, settings, billing details.
• Connected tools: data from the third-party analytics, search, and other services you authorize via OAuth or API. We never see your passwords and never modify your source data.
• Tracking script: if you install the RankSage tracking script on sites you own, it collects cookieless, pseudonymous behavioral signals (such as scroll depth, rage clicks, errors, and AI-referrer source) over an encrypted channel.
• Social Scout: publicly available brand and competitor mentions (see §3).
• Usage & technical: features used, reports generated, IP address, device/browser, logs.
• Communications: support messages and, with consent, marketing email.

We don’t store card numbers — payments are handled by Razorpay.

2. How we use it

• Provide the service: AI-visibility tracking, analytics, content gap analysis and optimization, Social Scout, reports, and digests.
• Manage your account, process billing, and send transactional email.
• Secure the service, prevent abuse, and improve features.
• Meet legal obligations.

We don’t sell your personal data or share it for cross-context advertising.

3. Social Scout and public data

Social Scout surfaces publicly available discussions and mentions of your brand and competitors, based on the brand and keywords you configure. We collect public content snippets, engagement metrics, and metadata and associate them with your account for reporting. We don’t access private, restricted, or login-gated content, and you control which brands and keywords are tracked. Where this includes data individuals have made public, it falls within the DPDP Act’s publicly-available-data exemption and, under GDPR, our and your legitimate interest in monitoring public brand commentary.

4. Data sent to AI providers

To power visibility tracking, analysis, and briefs, we send limited context — such as brand names, domains, competitors, and keywords — to third-party AI providers and to the AI engines we track on your behalf. We never send your email, password, billing data, or private analytics for this purpose, and we don’t use your data to train AI models. Our providers operate under confidentiality and no-training terms.

5. Google data (Limited Use)

Where you connect Google services (such as Analytics or Search Console), our use of information from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. That data is used only to provide the features you see in RankSage — never for advertising, never sold, never used to train AI models. Humans don’t read it except with your consent for support, for security, or where required by law.

6. Subprocessors

We share data only with vetted providers under data processing agreements — for hosting, database, authentication, email delivery, payment processing (Razorpay), and AI processing. A full list and our DPA are available on request; we give notice before adding new ones.

7. Data retention

• Account & waitlist data: while active; deleted on closure or request.
• Tracking-script data: 24 months by default (configurable); deleted on closure.
• Connected-tool data: cached for performance; the source of record stays in your provider account; deleted when you disconnect.
• Social Scout data: kept while you’re subscribed; deleted on closure or request.
• Backups and logs: purged on a rolling schedule.

8. Security

We encrypt data in transit and at rest, use least-privilege access, and process every event (no sampling). No system is perfectly secure; if a breach affects you, we’ll notify you and the relevant authorities (including India’s Data Protection Board) within the time the law requires. See our Security page.

9. International transfers

RankSage operates from India. For transfers from the EEA, UK, or Switzerland to India or other non-adequacy countries, we rely on the EU Standard Contractual Clauses (and UK Addendum) with supplementary measures. A copy is available on request.

10. Your rights — EEA / UK / Switzerland

You can access, correct, delete, restrict, object to, or port your data, and withdraw consent, and complain to your supervisory authority. RankSage is not established in the EEA/UK; before we offer the service to data subjects there, we’ll appoint and name an EU and a UK representative under Article 27. Until then, contact privacy@ranksage.com.

11. Your rights — India (DPDP Act)

You may access, correct, complete, update, erase, and nominate, and withdraw consent at any time. To exercise a right or raise a concern, contact our Grievance Officer at grievance@ranksage.com. We respond within 30 days; if unresolved, you may complain to the Data Protection Board of India. This notice is available in English; on request we’ll provide its substance in a scheduled Indian language.

12. Your rights — US states

Residents of US states with privacy laws (around twenty as of 2026) can know, access, correct, and delete their data, and appeal a denial. We don’t sell data or share it for cross-context advertising, and we honor Global Privacy Control signals.

13. Cookies

ranksage.com uses strictly necessary cookies plus limited first-party analytics; non-essential cookies load only after consent where required. The RankSage tracking script on your sites is cookieless and honors Do Not Track and Global Privacy Control; opt-out and consent controls are documented in our developer docs.

14. Children

RankSage is a business tool for users 18+. We don’t knowingly collect data from anyone under 16; if you believe a child provided data, contact us and we’ll delete it.

15. Changes & contact

We’ll announce material changes by email and update the date above. Questions: privacy@ranksage.com (India Data Principals: grievance@ranksage.com).