R
RankSuite

Legal

Privacy Policy

Last updated July 22, 2026

This Privacy Policy explains how RankSuite (“we”, “us”) collects, uses, and protects information about you when you use ranksuite.in and our SEO products (the “Service”). This template is maintained by the RankSuite team and is not legal advice - please review with your counsel before publishing.

1. Who we are

The Service is operated by RankSuite (VD Media Manager), India. For privacy questions email privacy@ranksuite.in.

2. Data we collect

  • Account data - name, email, password hash, workspace and role.
  • Project data - domains, keywords, competitors, audits, reports you configure.
  • Integration tokens - OAuth tokens for Google Search Console, Google Analytics 4, and Google Business Profile, stored encrypted at rest.
  • Billing data - plan, invoice metadata, and payment identifiers processed by Razorpay. We never store your full card number.
  • Usage data - API calls, feature usage, performance metrics, and error logs.
  • Device data - IP, user agent, and cookies necessary for security and session management.

3. How we use data

  • Deliver the Service (audits, tracking, reports, AI features).
  • Bill and administer subscriptions.
  • Send transactional email (invoices, security, product alerts).
  • Improve reliability, fraud detection, and product quality.
  • Comply with legal obligations under Indian law.

4. Legal bases

We rely on contract (delivering the Service), legitimate interests (security, product improvement), consent (marketing email - always opt-out), and legal obligation.

5. Sub-processors

  • Supabase (database, auth, storage)
  • Cloudflare (edge hosting)
  • Razorpay (payments)
  • Google APIs (GSC / GA4 / GBP - only with your OAuth consent)
  • DataForSEO / Serper (SERP data)
  • Moz (backlink data)
  • OpenAI, Anthropic, Google, Perplexity (AI features - prompts only; no account data)
  • Resend or equivalent (transactional email)

6. Data retention

Account data is retained while your workspace is active and for up to 90 days after cancellation, after which it is permanently deleted. Invoices are retained for statutory periods under Indian tax law. Backups are rotated within 30 days.

7. Your rights

You can access, export, correct, or delete your data from Settings, or by emailing privacy@ranksuite.in. We respond within 30 days.

8. Security

Data is encrypted in transit (TLS 1.2+) and at rest. Access is scoped by row-level security, least-privilege service roles, and audit logs. Report vulnerabilities to security@ranksuite.in.

9. International transfers

Some sub-processors operate outside India. We rely on standard contractual clauses and provider-level safeguards.

10. Changes

Material changes are notified 30 days in advance via email or in-app banner.