Privacy Policy

Account data: name, email, password (hashed), and account type. Billing data: subscription and payment metadata handled by our processor, Razorpay, we do not store your full card details. Project data: the domains, URLs, content, and settings you add for auditing and tracking. Usage data: log data, device/browser information, and interactions with the Service. Notification data: if you enable push notifications, a browser push subscription token.

To provide, maintain, and improve the Service; run audits and generate recommendations; process subscriptions and payments; send transactional and support messages; deliver notifications you opt into; ensure security and prevent abuse; and comply with legal obligations.

To generate audits, content, and recommendations, relevant project data (such as page content and metadata) may be sent to AI model providers acting as our processors. We do not sell your data, and we instruct providers to process it only to deliver the Service.

When you connect a Google account, we request only the scopes needed for the features you use:

• Google Search Console: read your search performance (clicks, impressions, positions), check the index status of your URLs, and, on your instruction, submit sitemaps and URLs.
• Google Indexing API: submit your URLs to Google for crawling when you ask us to.
• Google Analytics (read-only): read your traffic metrics to show them in your dashboard and reports.
• Google Merchant Center (read-only): read your product feed status and product approval issues to include shopping problems in your site audit.
• Google Business Profile: read your listing, reviews, and performance to include local-search health in your audit; update listing fields, reply to reviews, or publish posts only when you approve the change or turn on a posting schedule in the app.
• Basic profile and email: identify your account and show which Google account is connected.

We store an encrypted Google refresh token so the connection persists between sessions; we never see or store your Google password. We use Google user data only to provide these features to you. We do not sell it, do not use it for advertising, and do not use it to train generative AI or machine-learning models. The stored token is deleted immediately when you disconnect Google. Cached Google data is deleted when you delete the project, or within 30 days of a request to support@ranknexus.ai. You can disconnect at any time on the Connections page in your dashboard, or revoke access at myaccount.google.com/permissions.

RankNexus's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The LinkedIn page in the dashboard lets you write posts, approve them, and post them to LinkedIn yourself or, if you connect a LinkedIn account, with one click. When you connect LinkedIn, you sign in on LinkedIn's own page and we request only these permissions, through LinkedIn's Sign In with LinkedIn using OpenID Connect and Share on LinkedIn products:

• openid and profile: your LinkedIn member ID and name, so the dashboard can show which account is connected.
• w_member_social: to publish a post you have approved, to your own profile, when you click Post to LinkedIn now. Each post needs its own click; nothing is posted on a schedule or without you.

We store your member ID, name, the permissions you granted, when the connection expires, and an encrypted access token that only our servers can read. We never see or store your LinkedIn password. We do not read your feed, connections, messages, profile details beyond your name, or LinkedIn analytics, and we never send invitations, messages, likes or comments for you. Data we receive from LinkedIn is not sent to AI model providers, not used to train AI models, not used for advertising, and not sold.

For each direct post we keep a record of what was allowed or refused and LinkedIn's reply (codes only, no post text or tokens), so you can see what happened on the LinkedIn page's Rules & compliance tab. Disconnecting an account on the LinkedIn page asks LinkedIn to revoke the token and deletes it from our systems at once. You can also remove RankNexus from the permitted services in your LinkedIn settings at any time. If you add your own LinkedIn developer app to a project, we store its Client ID and its Client Secret encrypted, use them only to connect that project's LinkedIn accounts, and delete them when you remove the app. Our use of data received from LinkedIn's APIs follows LinkedIn's API Terms of Use. RankNexus is not affiliated with or endorsed by LinkedIn.

Other LinkedIn features use only what you give us. Profile audits score text you paste in; nothing is read from LinkedIn. Prospect lists are people you import from your own records, after you confirm you have a lawful basis to contact them; for that data you are the controller and we process it on your behalf. A prospect nobody has touched for 24 months is deleted automatically, and people you mark do not contact are kept on a suppression list so they are not imported again. People you send a client review or team sharing link to see only the posts on that link.

We share data only with service providers who help us operate (hosting, database, AI models, payment processing, analytics, email/push delivery) under confidentiality obligations; when required by law or to protect rights and safety; or in connection with a business transfer. We do not sell your personal data. A current list of these providers is on our Sub-processors page.

We use strictly necessary cookies for authentication, security and payments. Preference storage and Google Analytics stay switched off until you opt in through the consent banner, and you can withdraw at any time using the Cookie settings link in the footer. Every cookie we can set, with its provider, purpose, retention and legal basis, is listed in our Cookie Policy. Disabling strictly necessary cookies may break the Service.

We retain personal data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Some data has a shorter limit, set out above (for example, cached Google data and LinkedIn prospects). You can request deletion as described below.

We use industry-standard measures including encryption in transit, row-level access controls, and least-privilege access. No method of transmission or storage is 100% secure, but we work to protect your information.

Subject to applicable law, you may access, correct, export, or delete your personal data, and object to or restrict certain processing. To exercise these rights, email support@ranknexus.ai. You may also disable push notifications at any time from your browser or the Support page.

Your data may be processed in countries other than yours (e.g. where our providers operate). We take steps to ensure appropriate safeguards for such transfers.

The Service is not directed to individuals under 18, and we do not knowingly collect their data.

If you are in India, we process your personal data as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act). This section adds to, and does not replace, the rest of this Policy.

• Notice and purpose: we collect and process your personal data for the purposes described in sections 1 and 2 (providing the Service, audits and recommendations, billing, support, security and legal compliance).
• Consent and lawful use: where we rely on your consent, you may withdraw it at any time (for example, disconnect Google on the Connections page, disconnect LinkedIn on the LinkedIn page, or turn off analytics in Cookie settings); withdrawal does not affect processing already carried out.
• Your rights: you may request access to, and a summary of, the personal data we process; request correction, completion, updating or erasure; nominate another person to exercise your rights in the event of death or incapacity; and raise a grievance.
• Exercising your rights: email support@ranknexus.ai. We respond within the timelines required by law.

Grievance Officer: if you are not satisfied with how we have handled your personal data or a request, you may contact our Grievance Officer at support@ranknexus.ai (Creative Nexus). You also have the right to complain to the Data Protection Board of India.

We may update this Policy; material changes will be notified via the Service or email. For any privacy questions or requests, contact support@ranknexus.ai.