Privacy Policy
This Privacy Policy (this "Policy") describes how RankLoop ("we", "us" or "our") processes personal data in connection with the rank tracking service available at getrankloop.com (the "Service"), in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Spanish law.
1. Controller
1.1. RankLoop is the controller of the personal data described in this Policy. Any request relating to your personal data may be sent to support@getrankloop.com.
2. Personal data we process
2.1. Account data: your email address and, if you set a password, a hash of it. We do not store the password itself. If you sign in with Google, Google provides your email address and basic profile information, such as your name and picture, which our authentication provider stores with your account; we use only the email address. Providing your email address is necessary to create an account.
2.2. Tracking data: the domains and keywords you add, the country and device selected for each, and the ranking data collected for them, including the top search results returned for each keyword.
2.3. Settings: your alert preferences and, where you have requested it, an alternative address for alerts.
2.4. Billing data: your plan and the customer and subscription identifiers assigned by Lemon Squeezy. Payment details and billing addresses are collected by Lemon Squeezy and are not accessible to us.
2.5. Email delivery data: whether our emails to you are delivered or rejected, so that we can inform you when alerts cannot reach you.
2.6. Support data: the content of your messages to us, your email address and, if you are signed in, your account identifier.
2.7. Technical data: your IP address and browser information, which are received with each request to the Service.
3. Purposes and legal bases
3.1. To provide the Service, including creating your account, checking your keywords, displaying your dashboard and reports, sending the alerts you enable and responding to support requests. Legal basis: performance of the contract between you and us (Article 6(1)(b) GDPR).
3.2. To manage your plan and subscription, and to inform you of changes to your plan, its price, our Terms of Service or this Policy. Legal basis: performance of the contract.
3.3. To keep the Service secure, prevent abuse and compile aggregate visit statistics that do not identify you and do not use cookies. Legal basis: our legitimate interest in operating a secure and functioning service (Article 6(1)(f) GDPR).
3.4. To send you occasional emails about new features or plans of the Service. Legal basis: our legitimate interest in keeping customers informed. You may object at any time by replying to any such email. Ranking alerts can be disabled separately in Settings or through the link included in each alert.
3.5. To publish a testimonial, only with your consent and in the form you approved. You may withdraw your consent at any time.
3.6. We do not sell personal data, use it for advertising or carry out profiling. The only automated decision we take is moving your account to the free plan when a renewal payment fails, as described in our Terms of Service.
4. Recipients
4.1. We share personal data only with the following categories of service providers, which process it on our behalf and under our instructions: hosting and database providers, an email delivery provider, a search data provider, and the email hosting and forwarding providers of our support inbox. The search data provider receives only the keyword, country and device of each check, and no account, email address or IP address data. The names and locations of these providers are available on request at support@getrankloop.com.
4.2. Paid plans are sold by Lemon Squeezy, which acts as merchant of record and processes payment and billing data as an independent controller under its own privacy policy. If you choose to sign in with Google, Google processes your sign-in under its own privacy policy.
4.3. If you enable a report link for a domain, anyone with that link can view that domain's report until you disable it.
4.4. We may also disclose personal data where required by law.
5. International transfers
5.1. Our database and application servers are located in the European Union (France). Some of our service providers are based in the United States. Where personal data is transferred outside the European Economic Area, we rely on the EU-U.S. Data Privacy Framework, the Standard Contractual Clauses approved by the European Commission or another safeguard permitted under Chapter V of the GDPR. Information on these safeguards can be requested at support@getrankloop.com.
6. Retention
6.1. Account and tracking data are kept until you delete them. Deleting a domain or keyword deletes its ranking history immediately. Deleting your account deletes all of its data from our database immediately and cancels any active subscription. Email delivery data is kept with your account and cleared when delivery to you resumes.
6.2. Support messages are kept for as long as necessary to resolve your request and follow up on it. You may ask us to delete them at any time.
6.3. Billing records are kept by Lemon Squeezy for the period required by tax law.
6.4. Technical logs are kept by our service providers only for as long as needed to secure and operate the Service.
7. Your rights
7.1. You have the right to access, rectify and erase your personal data, to restrict or object to its processing, to data portability and to withdraw any consent you have given. Several of these rights can be exercised directly in the Service, which allows you to export your rankings, change your alert settings and delete domains, keywords or your account.
7.2. To exercise any other right, write to support@getrankloop.com. We will respond within one month.
7.3. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or with the supervisory authority of your country of residence.
8. Cookies
8.1. The Service uses only the cookies strictly necessary to keep you signed in. It does not use analytics, advertising or tracking cookies.
9. Security
9.1. All traffic to the Service is encrypted, passwords are stored as hashes and database access is restricted so that each account can read only its own data. In the event of a personal data breach that puts your data at risk, we will notify you and the competent authority as required by law.
10. Minimum age
10.1. You must be at least 18 years old to use the Service. We do not knowingly collect personal data from persons under 18 and will delete any such data we become aware of.
11. Changes to this Policy
11.1. We will notify you by email before any material change to this Policy takes effect. Our Terms of Service govern the other aspects of your use of the Service.
12. Contact
12.1. Questions about this Policy may be sent to support@getrankloop.com.