Privacy Policy
This policy says what Rank Rebels collects when you use rank-rebels.com, run a free audit, sign in, buy a service or write to us, and what we do with it.
Rank Rebels operates rank-rebels.com. Email: [email protected].
What we collect
- On rank-rebels.com. The website sets no cookies and loads no analytics or advertising scripts. Our servers keep ordinary access logs (IP address, page, time).
- Contact form. Your name, email address, the topic you choose and your message. We save each message in our site admin and email it to [email protected]. To limit spam we keep a one-way hash of your IP address for one hour; the hash is not attached to your message.
- Free audit and your account (chat.rank-rebels.com). The business name and city, or Google Maps link, you enter; the service you want to rank for; the areas you choose; and your email address. There is no password: we email you a link and a six-digit code each time you sign in.
- Orders. What you bought, the business details needed to deliver it (name, address, phone, website, Google Business Profile) and your messages to us and to our assistant in the dashboard.
- Payments. Payments are handled by Stripe. Card details go to Stripe, not to our servers. We keep the order, amount and payment reference.
Where audit data comes from
Business listing details are looked up from Google listing data through a data provider (DataForSEO). Nearby neighborhoods and distances come from OpenStreetMap services. This is public listing data about a business, not data about you.
Cookies
The audit and dashboard use cookies that make them work, and nothing else: a session cookie that keeps you signed in, a short-lived cookie while a sign-in is in progress, and a cookie that links an unfinished audit to your browser. We do not use them to track you across other sites.
How we use it
- To run your audit and deliver what you buy.
- To sign you in and keep your account secure.
- To reply to you.
- To email you about an audit you started. If you register and do not finish, we send a confirmation and two reminders. Every email has a one-click unsubscribe. A hard bounce or spam complaint stops all email to that address.
- To prevent abuse, using limits on lookups, sign-in attempts and messages.
We do not train AI models on your data. We use conversations and audit results to improve our own assistant, such as its instructions and the answers it gives. We do not sell your data.
Google user data
When you connect a Google account to our tools, we ask for access to specific Google services so we can create and manage content for you. We use that access only for the features below.
- Google Drive (
drive.file). We create documents, presentations, spreadsheets, forms and folders, and publish them to the web so they can be embedded in your site. We only touch files our application created. We do not read, list or change any other file in your Drive. - Google Calendar (
calendar). We create calendar events, set the calendar’s name to your business name, and make the calendar publicly viewable so it can be embedded on your published page. - Blogger (
blogger). We publish posts and pages to a blog owned by the connected account.
We do not sell Google user data and do not use it for advertising. We do not transfer it to third parties except as needed to provide these features or where the law requires. We do not use Google user data to train generalized artificial intelligence or machine learning models. Access tokens are stored securely and used only for the actions above. You can revoke our access at any time at myaccount.google.com/permissions, and you can write to [email protected] to ask us to delete data we hold.
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Who else handles it
| Who | For what |
|---|---|
| Email delivery provider (Resend) | Sending sign-in codes, confirmations and reminders |
| Data provider (DataForSEO) and OpenStreetMap services | Business listing and neighborhood lookups |
| Stripe | Taking card payments |
| Anthropic (Claude) and OpenAI (GPT) | Our dashboard assistant processes your messages and audit details to answer you. We do not train AI models on them. |
| Our fulfilment team and automation | Building and publishing what you ordered, using the business details you gave us |
| Hosting providers | Running our servers |
How long we keep it
Unconfirmed registrations are deleted after 30 days. Orders and payment records are kept for 7 years for accounting. Accounts and their audits are deleted 24 months after your last sign-in, or sooner if you ask. Contact messages are deleted after 24 months.
Your choices and rights
You can ask us for a copy of your data, to correct it, or to delete it, and you can unsubscribe from any email. Write to [email protected]. If you are in the EU or UK, we process your data to provide what you ordered, to answer you and to meet legal duties, and you may complain to your local data protection authority. California residents have similar rights to know and delete; we do not sell or share personal information for advertising.
Children
Our services are for businesses. They are not directed at anyone under 18.
Changes
We will post changes on this page and update the date above.