Privacy Policy

1. Who we are

RankAscend is an SEO content automation platform operated by Francesco Leoni ("we", "us", "our"). Our registered email address is francesco.leoni@lemonpie.it. This policy explains what personal data we collect, why we collect it, and your rights regarding that data.

2. Data we collect

We collect the following categories of personal data:

• Account data: email address, display name, company name, and avatar URL provided during sign-up or in account settings.
• Site configuration data: website URLs, content settings, and integration credentials (GitHub tokens, Hygraph API keys, Google OAuth tokens) you connect to the platform.
• Usage data: pages visited, features used, and actions taken within the dashboard, collected automatically via server logs and analytics.
• Content data: keywords, generated articles, publish jobs, and crawl results associated with your sites.
• Payment data: processed by our payment provider. We do not store card numbers or bank details on our servers.

3. How we use your data

We use your data to:

• Provide, operate, and improve the RankAscend platform.
• Authenticate your identity and maintain your session.
• Connect to third-party services (GitHub, Google Search Console, Hygraph, etc.) on your behalf.
• Send transactional emails such as password resets and billing receipts.
• Monitor platform health and investigate abuse or security incidents.
• Comply with legal obligations.

We do not sell your personal data to third parties. We do not use your content or site data to train AI models.

4. Third-party services

RankAscend integrates with third-party services as part of its core functionality. When you connect an integration, that provider's privacy policy governs how they handle your data:

• Supabase (database and authentication)
• GitHub (content publishing)
• Google (Search Console data)
• Meta (Instagram carousel publishing)
• TikTok (carousel publishing)
• Trigger.dev (background job processing)
• Netlify (platform hosting and deployment)

All OAuth tokens and API credentials you provide are encrypted at rest using industry-standard encryption. They are never exposed to the browser after initial authorisation.

5. Cookies

We use strictly necessary cookies to manage your authentication session. We do not use advertising or tracking cookies. Analytics, if enabled, are collected without personally identifiable information.

6. Data retention

We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are required to retain it by law (for example, for billing records).

Content pieces, keywords, and publish jobs associated with your sites are deleted when you delete the site or your account.

7. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Request a portable copy of your data.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, email us at privacy@rankascend.com. We will respond within 30 days.

8. Security

We implement appropriate technical and organisational measures to protect your data, including encrypted storage, HTTPS-only transport, and scoped OAuth permissions. No method of transmission over the internet is 100% secure, so we cannot guarantee absolute security.

9. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be communicated by email to registered users at least 14 days before they take effect.

10. Contact

Questions about this policy? Email us at privacy@rankascend.com.