Privacy policy

We collect the information needed to run the service:

• your name, email address, password hash, and account settings;
• sites, keywords, competitor domains, tags, disavow entries, and saved history;
• support messages and private account requests;
• session IP address, signup IP and country, browser user-agent, and timestamps;
• plan use, MCP calls, error details, and security or rate-limit events; and
• invoice, subscription, and transaction metadata described below.

If you sign in with Google or GitHub, we receive the profile details needed to identify your account, such as your provider account ID, name, email address, and profile image. We store the linked account and encrypted OAuth tokens.

We request the standard sign-in scopes and do not ask for repository access, Google Drive, Search Console, or private Google search history. Google and GitHub handle their part under their own terms and privacy notices.

Payment details are entered on a hosted checkout. RankMySEO does not store your full card number, card security code, bank account credentials, virtual account number, or wallet credentials.

We do retain the records needed to identify and support a purchase: invoice number, plan, billing interval, amount, currency, payment status, payment method category, processor reference, subscription reference, and transaction logs.

We use IP addresses for account security, abuse prevention, session records, rate limits, and guest access rules. Signup country can also select the currency shown at checkout.

RankMySEO does not use an IP address as a tax decision and does not run automated fraud scoring. A hosting or payment service may perform its own security checks under its policy.

We use information to:

• create and secure accounts;
• run checks, store history, and answer dashboard or MCP requests;
• process plans, invoices, renewals, and account limits;
• send verification, reset, receipt, renewal, and support messages;
• find errors, prevent abuse, and protect the service; and
• meet legal, accounting, and dispute-handling obligations.

Where applicable, we process this information to provide the service you requested, meet a legal obligation, or pursue a legitimate interest in securing and operating RankMySEO.

We send only the information needed to services that handle sign-in, payments, email delivery, security checks, hosting, and SEO data collection. Site names, domains, keywords, locations, and public URLs may be sent to an SEO data service to complete a requested check.

We may also disclose information when law requires it, to protect a person or the service, or as part of a sale or reorganization. We do not sell personal information or use it for third-party advertising.

RankMySEO uses first-party cookies for signed-in sessions, security, checkout currency, and interface preferences. The app also stores your last selected site, pending signup site, and navigation choices in your browser.

We do not currently use advertising cookies or a product analytics tracker. A consent banner is not shown because these cookies and storage are needed for the requested service. You can clear them in your browser, but sign-in and saved preferences may stop working.

Account, site, keyword, and rank-history records are generally kept while the account or site exists. Guest research is deleted after 24 hours if it is not paired with an account. Recorded application errors are removed after 30 days.

Payment and support records may be kept after account deletion for accounting, legal, security, and dispute handling. Public domain and keyword results may remain in a shared cache or history because they are not stored as private account content.

We use access controls, hashed passwords and API keys, encrypted OAuth tokens, secure cookies in production, and limited admin access. No system is perfectly secure. Contact support@rankmyseo.com if you believe your account or key has been exposed.

You can change your name and password in Account, revoke an API key there, and remove sites or keywords from the app. You can also ask Support for a copy, correction, or deletion of personal information.

Some records may be retained where law permits or requires it. We may ask you to verify that the account is yours before acting on a request.

Services used by RankMySEO may process information outside your country. Where required, we use contractual or other lawful safeguards for those transfers.

RankMySEO is for people aged 18 or older. We do not knowingly collect personal information from children.

We may update this notice when the product, providers, or legal requirements change. The effective date at the top will change.

Privacy questions and requests can be sent to support@rankmyseo.com.