Privacy Policy

Rankpad is an AI visibility tracking product for teams that want to understand how their brand appears in AI answers. In this policy, "Rankpad," "we," "us," and "our" refer to the operator of the Rankpad service.

When we decide why and how personal data is processed, we act as a controller. When a customer asks us to process personal data inside their workspace or scan configuration, we may act as a processor under our Data Processing Agreement.

We collect the information needed to run the product, secure accounts, process billing, and produce AI visibility reports. The exact data depends on how you use Rankpad.

• Account information, such as name, email address, login details, workspace membership, and plan status.
• Product setup information, such as brand name, website, tracked domain, competitors, prompt lists, scan settings, and visibility preferences.
• Scan information, such as prompt text, AI answer output, citations, brand mentions, competitor mentions, timestamps, trend data, and related evidence.
• Billing information handled through Stripe, such as plan, invoice status, billing email, tax details, and payment metadata. We do not store full card numbers.
• Support and communication data, such as emails, form submissions, issue details, feedback, and messages you send to us.
• Technical and usage data, such as device type, browser, IP address, approximate location, pages viewed, features used, event logs, error logs, and session data.

We use personal data only for business purposes connected to providing, improving, protecting, and explaining Rankpad.

• Provide the service, authenticate users, maintain workspaces, run scans, and display reports.
• Measure AI visibility, citations, brand mentions, competitor mentions, prompt history, and trend changes over time.
• Process payments, manage subscriptions, send invoices, and prevent billing abuse.
• Respond to support requests, troubleshoot product issues, and communicate about account or service changes.
• Improve reliability, debug errors, analyze product usage, and decide which features need work.
• Protect Rankpad, our users, and the public from fraud, abuse, security incidents, and illegal activity.
• Comply with legal obligations, enforce our Terms, and preserve records when required.

Rankpad works by testing prompts against AI systems and analyzing the resulting answers. To provide that functionality, we may send configured prompts, brand names, competitor names, domains, and related context to AI model providers or AI-related infrastructure providers.

We do not sell customer data. We do not use customer workspace data to train Rankpad-owned AI models. Third-party AI providers may process prompts and outputs according to their own service terms and data processing commitments.

AI answers can include public information, third-party source links, or incorrect statements. Rankpad stores the results so you can review visibility trends and evidence over time.

Rankpad uses cookies and similar technologies for authentication, session management, preferences, security, analytics, and product diagnostics.

You can control cookies through your browser settings. Blocking essential cookies may prevent login, session persistence, billing access, or other core product functions from working correctly.

If the GDPR, UK GDPR, or similar laws apply to you, our legal bases may include contract, legitimate interests, consent, and legal obligations.

• Contract, when processing is needed to provide Rankpad, manage your account, or deliver paid services.
• Legitimate interests, when we secure the product, improve performance, prevent abuse, analyze usage, or communicate with customers in a reasonable way.
• Consent, when we ask for permission for optional cookies, marketing, or other optional processing.
• Legal obligations, when we retain billing records, respond to lawful requests, or comply with applicable law.

We share personal data only when needed to operate Rankpad, follow your instructions, comply with law, or protect the service.

• Service providers and subprocessors that provide hosting, database, payment, analytics, email, support, security, or AI processing services.
• Workspace users and account administrators, where information belongs to a shared Rankpad workspace.
• Legal, safety, and compliance recipients when required by law, court order, regulator request, or to protect rights and safety.
• Business transfer recipients if Rankpad is involved in a merger, acquisition, financing, reorganization, or sale of assets.

We do not sell personal data. We do not share personal data for cross-context behavioral advertising.

We keep personal data for as long as needed to provide Rankpad, maintain business records, resolve disputes, enforce agreements, improve security, and meet legal requirements.

Account and workspace data is generally retained while your account is active. After cancellation or deletion, we delete or anonymize personal data within a reasonable period unless we need to retain it for billing, tax, security, legal, backup, or fraud-prevention reasons.

Backups and logs may persist for a limited period before being overwritten or deleted through normal retention cycles.

We use technical and organizational measures designed to protect personal data, including encrypted connections, access controls, least-privilege practices, provider security controls, monitoring, and incident response procedures.

No internet service can guarantee perfect security. You are responsible for keeping your login credentials secure, using strong passwords, limiting workspace access, and notifying us promptly if you suspect unauthorized access.

Rankpad and our providers may process personal data in countries other than where you live. When required, we rely on appropriate safeguards such as standard contractual clauses, data processing agreements, adequacy decisions, or other lawful transfer mechanisms.

Depending on where you live, you may have the right to access, correct, delete, export, restrict, or object to certain processing of your personal data. You may also have the right to withdraw consent and lodge a complaint with a data protection authority.

You can update some account information directly in Rankpad. For other requests, contact privacy@rankpad.app. We may need to verify your identity before completing a request.

Rankpad is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child provided personal data to Rankpad, contact us and we will take appropriate steps to delete it.

We may update this policy as Rankpad changes or as legal requirements evolve. If we make material changes, we will provide notice through the product, by email, or by updating this page.

Continued use of Rankpad after an update means the revised policy applies from its effective date.

Questions about privacy, data rights, or this policy can be sent to privacy@rankpad.app.