1. Who is responsible
RankSolid ("RankSolid", "we") is the controller of the personal data described here. Contact us about privacy at [email protected].
2. What we collect
| Data | Where it comes from |
|---|---|
| Account data: full name, email address, password (stored only as a salted hash), language preference | You, when you sign up or change language |
| Google sign-in data: name, email address, profile picture URL and Google account ID | Google, only if you choose "Continue with Google" |
| Order data: what you bought, amount, date, order status, Stripe customer and payment IDs | You and Stripe |
| Billing data: billing name, address, tax ID, card brand and last four digits | You, entered on Stripe's checkout page. Full card numbers never reach us. |
| Product details: the website name, URL, descriptions, logo, screenshots and contact email you give us for submissions | You |
| Messages: name, email, website and message from the contact form, and emails you send us | You |
| Technical data: IP address and browser user agent attached to login sessions and form submissions | Your browser |
We use Google Analytics to measure how the website is used: pages viewed, where visits come from, and device and browser. We don't sell personal data.
3. Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Creating and running your account, signing you in | Contract (6(1)(b)) |
| Taking payment, delivering submissions and the report | Contract (6(1)(b)) |
| Sending service emails: confirmation, password reset, order confirmation, report | Contract (6(1)(b)) |
| Keeping invoices and accounting records | Legal obligation (6(1)(c)) |
| Answering your messages | Legitimate interests (6(1)(f)): replying to people who contact us |
| Security: rate limiting, preventing fraud and abuse, keeping logs | Legitimate interests (6(1)(f)): protecting our users and the Service |
| Measuring how the website is used, with Google Analytics | Legitimate interests (6(1)(f)): seeing which pages help and which don't |
We don't send marketing emails. If we ever want to, we'll ask for your consent first.
4. Product details become public
The point of the Service is to publish your product details on third-party directories. Once we submit them, each directory processes that data under its own privacy policy, and we can't control or delete it there. For that reason, we recommend a business contact address (such as [email protected]) rather than a personal one in your product details.
5. Who we share data with
We use a small number of service providers ("processors") who process data on our behalf, under contract:
| Provider | What for | Location |
|---|---|---|
| Stripe | Payments, invoices, fraud prevention | EU and United States |
| Resend | Sending service emails | United States |
| Sign-in, only if you use "Continue with Google" | United States | |
| Google Analytics | Measuring how the website is used | United States |
| OpenRouter, and the AI model host it passes the request to | Drafting your listing from your homepage, only when you use "Analyze and prefill with AI". We only allow hosts that don't store or train on what we send. | United States, and the country of the model host |
| Our screenshot provider (Microlink or Cloudflare) | Taking screenshots of your homepage for your listing | European Union and United States |
| Ahrefs | Looking up the public Domain Rating of the websites you submit (only the domain name is sent) | Singapore |
| Our hosting and database providers | Running the website and storing data | European Union |
Directories receive your product details as described in section 4. We may also disclose data where the law requires it, or to protect our rights in a dispute.
6. International transfers
Where a provider processes data outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses or an adequacy decision (such as the EU-US Data Privacy Framework, for certified companies).
7. How long we keep it
- Account data: while your account exists, and up to 30 days after you ask us to delete it.
- Orders and invoices: as long as tax and accounting law requires, typically up to 10 years.
- Product details and reports: while your account exists, so you can keep reading your report.
- Contact messages: up to 24 months after the conversation ends.
- Login sessions: until they expire (30 days) or you log out.
8. Cookies and local storage
Some cookies keep the site working. Google Analytics sets its own, listed at the end of this table.
| Name | Purpose | Lifetime |
|---|---|---|
better-auth.session_token | Keeps you signed in | 30 days |
better-auth.state and related | Protects the Google sign-in flow | A few minutes |
better-auth.last_used_login_method | Remembers whether you last signed in with Google or with email, so the login page can point it out | 30 days |
NEXT_LOCALE | Remembers the language you chose | 1 year |
tz | Your time zone, so the dashboard shows dates in your local time | 1 year |
theme (local storage, not a cookie) | Remembers light or dark mode, if you pick one | Until you clear it |
_ga, _ga_* | Google Analytics: distinguishes visitors and stores the session | Up to 2 years |
Stripe sets its own cookies on its checkout page, for fraud prevention, under Stripe's privacy policy.
9. Your rights
You can ask us to access, correct, delete, restrict or export your personal data, and you can object to processing based on legitimate interests. Write to [email protected] from the email address on your account. We reply within one month. You also have the right to complain to your local data protection authority.
10. Security
Passwords are stored only as salted hashes. All traffic is encrypted with TLS, access to production data is limited to the people who need it, and sign-in attempts are rate limited. No system is perfectly secure; if a breach ever affects your data, we'll tell you and the relevant authority as the law requires.
11. Children
RankSolid is a business service and isn't meant for anyone under 18. We don't knowingly collect data about children.
12. Changes
If we change this policy in a way that matters, we'll update the date at the top and, for significant changes, email account holders before the change takes effect.