Privacy Policy

Account Information

When you create a VexRank account, we collect your name, email address, and password. If you choose to sign up via Google or GitHub OAuth, we receive your name and email from those providers.

Website & SEO Data

When you submit a URL for SEO analysis, we crawl and analyze that website's content, structure, metadata, backlinks, and ranking data. This includes page content, HTML structure, keyword data, and technical SEO metrics relevant to the analysis you request.

Usage Data

We automatically collect information about how you interact with our platform — pages visited, features used, report generation frequency, and time spent on the platform. This helps us improve our service.

Payment Information

For paid plans, payment processing is handled by Stripe. We do not store your full credit card details. We retain only billing contact information and transaction records for accounting purposes.

Cookies & Similar Technologies

We use essential cookies for authentication and session management. We also use analytics cookies to understand platform usage patterns. You can manage cookie preferences through our Cookie Settings.

Service Delivery

We use your data to perform SEO audits, generate optimization reports, track keyword rankings, monitor backlinks, and deliver the core services you subscribe to.

AI & Machine Learning

We use aggregated and anonymized SEO data to train and improve our AI models, including content optimization algorithms, audit detection patterns, and ranking prediction engines. Your specific website content is not used to train models that would benefit your competitors.

Communication

We may send you service-related emails (account updates, report completion notifications, billing reminders) and occasional product updates. You can opt out of marketing communications at any time.

Platform Improvement

Usage analytics help us identify bugs, improve user experience, and prioritize new features based on real user needs.

Service Providers

We work with trusted third-party service providers to deliver our platform: Supabase (database & authentication), Stripe (payment processing), Resend (transactional email), and Cloudflare (infrastructure & security). These providers only access data necessary to perform their specific functions.

SEO Data Sources

We integrate with third-party SEO data providers and search engine APIs to retrieve ranking data, backlink information, and keyword metrics. Data sent to these services is limited to the URLs and keywords you specify for analysis.

Legal Compliance

We may disclose information if required by law, court order, or governmental regulation. We will notify you of such requests where legally permitted.

Business Transfers

In the event of a merger, acquisition, or asset sale, your data may be transferred as part of that transaction. You will be notified via email and/or prominent notice on our platform.

Data Location

Your data is stored on secure servers provided by Supabase and Cloudflare, with primary hosting in the United States. We implement industry-standard encryption for data in transit (TLS 1.3) and at rest (AES-256).

Retention

We retain your account data as long as your account is active. SEO reports and analysis history are retained for the duration of your subscription. Upon account deletion, all personally identifiable data is removed within 30 days. Aggregated, anonymized data may be retained for analytical purposes.

Security Measures

We employ firewalls, intrusion detection systems, regular security audits, and strict access controls. Our team follows security best practices including multi-factor authentication and least-privilege access principles.

Access & Portability

You can request a copy of your personal data in a machine-readable format at any time. Most data is accessible directly through your dashboard.

Correction & Deletion

You can update your account information at any time. You may delete your account and associated data through the platform settings or by contacting our support team.

Marketing Preferences

You can unsubscribe from marketing emails via the link in any email or through your account notification settings.

Cookie Controls

You can control non-essential cookies through our Cookie Settings panel, accessible from the footer of every page.

Lawful Basis

For users in the European Economic Area (EEA), we process personal data based on: (a) contract performance (delivering our service), (b) legitimate interest (improving our platform), and (c) your consent (marketing communications).

Data Processing Agreement

Paid plan subscribers can request a Data Processing Agreement (DPA) by contacting our support team. This DPA outlines our obligations as a data processor under GDPR.

International Transfers

Data transferred outside the EEA is protected by Standard Contractual Clauses and appropriate safeguards as required by applicable law.

VexRank is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

We may update this Privacy Policy from time to time. Material changes will be communicated via email and/or a prominent notice on our platform at least 30 days before the change becomes effective. Continued use of VexRank after changes take effect constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at privacy@vexrank.com or through our Contact page.