Privacy Policy
Last updated: October 31, 2026
1. Who we are
RanklyGo (“we”, “us”) is a service operated in Israel by InstaFix, of which RanklyGo is a sub-company. We are responsible for the personal information described in this policy, except where section 2 says otherwise. For anything about your privacy, including the requests in section 14, write to omri@ranklygo.com.
2. Who this policy covers
- Customers and their teams: people who create a RanklyGo account or are invited into one.
- Clients of our customers: people an agency or business invites to approve posts, or whose details it adds. If you received an approval link or an invite from an agency, that agency decides how your information is used, and we process it for them. You can ask the agency, or us, about it, and we will pass your request on.
- Visitors: people who visit ranklygo.com or use the free AI check.
3. What we collect
- Account details: your name, email address, password (stored only as a one-way code we cannot read), business name, language and settings.
- Payment details: payments are handled by Paddle. We never see or store your card number; we receive your plan, payment status and billing country.
- Content: posts, captions, images, videos, articles, notes, comments and approvals you and your team create or upload.
- Client details you add: names, email addresses, website addresses, brand details and answers to onboarding questions about your clients.
- Connected account data: described in sections 9 to 11.
- The free AI check: the website address you scan and, if you ask for the full report, your email address.
- Technical information: IP address, browser and device type, pages visited and error logs, used to keep the Service secure and working.
- Cookies and similar storage: described in our Cookie Policy.
4. Why we use it, and whether you have to give it
We use personal information only to:
- create and run your account and the features you use;
- publish and schedule your posts and show you how they perform;
- send posts to your clients for approval and record their answers;
- create AI drafts, images, videos and reports you ask for;
- take payment through Paddle and keep the records the law requires;
- send service emails, answer support requests and tell you about changes;
- keep the Service secure, prevent abuse and fix problems;
- with your consent only, count visits to our public pages and measure which of our ads bring visitors there.
No law requires you to give us personal information. Your name, email address and password are needed to open an account, and the other details are needed only for the features that use them. If you choose not to give them, those features will not work. Saying no to analytics and advertising cookies changes nothing in the Service.
We do not sell personal information, and we do not use it to build profiles for advertising.
5. Emails we send
We send emails you need for the Service: sign-in and security messages, invites, receipts from Paddle, failed-post and reconnect alerts, and changes to our terms. When an agency sends a post to its client for approval, we send that email, and its reminders, on the agency's behalf. These emails contain no advertising.
We send marketing emails only to people who have actively agreed to receive them, every such email is marked as advertising, and each one has a one-click way to stop them. The email you give for the free AI check is used only to send you that report.
6. How we use AI
When you ask RanklyGo to write a post or article, make an image or video, or review a page, we send what is needed for that task (your instructions, the brand details and text you provided, or the public web page) to the AI provider listed in section 7. We do not send audience data, engagement figures or comments to them. AI providers process it only to return the result to us, under terms that do not allow them to train their models on it, and we do not use your data to train AI either. AI output can be wrong, so you check it before it is published.
7. Who we share it with
We share personal information only with the service providers that run RanklyGo for us, each bound by written terms to use it only for that purpose and keep it secure:
| Provider | What for |
|---|---|
| Supabase | Database, sign-in and file storage |
| Cloudflare | Hosting, security and bot protection |
| Paddle | Payments, receipts, invoices and tax (Merchant of Record) |
| Resend | Sending emails |
| Google (Gemini), Anthropic, OpenRouter | AI writing and review |
| NanoBanana API, HeyGen | AI images and videos |
| DataForSEO, Firecrawl | Search data and reading public web pages |
| Meta, Google, Microsoft, LinkedIn, TikTok | Sign-in and publishing to the accounts you connect |
| Google Analytics | Counting visits to our public pages, only with your consent |
| Meta (pixel) | Ad measurement on our public pages, only with your consent |
We also share information with the people you choose (your team, your clients and the platforms you publish to), with a buyer if RanklyGo or its business is sold (under the same protections), and where the law or a valid order from an authority requires it.
8. Storage outside Israel
Our providers store and process information on servers outside Israel, mainly in the European Union and the United States. We transfer it only to providers that have committed in writing to keep it secure and use it only for us, as Israel's Privacy Protection (Transfer of Data to Databases Abroad) Regulations require.
9. Social Account Data
When you connect a social account - a LinkedIn profile or Company Page, a Facebook Page, an Instagram Business account, a TikTok account or a YouTube channel - you authorise that connection yourself through the platform's own login screen. We never ask for or receive your password for any of these platforms.
For each connected account we store:
- An access token issued by that platform, held encrypted at rest with a key kept outside the database. Tokens are never sent to your browser and are readable only by our server-side code.
- The account's identifier, name, handle and profile picture, so you can tell your connected accounts apart.
- The posts you write or schedule through RanklyGo, the media you attach to them, and the identifier the platform returns when a post is published.
- The engagement figures those posts report back - impressions, reach, reactions, comments, shares, clicks and follower counts - and the text of comments left on your own posts, so you can read the response to a campaign inside RanklyGo.
We use this data only to operate the features you asked for: publishing and scheduling your content, showing you your own posts and their performance, and reading comments on your own posts. We do not sell it, we do not use it for advertising, we do not share it with third parties beyond the hosting and database providers that run the service on our behalf, and we do not use it to train artificial-intelligence models. Where AI is used to draft a post, what is sent to the AI provider is the brief you wrote - never audience data, engagement figures or comments.
Data from a connected account is visible only to the RanklyGo account that connected it and to people it has explicitly invited to that client's workspace.
Removing it. Pressing Disconnect next to an account deletes its access token immediately, after which RanklyGo can no longer read from or publish to it. You may also revoke our access from the platform's own settings, which takes effect at once. To have your RanklyGo account and everything associated with it deleted, follow the instructions on our data deletion page; we confirm within 5 working days and complete deletion within 30 days. Posts already published stay on the platform they were published to, because they belong to your account there rather than to us.
10. Google User Data
If you choose to connect your Google account, RanklyGo requests read-only access to your Google Search Console data (the webmasters.readonly scope) and your email address. We request no other Google permissions, and we never request write access to your Search Console.
We use this access solely to:
- List the Search Console properties your Google account can access, so you can link the right one to your project
- Read the search queries, pages, impressions, clicks, and average position for the property you link
- Show you which topics competing pages cover that your pages do not
- Display your email address in the app, so you can see which Google account is connected
We store your Google access and refresh tokens, and the performance figures we retrieve, in our database so the connection keeps working between sessions. Tokens are held encrypted at rest and are never sent to your browser or exposed to any other customer.
RanklyGo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, we do not use it for advertising, we do not transfer it to third parties except as required to provide the feature you asked for, and we do not use it to train generalised artificial-intelligence models.
You can disconnect at any time from the Website AI SEO page in the app, which deletes the stored tokens immediately. You may also revoke access from your Google account permissions page. To have the retrieved Search Console data deleted as well, contact us at the address below and we will remove it within 30 days.
11. YouTube API Services
RanklyGo uses YouTube API Services to publish videos to the YouTube channel you connect and to read back how those videos are performing. By connecting a YouTube channel you agree to be bound by the YouTube Terms of Service, and Google's handling of your information is governed by the Google Privacy Policy.
When you connect a channel we request two permissions and no others: youtube.upload, to upload videos to your channel, and youtube.readonly, to identify the connected channel and read statistics for the videos we uploaded for you.
We use that access solely to:
- Confirm which channel you have connected, and show its name and picture in the app so you can see it is the right one
- Upload the videos you schedule, with the title, description and privacy setting you choose
- Read views, likes, comments and processing status for the videos RanklyGo uploaded for you, so they appear alongside your other channels
- Where you ask for a digital presence report on a channel you own, read the publish dates of its recent uploads, which is information already public on the channel page
What we store. Your YouTube access and refresh tokens, held encrypted at rest and never sent to your browser; the id of the connected channel and its public name and picture; the video files you upload to us, which are your own content; and the statistics listed above. We keep these for as long as the channel is connected and your account is open.
What we do not do. We do not download or store video files from YouTube, sell or transfer YouTube data to anyone, use it for advertising, combine it with data from other channels for analysis or resale, show one customer another customer's YouTube data, or use it to train generalised artificial-intelligence models. There is no charge for YouTube data or YouTube content: your subscription is for the platform, of which your channel is one of several destinations.
Removing access. Disconnect the channel in the app at any time. This deletes the stored tokens immediately and hands the authorisation back to Google, so RanklyGo no longer appears as an app with access to your account. You can also revoke it yourself from the Google security settings page, which stops any further access at once. To have the stored videos and statistics deleted as well, contact us at the address below and we will remove them within 30 days.
12. How long we keep it
- Account and content: while your account is open. After it closes you have at least 30 days to export, then we delete it within a further 30 days.
- Connected account access: deleted the moment you disconnect the account.
- Billing records: kept by Paddle and by us for as long as tax law requires, normally 7 years.
- Free AI check: kept so you can reopen your report; deleted on request.
- Security logs: kept for a limited period, then deleted.
13. Security
We protect personal information with measures that fit the risk, including encrypted connections, encryption of access tokens at rest, access limited to the people who need it, and providers bound by security terms. No system is completely secure. If a serious security incident affects your information, we will report it to the Privacy Protection Authority as the law requires and tell you without undue delay.
14. Your rights
Under Israel's Privacy Protection Law, 1981 you may:
- see the personal information we hold about you;
- ask us to correct or delete information that is wrong, incomplete or out of date;
- ask us to stop sending you marketing, and to remove you from any mailing list;
- withdraw a consent you gave, such as to analytics or advertising cookies, at any time.
If you are in the European Union or the United Kingdom, you also have the rights the GDPR gives you, including to restrict or object to processing and to receive your data in a portable form.
To use any of these rights, email omri@ranklygo.com from the address on your account, or tell us how to confirm who you are. We reply within 30 days. If your information came from an agency that uses RanklyGo, we may pass your request to them. If you are not happy with our answer, you may complain to Israel's Privacy Protection Authority, or to the data protection authority where you live.
15. Children
RanklyGo is for people aged 18 and over. We do not knowingly collect information from children. If you think a child has given us information, tell us and we will delete it.
16. Changes to this policy
We update this policy when our practices or the law change, and the date at the top shows the latest version. If a change materially affects how we use your information, we will email account holders before it takes effect.
17. Contact
Questions about this policy or your information: omri@ranklygo.com.
RanklyGo is a sub-company of InstaFix.