Privacy Policy

1. Introduction

RanklyGo (“we”, “us”, or “our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

2. Information We Collect

We collect information that you provide directly to us, such as when you create an account, connect social media profiles, or contact our support team. This may include your name, email address, business information, and social media account details.

We also automatically collect certain information when you use our services, including IP addresses, browser type, device information, and usage data through cookies and similar technologies.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments and questions
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and other illegal activities

4. Data Sharing and Disclosure

We do not sell your personal information. We may share information with third-party vendors and service providers who need access to such information to carry out work on our behalf, such as payment processing and hosting services.

We may also disclose information if required to do so by law or in response to valid requests by public authorities.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.

6. Your Rights

Depending on your location, you may have rights regarding your personal data, including the right to access, correct, delete, or restrict processing of your information. To exercise these rights, please contact us.

7. Third-Party Services

Our service integrates with third-party platforms (such as Meta/Facebook, Instagram, LinkedIn, TikTok, YouTube, and Google Search Console). Your use of these integrations is subject to their respective privacy policies and terms of service.

8. Social Account Data

When you connect a social account — a LinkedIn profile or Company Page, a Facebook Page, an Instagram Business account, a TikTok account or a YouTube channel — you authorise that connection yourself through the platform's own login screen. We never ask for or receive your password for any of these platforms.

For each connected account we store:

• An access token issued by that platform, held encrypted at rest with a key kept outside the database. Tokens are never sent to your browser and are readable only by our server-side code.
• The account's identifier, name, handle and profile picture, so you can tell your connected accounts apart.
• The posts you write or schedule through RanklyGo, the media you attach to them, and the identifier the platform returns when a post is published.
• The engagement figures those posts report back — impressions, reach, reactions, comments, shares, clicks and follower counts — and the text of comments left on your own posts, so you can read the response to a campaign inside RanklyGo.

We use this data only to operate the features you asked for: publishing and scheduling your content, showing you your own posts and their performance, and reading comments on your own posts. We do not sell it, we do not use it for advertising, we do not share it with third parties beyond the hosting and database providers that run the service on our behalf, and we do not use it to train artificial-intelligence models. Where AI is used to draft a post, what is sent to the AI provider is the brief you wrote — never audience data, engagement figures or comments.

Data from a connected account is visible only to the RanklyGo account that connected it and to people it has explicitly invited to that client's workspace.

Removing it. Pressing Disconnect next to an account deletes its access token immediately, after which RanklyGo can no longer read from or publish to it. You may also revoke our access from the platform's own settings, which takes effect at once. To have your RanklyGo account and everything associated with it deleted, follow the instructions on our data deletion page; we confirm within 5 working days and complete deletion within 30 days. Posts already published stay on the platform they were published to, because they belong to your account there rather than to us.

9. Google User Data

If you choose to connect your Google account, RanklyGo requests read-only access to your Google Search Console data (the webmasters.readonly scope) and your email address. We request no other Google permissions, and we never request write access to your Search Console.

We use this access solely to:

• List the Search Console properties your Google account can access, so you can link the right one to your project
• Read the search queries, pages, impressions, clicks, and average position for the property you link
• Show you which topics competing pages cover that your pages do not
• Display your email address in the app, so you can see which Google account is connected

We store your Google access and refresh tokens, and the performance figures we retrieve, in our database so the connection keeps working between sessions. Tokens are held encrypted at rest and are never sent to your browser or exposed to any other customer.

RanklyGo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, we do not use it for advertising, we do not transfer it to third parties except as required to provide the feature you asked for, and we do not use it to train generalised artificial-intelligence models.

You can disconnect at any time from the Website AI SEO page in the app, which deletes the stored tokens immediately. You may also revoke access from your Google account permissions page. To have the retrieved Search Console data deleted as well, contact us at the address below and we will remove it within 30 days.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last updated” date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at omri@smartallocations.com.

RanklyGo is a sub-company of Smart Allocations Limited.