SoRanked Privacy Policy

1. Information we collect

• Account information: your email address and, if you sign in with Google, the name, email address and profile picture Google shares with us. Passwords are handled by our authentication provider and stored only as secure hashes.
• Access requests: the name, email, website, company, role and message you submit in the request-access form, plus your IP address so we can limit abuse.
• Free tools: the website address you check and the report we create from its public pages and files (such as robots.txt, llms.txt, its sitemap and homepage), plus your IP address so we can limit abuse. If you sign up to unlock a full report, we also keep the name, email and company you enter and record them as an access request.
• Content you add: websites, keywords, competitors, content drafts, briefs, uploaded files (such as keyword CSV imports) and images you work on in SoRanked.
• Data from Google, when you connect it: see section 3.
• Billing information: payments are processed by Stripe. We keep order records (plan, amount, status); we never see or store your full card number.
• Usage and technical data: server logs (IP address, browser type, timestamps, errors) and usage records such as how many AI requests your account made, which we use for quotas, billing, security and debugging.
• Support messages: what you send us when you contact support.

2. How we use information

• To provide SoRanked: show your search performance, research keywords and competitors, track rankings and AI visibility, and generate and improve content at your request.
• To run AI features you use, as described in section 4.
• To manage your account, subscription, quotas and payments.
• To keep SoRanked secure, prevent abuse and fix problems.
• To send you service messages, such as invitations, security notices and changes to these terms.

We do not sell your information, we do not use it for advertising, and we do not use it to train AI models.

3. Google user data

When you connect a Google account, you choose what SoRanked may access on Google’s consent screen. We request read-only access:

• Google Search Console (webmasters.readonly): the list of your properties and their search performance data — queries, pages, clicks, impressions, click-through rate and average position.
• Google Analytics (analytics.readonly), if you grant it: the list of your properties and their traffic reports.
• Google Ads (adwords), only if you connect it separately: account details and keyword planning data such as search volumes and competition.
• Basic profile (openid, email): the email address of the connected Google account, so you can see which account is linked.

How we use it. Only to provide the features you use in SoRanked for your own websites: showing your performance, finding keyword and content opportunities, internal-linking suggestions, ranking and traffic reports, and AI-written content and assistant answers based on your site’s data.

How we share it. We do not sell Google user data, use it for advertising, or transfer it to data brokers or information resellers. We share it only with the service providers needed to run the features you use — our hosting and database provider and, when you use an AI feature, the AI provider that processes that request (section 4) — and when the law requires it. People at SoRanked do not read your Google data unless you ask us to (for example, in a support request), it is needed for security or to comply with the law.

How we protect it. Google access tokens are encrypted at rest (AES-GCM) and all data is encrypted in transit (TLS). Data in your workspace is isolated from other customers by database-level access rules.

Your control. You can disconnect Google at any time in SoRanked under Settings → Integrations, which deletes the stored access token, and you can revoke SoRanked’s access in your Google Account at myaccount.google.com/permissions. Reports already imported stay in your workspace until you delete the workspace or ask us to delete them.

SoRanked.ai’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. AI processing

SoRanked uses AI models to research, plan, write and improve content and to answer your questions. When you use one of these features, the information that request needs — for example your topic, draft text, keywords, competitor pages and relevant search performance data — is sent to the AI provider that serves it: OpenAI, Anthropic, Google, xAI or Moonshot AI, directly or through an AI API gateway we use to route requests. Providers process it under their API terms to return a result to us. We do not use your data to train AI models.

5. Service providers we work with

• Supabase — database, authentication, file storage and server functions (data stored in the EU, Frankfurt).
• Cloudflare — website hosting and delivery.
• Stripe — payment processing.
• AI providers — as listed in section 4.
• DataForSEO — search-results and keyword data; it receives the keywords and domains you research.
• Openverse and Pexels — free image search; they receive your image search terms.
• Google — the Google APIs you connect, accessed on your behalf.

We may also disclose information when the law requires it, to protect the rights and safety of our users or SoRanked, or as part of a merger or acquisition, in which case this policy continues to apply.

6. Cookies and browser storage

We use only what SoRanked needs to work: your sign-in session is kept in your browser’s storage, and a small cookie remembers whether the sidebar is open. We do not use advertising or third-party analytics cookies.

7. How long we keep information

• We keep your information while your account is active.
• Deleting a workspace deletes its data, including imported Google reports.
• Disconnecting Google deletes the stored access token straight away.
• If you ask us to delete your account, we delete it and its data within 30 days, except records we must keep by law, such as invoices. Backups are overwritten on a rolling schedule.

8. Security

We protect information with encryption in transit (TLS), encryption at rest for access tokens and API credentials, per-workspace access rules in the database, and restricted, audited administrative access. No system is perfectly secure; if we learn of a breach that affects you, we will tell you as the law requires.

9. International transfers

SoRanked’s database is hosted in the European Union. Some service providers, including AI providers, may process information in other countries such as the United States, under their own safeguards for international transfers.

10. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your information, and to object to or restrict how we use it. To make a request, write to support@soranked.ai; we answer within 30 days. If you are in the EU or UK, you can also complain to your local data protection authority.

11. Children

SoRanked is not directed to children under 16, and we do not knowingly collect their information.

12. Changes to this policy

We may update this policy. We will change the “Last updated” date above and, for significant changes, let you know by email or in the app before they take effect.

13. Contact

For any privacy question or request, contact us at support@soranked.ai.