Privacy Policy
Last updated January 25, 2026
RankHero is committed to protecting your privacy. This policy explains what data we collect, why we collect it, and how we handle it.
What We Collect
Account Information
When you create an account, we collect your email address, name, and password. Passwords are securely hashed and never stored in plain text. If you sign in with Google, we receive your email, name, and profile picture from Google.
Payment Information
Payments are processed by Stripe. We do not store your credit card details. Stripe may collect information necessary to process your payment.
Usage Information
We log which tools you use and when, to enforce plan limits and improve our service. We also collect your IP address for security and fraud prevention.
Linked Etsy Shops
If you link an Etsy shop, we store the shop name, URL, and icon to provide our analysis tools.
How We Use Your Data
- To provide and maintain our services
- To process payments and manage subscriptions
- To send transactional emails (verification, password resets)
- To enforce usage limits based on your plan
- To prevent fraud and abuse
Legal Basis for Processing (GDPR)
If you are in the European Economic Area, we process your data based on:
- Contract: Processing necessary to provide our services to you
- Legitimate Interest: To improve our services, prevent fraud, and ensure security
- Consent: For optional features like analytics cookies (when implemented)
- Legal Obligation: To comply with applicable laws
Third-Party Services
Stripe
Payment processing
Postmark
Transactional emails
OpenAI
Powers AI features - your prompts are sent for processing
Sign-in authentication (if you choose Google login)
Cookies
We use essential cookies to keep you logged in. These are required for the service to function.
We do not use analytics or tracking cookies without your explicit consent. If we implement optional analytics in the future, you will be asked to opt in via a cookie banner.
Data Retention
We retain your data for the following periods:
- Account data: Until you delete your account
- Usage logs: 90 days
- Payment records: 7 years (legal/tax requirements)
- Support communications: 2 years after resolution
After account deletion, we may retain anonymized data for analytics purposes.
Data Security
We protect your data with industry-standard security measures including HTTPS encryption, secure password hashing (Argon2), and CSRF protection. Your data is stored on secure servers in the United States.
Your Rights
You can access and update your account information in your settings. To request deletion of your account and associated data, contact us at [email protected].
European Users (GDPR)
If you're in the EEA, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Export your data (portability)
- Object to or restrict processing
- Withdraw consent at any time
- Lodge a complaint with your local data protection authority
California Residents (CCPA)
California residents have the right to:
- Know what personal information we collect
- Request deletion of your data
- Opt-out of the sale of personal information
- Non-discrimination for exercising your rights
We do not sell your personal information.
International Transfers
Your data is stored and processed in the United States. By using RankHero, you consent to this transfer. We ensure appropriate safeguards are in place for international data transfers.
Children
RankHero is not intended for children under 13. We do not knowingly collect data from children. If we learn that we have collected personal information from a child under 13, we will delete it promptly.
Changes
We may update this policy from time to time. The date at the top of this page indicates when it was last revised. For significant changes, we will notify you via email or a notice on our website.