Privacy Policy
Last updated September 21, 2026
RankHero provides keyword research, listing analysis, rank tracking, and AI tools for online sellers. This Privacy Policy applies to RankHero at www.rankhero.com and the RankHero Chrome extension, and explains how we collect, use, store, share, and delete personal information when you visit our website, create an account, or use our tools. Contact the RankHero team responsible for this information at [email protected].
What we collect
Account information
When you create an account, we collect your email address, name, and password. Passwords are securely hashed and never stored in plain text. If you sign in with Google, we receive your email, name, and profile picture from Google.
Payment information
Payments are processed by Stripe. We do not store your credit card details. Stripe may collect information necessary to process your payment.
Usage information
We record tool usage, searches, saved items, and inputs and results associated with features you use. We collect technical information such as IP address, browser and device information, referring pages, timestamps, and registration or sign-in events to operate the service, enforce plan limits, and prevent fraud. Website analytics and advertising measurement are described under "Cookies and similar technologies" below.
Marketplace information
If you link an Etsy shop, we store its name, URL, and icon. We also use public shop and listing information to provide research results.
Google sign-in
If you choose to sign in with Google, we receive your Google account identifier, email address and verification status, name, and profile picture. We use this information to create or connect your RankHero account, keep sign-in secure, display your profile, and contact you about the service. We do not receive your Google password or access your Gmail, Drive, Calendar, or Contacts.
We store this information with your account and handle it as described under sharing and retention below. We do not sell Google sign-in data or use it to train general-purpose AI models.
You can disconnect RankHero through your Google Account connections. Disconnecting does not delete your RankHero account or stored information, or end an existing RankHero session. To request deletion, email [email protected]. If Google is your only sign-in method, set a RankHero password before disconnecting to keep access to your account.
Chrome extension
When you are signed in and the extension is enabled, it automatically sends Etsy keywords, submitted searches, listing identifiers, country and market settings, and usage information to RankHero. We use this data to provide and improve Etsy research features, manage access, and protect the service. Submitted searches and usage records are linked to your account.
The extension stores sign-in details, preferences, and recent results on your device. Our hosting and database providers help process extension data; we do not sell it or use it for advertising. You can stop collection by disabling the extension or signing out of it. See Data Retention for storage and deletion details.
RankHero follows the Chrome Web Store User Data Policy, including its Limited Use requirements, for extension data and any sharing described in this policy.
How we use your data
- To provide and maintain our services
- To process payments and manage subscriptions
- To send account and service emails, including verification, password resets, and billing updates
- To send product updates, offers, or review invitations; you can unsubscribe from marketing emails using their unsubscribe link, while essential account messages continue
- To process the content you submit to research, analysis, and AI tools and return results
- To enforce usage limits based on your plan
- To prevent fraud and abuse
Legal basis for processing (GDPR)
If you are in the European Economic Area, we process your data based on:
- Contract: Processing necessary to provide our services to you
- Legitimate Interest: To improve our services, prevent fraud, and ensure security
- Consent: Where required for optional communications or processing; consent can be withdrawn by contacting us
- Legal Obligation: To comply with applicable laws
Third-party services
Stripe
Payment processing
Postmark
Transactional emails
OpenAI
Powers AI features - your prompts are sent for processing
Sign-in authentication (if you choose Google login)
When we share information
In addition to the services above, infrastructure providers process data for hosting, database storage, and service operation. Trustpilot may receive your name, email, and a registration reference for review invitations. Analytics and advertising providers receive website event and device information as described below. AI providers receive the prompts, content, and images you submit to AI features; avoid including personal information that is not needed for your request.
We may disclose information when required by law, to respond to lawful requests, investigate abuse, protect rights and security, or as part of a merger, acquisition, or transfer of the business, subject to applicable privacy obligations. We do not sell your personal information.
Cookies and similar technologies
We use session cookies to keep you signed in and support authentication and security. We also use browser storage to remember preferences such as your display theme.
The website uses Google Analytics and Rybbit for usage measurement, and Google Ads, Meta, Reddit, and OpenAI advertising pixels for page, registration, and conversion measurement. These technologies can receive IP addresses, browser or device information, page URLs, referral information, cookie or similar identifiers, and interaction events. Advertising integrations may also receive your account email and identifiers when available. Their handling of that information is also governed by their respective privacy policies. You can manage cookies in your browser and advertising preferences with those providers. Blocking cookies may affect sign-in and other functionality.
Data retention
We retain account information, including Google sign-in profile data, while your account is in use and as needed to provide the service. Usage and security records are retained as needed to operate the tools, investigate abuse, and resolve disputes. Payment and billing records may need to be retained to meet accounting, tax, or other legal obligations.
Extension searches and usage history have no automatic expiry. Earlier search records keep their original retention periods and purposes. Signing out, uninstalling the extension, or deleting your account does not automatically delete stored searches; you can request their deletion by contacting us.
Request deletion of your account and associated personal information, including stored Google data, by emailing [email protected] from your account email. We may need to verify your identity before acting. We will delete or de-identify information that is no longer needed, subject to legal, security, and dispute-resolution requirements. Residual copies may remain in backups until those backups are replaced. Removing Google's authorization alone does not delete your RankHero account.
Data security
We use encryption, access controls, and other security measures to protect personal information. No method of transmission or storage is completely secure.
Your rights
You can access and update your account information in your settings. To request deletion of your account and associated data, contact us at [email protected].
European users (GDPR)
If you're in the EEA, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Export your data (portability)
- Object to or restrict processing
- Withdraw consent at any time
- Lodge a complaint with your local data protection authority
California residents (CCPA)
California residents have the right to:
- Know what personal information we collect
- Request deletion of your data
- Opt-out of the sale of personal information
- Non-discrimination for exercising your rights
We do not sell your personal information.
International transfers
RankHero and its service providers may process information in the United States and other countries where they operate. Those countries may have different data protection laws from your country. Contact us for information about the providers and safeguards applicable to your data.
Children
RankHero is not intended for children under 13. We do not knowingly collect data from children. If we learn that we have collected personal information from a child under 13, we will delete it promptly.
Changes
We may update this policy from time to time. The date at the top of this page indicates when it was last revised. For significant changes, we will notify you via email or a notice on our website.