Privacy Policy
Effective July 19, 2026
This policy describes what Rank & Keep (“we”) collects when you use rankandkeep.com or the client portal, why we collect it, and who else touches it. It is written to be read, not to be survived.
What we collect
When you request a free report. Your business name, city, the service you sell, and your email address. We use the email to send you the report and to follow up about the service. We do not sell it and we do not share it with advertisers.
When you become a client. Business information needed to do the work: business name and trade name, address or service area, phone number, website domain, Google Business Profile details, target keywords, and competitor domains you tell us about.
When you sign in. The portal uses an access code rather than a password. Signing in stores one cookie holding that code so you stay signed in. It is HTTP-only, meaning page scripts cannot read it.
When you connect an account. If you connect Google, WordPress, or another publishing platform, we store the access tokens or application credentials needed to read your data and publish on your behalf. Credentials are encrypted at rest (AES-256-GCM). We never ask for, and you should never send us, your main account password.
What we do not collect. We do not run advertising or analytics trackers on this site. There is no tracking pixel, no third-party analytics cookie, and no cross-site advertising profile. Card details are entered on Stripe’s own checkout page and never reach our servers.
Who else processes your data
Doing this work requires other services. Each one only receives what its job requires:
- Google — Business Profile, Analytics (GA4), Search, Places, and Geocoding. Used to read your rankings, reviews, and traffic, and (once you authorize it) to publish profile posts and review replies.
- DataForSEO — search-ranking and keyword data. Receives keywords and locations, not your customer data.
- Anthropic — the AI model that drafts report copy and content. Receives your business details and existing site content so drafts sound like you.
- Supabase — database hosting for your report data and settings.
- Vercel — application hosting.
- Stripe — payment processing, if you pay by card. Stripe holds your card data; we hold only a subscription status and the last-four style metadata Stripe returns.
- Pexels — stock photography for blog posts.
- Advice Local — business-directory listing distribution, when directory syncing is part of your plan. Receives your public business name, address, and phone so listings match.
- WordPress, Wix, Square, or your own site — wherever we publish on your behalf, at your direction.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
How AI is used
AI drafts. It does not decide. Reports, FAQs, service-page copy, blog posts, review replies, and profile posts are generated by an AI model using your real data and your existing writing. Every draft is reviewable, and anything published on your behalf can be pulled back from the portal in one tap. We do not present AI-generated estimates as measured results — if a number in your report is not from a real data source, the report says so.
Cookies
One cookie, named rt, holds your portal access code so you stay signed in for up to 180 days. Clearing it, or using the Sign out link, signs you out. We use no other cookies.
How long we keep things
Client business data and reports are kept for as long as you are a client and for a reasonable period afterward so you can request historical reports. Free-report submissions are kept so we do not regenerate the same report twice and so we can follow up. You can ask us to delete any of it.
Your choices
Email privacy@rankandkeep.com to see what we hold about you, correct it, delete it, or disconnect a connected account. Disconnecting a Google or publishing connection revokes our access going forward; you can also revoke it directly from that platform’s own security settings. Depending on where you live, you may have additional statutory rights — tell us what you want and we will honor it rather than make you cite a statute.
Security
Credentials are encrypted at rest. Report data is protected at the database layer, not only by the user interface. No system is perfectly secure, and we do not claim otherwise.
Children
This is a business service. It is not directed to anyone under 18, and we do not knowingly collect their information.
Changes
If this policy changes materially, we will update the effective date above and, for active clients, say so directly rather than quietly revising the page.
Contact
Rank & Keep — privacy@rankandkeep.com