Privacy policy

Last updated: October 12, 2026

This document is a template and should be reviewed by a legal advisor before publishing.

1. Who we are

Rankora ("we") provides a review-monitoring service for local businesses. Contact: hello@rankora.app.

2. Data we process

Account data: name, email address, password hash, language and billing details (processed by Stripe; we never store card numbers).

Business data: the businesses and competitors you track, settings and reply drafts.

Public review data: reviews published on Google, including the public display name of their authors.

Google Business Profile data, only if you connect it: your locations and reviews, accessed through Google's official API with the permissions you grant. Access tokens are stored encrypted.

Usage data: technical logs (IP address, browser) needed for security and to operate the service. For the free audit we store the IP address to prevent abuse.

3. Why we process it

To provide the service you signed up for (performance of a contract), to send transactional emails such as reports and alerts, to prevent fraud and abuse (legitimate interest) and to comply with legal obligations such as invoicing.

4. Processors

We rely on: our hosting provider, Stripe (payments), Brevo (email delivery), OpenRouter and the AI model providers it routes to (text analysis of reviews), Google (Places and Business Profile APIs) and third-party public-data providers for Google Maps reviews. We share only what each needs to perform its function.

5. Retention

Account data is kept while your account is active and deleted within 30 days of account deletion, except where the law requires us to keep invoices. Audit requests are kept for up to 12 months.

6. Your rights

You can access, rectify, export or delete your data, object to or restrict its processing, and withdraw consent at any time by writing to hello@rankora.app. You may also lodge a complaint with your data-protection authority.

7. Google API data

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke our access at any time from Settings or from your Google account.