Privacy Policy

This policy explains what personal data Rankshoot collects, why, where it is kept and what you can ask us to do with it. It covers this website (rankshoot.com), the Rankshoot app and admin, and the Rankshoot WordPress plugin.

Who we are

Rankshoot is operated by Ahmed Fayed (sole proprietor), 6th of October City, Giza, Egypt ("Rankshoot", "we"). For anything about your data, write to fayed5311@gmail.com.

What we collect

When you contact us or request a free preview on this website: your name, email address, phone number, your website address, the reason you chose and your message. We use this only to reply and to discuss the service with you. If you ask for a free preview, we also read the public pages of the site you send us, the same way a search engine does.

When you use Rankshoot (customers):

• Account and billing: names and email addresses of account owners, members and site reviewers; billing name, country, currency, invoices and payment references. Card details are handled by our payment provider; we never see or store them.
• Your sites: the site address, and — through the plugin you install — your posts and pages (their text, titles, links, status and the SEO title, description and indexing settings of Yoast or Rank Math, read only).
• Your business profile: what you sell, to whom, how customers contact you, and the notes and corrections you give us.
• The work: research for each piece (search results and the public pages we read), drafts, versions, your review decisions, change requests and approvals, what was published or handed over, and a change log.
• Operations and security: sign-in events, an audit log of administrative actions, error logs, and the cost of each automated step.
• If you connect Google Search Console: the search performance data of your site that Search Console provides. We only read it, and only for your site.

Previews: when we prepare a free preview for a prospect, we read up to 30 public pages of their website. Previews are deleted after 90 days unless the prospect becomes a customer.

We do not collect sensitive personal data on purpose, and we ask you not to put any into briefs, notes or messages.

How we use it and on what basis

• To provide the service you signed up for (contract): research, writing, review, publishing, handoffs, progress reports and support.
• To bill you and keep records the law requires (contract and legal obligation).
• To keep the service secure and working (legitimate interest): logs, alerts, backups, abuse prevention.
• To answer enquiries (your request, and our legitimate interest in replying).

We do not sell personal data. We do not use your content to advertise to others, and we do not show it to other customers.

Artificial intelligence

Rankshoot uses AI language models to analyse research and to draft and revise content. For each task we send the model provider only what the task needs — the brief, the research excerpts, your business profile and, for revisions, the current draft. Nothing is published to your site until a person on your side approves it.

Who processes data for us

• Supabase — database and sign-in. European Union (Frankfurt).
• Contabo — hosting of this website, the Rankshoot app and our background worker server. European Union (Germany).
• Hostinger — our email, including sign-in and service emails, and our test WordPress site.
• OpenRouter and the model providers it routes to, and OpenAI — AI analysis and drafting. United States and other regions.
• Serper (or DataForSEO) — search results for your topics. United States / European Union.
• Fawaterak — card and wallet payments. Egypt.
• Google — keyword search volumes from Google Ads Keyword Planner, and Search Console data if you connect it (see “Google data” below).

Each provider receives only what its task needs. Our internal alert channel receives operational messages (for example, "a job failed"), not your content or contact details.

International transfers

Your data is stored in the European Union and some providers process it in other countries, including the United States. Where the law of your country (for example, the Saudi Personal Data Protection Law or Egypt's Personal Data Protection Law) requires a basis or safeguards for such transfers, we rely on the safeguards those laws accept, such as contractual clauses with the provider.

How long we keep it

• Enquiries from this website: 24 months after our last exchange, unless you become a customer.
• Previews: 90 days, unless the prospect becomes a customer.
• Customer data: while your subscription is active. After it ends, the app stays readable for 30 days so you can copy your content; we then delete your site data within 90 days, except invoices and payment records, which we keep for as long as tax and accounting law requires.

Your rights

You can ask to see the personal data we hold about you, to correct it, to delete it, to receive a copy in a common format, or to object to or restrict a use of it. Write to fayed5311@gmail.com. We answer within 30 days. If you are not satisfied, you can complain to the data protection authority of your country.

Google data

This section explains how the Rankshoot app accesses, uses, shares, protects, keeps and deletes data it receives from Google APIs. Rankshoot never asks you to sign in with Google and never reads your Google account, Gmail, contacts, calendar or files.

What we access.

• Google Ads API (Keyword Planner). Rankshoot connects to its own Google Ads account, authorised by Rankshoot alone (scope: Google Ads). It sends Google the keywords being researched, with a language and a country, and receives average monthly search volumes and competition levels for those keywords. No personal data of yours is sent to Google for this, and no personal data is received.
• Google Search Console API (optional, read only). Only if you choose to connect it: you add Rankshoot's service account as a restricted user of your own Search Console property. Rankshoot then reads that property's search performance data — queries, pages, clicks, impressions, click-through rate and average position — with the read-only scope webmasters.readonly. It cannot change anything in your Search Console.

How we use it. Only to provide features you see in your Rankshoot account: researching topics for your site, planning and prioritising content, and measuring how your pages perform. We do not use Google data for advertising, to build profiles of people, to decide creditworthiness or lending, or for any purpose unrelated to these features.

Who we share it with. No one, except the service providers that store and process it for us to run these features (our database host, Supabase, in Frankfurt, European Union). We do not sell Google data or transfer it to advertising platforms, data brokers or information resellers. We do not use Google data, and do not let others use it, to develop, improve or train generalised or non-personalised AI or machine-learning models. People at Rankshoot read it only with your permission, to help you with support, for security, or when the law requires it.

How we protect it. Data is encrypted in transit (HTTPS) and at rest in our database. Each account can read only its own sites' data, enforced in the database itself. Google credentials are kept in an encrypted vault and are never shown in the app. Access by staff is limited and logged.

How long we keep it and how to delete it. Search Console figures and keyword volumes are kept with your site's data while your subscription is active. You can stop Search Console access at any time by removing Rankshoot's service account from your property; Rankshoot then stops reading at once. You can ask us to delete the Google data we hold for your site at any time by writing to fayed5311@gmail.com — we delete it within 30 days. When your subscription ends, it is deleted together with your site data within 90 days.

Limited Use. Rankshoot's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies

This website uses no advertising or analytics cookies. The Rankshoot app uses the cookies it needs to keep you signed in and to remember your language.

The WordPress plugin

The plugin connects your site to Rankshoot. It sends data only to Rankshoot, only after you activate it with a site key, and every request is signed. It reads your posts and pages so we can plan and link content, and it creates new posts — or, if you allow it, updates existing posts — only from versions you approved. To make an update reversible it keeps the post's previous content on your own site. It adds nothing to your public pages. Deleting the plugin removes everything it stored, including its secrets and those previous versions.

Security

Data is encrypted in transit and at rest by our database provider; access to customer data is limited to what each role needs, and administrative actions are logged. No system is perfectly secure; if a breach affects your personal data, we will tell you and the authorities as the law requires.

Changes

We will post any change here with a new date, and tell customers by email before a material change takes effect.