Privacy Policy
Effective: October 7, 2026
Operator. Rankium is a visibility intelligence product operated by RepairFlow Inc. ("RepairFlow", "we", "us", or "our"). This policy covers Rankium's website, application, APIs, plugins, MCP connections, and related services.
1. Information we collect
- Account data: email address, display name, authentication identifiers, organization or company name, and preferences.
- Project and business data: website URLs, business names, project names, keywords, competitors, directories, categories, and other information you submit for analysis.
- Connected-provider data: information you authorize Rankium to read from services such as Google Search Console, Google Analytics 4, Bing Webmaster Tools, and optional visibility or SEO providers. This can include queries, clicks, impressions, positions, sessions, pages, backlinks, referring domains, crawl information, and related reporting data.
- Integration credentials: OAuth tokens and API credentials, including supported bring-your-own-key credentials, that you choose to connect. They are used to operate the requested integration and are not intended to be returned in normal application responses.
- Rankium-generated data: visibility scores, provider snapshots, metric observations, reports, roadmaps, action queues, directory coverage, audits, and other analyses.
- Billing data: plan, subscription status, invoices, transaction references, and related metadata. Payment-card details are handled by our payment processor rather than stored directly by Rankium.
- Support data: information you provide to support, sales, or partnerships.
- Technical and security data: IP address, browser or device information, timestamps, request metadata, error logs, security events, and usage events reasonably needed to operate and protect the service.
- Plugin and agent requests: when you use Rankium through ChatGPT, Lovable, another AI client, or an MCP-compatible agent, Rankium receives the specific authenticated tool request and parameters the client sends. Rankium does not require or request your full chat history.
2. How we use information
We use information to provide and authenticate Rankium; connect authorized data sources; calculate visibility metrics and reports; answer plugin and API requests; maintain projects and settings; process subscriptions; provide support; prevent abuse and fraud; troubleshoot reliability; improve product functionality; comply with law; and enforce our terms.
3. Connected services
Rankium accesses third-party services only through permissions, credentials, or API keys that you or your organization provide. Read-only Google and Microsoft integrations retrieve reporting data needed for requested Rankium features. You can disconnect supported integrations or remove provider credentials.
4. How we share information
We do not sell personal information. We may disclose information as reasonably necessary to: cloud hosting, database, authentication, monitoring, communications, and security providers; payment processors; third-party data providers and APIs you choose to connect; AI clients you intentionally use with Rankium to return requested tool results; professional advisers or successor entities in a legitimate corporate transaction; and authorities or other parties when required by law or necessary to protect rights, users, or the service.
5. Retention
- Account, project, and connected-source data: generally while the account or project is active and up to 30 days after a verified deletion request, except where longer retention is needed for legal, security, fraud-prevention, backup, or dispute purposes.
- OAuth tokens and user-provided provider credentials: while the related integration is connected, then removed or disabled after disconnection or account deletion, subject to short-lived backups and legal requirements.
- Operational and security logs: normally up to 90 days, with longer retention where needed for security incidents, fraud, or legal obligations.
- Billing and transaction records: up to seven years where needed for accounting, tax, fraud-prevention, or legal compliance.
- Aggregated or de-identified information: may be retained longer when it no longer reasonably identifies an individual.
6. Security
We use authenticated service boundaries, access controls, row-level data protections, credential-handling controls, and other technical and organizational safeguards designed to protect Rankium data. No system can guarantee absolute security.
7. Your controls
Depending on your account and applicable law, you may request access, correction, export, or deletion; disconnect integrations; remove supported provider keys; manage billing; and opt out of non-essential marketing. Contact privacy@rankium.io for privacy requests.
8. Children
Rankium is not intended for children under 18, and we do not knowingly collect personal information from children under 18.
9. International processing
Rankium and its providers may process information in the United States and other countries where they operate. Where required, we use appropriate mechanisms for cross-border processing.
10. Changes
We may update this policy as Rankium changes. We will post the revised version here and update the effective date.
11. Contact
Privacy: privacy@rankium.io
Support: https://rankium.io/support.html