Privacy Policy

Rankary is a web tool that turns a Google Business Profile into a multi-page website. To do that we collect the data below, store it on our infrastructure, and use it only to generate, host, and improve the websites we build for you. We do not sell personal data. We do not use customer data to train large language models. You can export everything you give us at any time.

Account data

When you sign up for Rankary we store your email address and your Supabase-managed authentication record. Sign-in uses magic links, so we do not store passwords. We log your most recent sign-in time for security review.

Generation inputs

When you generate a site we pull data from public sources: the Google Business Profile URL you submit, the reviews and photos returned by the Google Places API, additional review depth from our licensed third-party data provider (DataForSEO), and color and social-link data scraped from your existing business website if one is provided.

Generated content

We store the generated site content (text, layout choices, image URLs) so we can render your site and let you edit it. The content is associated with your Rankary tenant and is exportable as JSON at any time.

Lead-form submissions

If your generated site includes a lead form, the submissions are routed through Rankary’s servers and stored against your tenant. We email you each submission and surface them in your dashboard. You can export all lead data as CSV.

Analytics

We use Vercel Analytics and (optionally, when configured) Google Analytics 4 to understand which pages people read, which buttons they click, and what referrer brought them here. Both anonymize IP addresses. We do not track across other sites.

Billing data

Paid subscriptions are processed by Stripe. Stripe handles your card information directly. Rankary stores the Stripe customer reference, the active plan, and the subscription status. We never see your full card number.

We use third-party services to operate Rankary. The list:

• Supabase— database, file storage, and authentication.
• Vercel— hosting and analytics.
• Anthropic— AI model that generates your site content. Anthropic is contractually bound not to train on data submitted via API.
• Google— Places API for business data, photos, and reviews. Google Search Console for the Pro-tier sitemap submission.
• DataForSEO— expanded review data set used to inform the writer model. We do not share customer-specific account information; we send a business name and city.
• Stripe— payment processing.
• Resend— transactional email (sign-in links, lead-form notifications).

We do not sell or rent personal data to anyone, ever.

Active accounts and active generated sites are kept for as long as the account is active. If you cancel a subscription, the data retention timeline is documented in our Cancellation Policy.

Lead-form submissions are kept indefinitely while your account is active so you can search them. You can delete individual submissions or export them as CSV at any time from your dashboard.

Sign-in logs are kept for 90 days for security review, then aggregated into anonymized statistics.

You can, at any time:

• Export all of your generated content (JSON) and lead submissions (CSV) from your dashboard.
• Request deletion of your account and all associated data by emailing matt.b.edward@gmail.com from the email address on file. We honor verified requests within 30 days.
• Request a copy of all data we hold about you (the same as the export, but covering edge cases not in the dashboard) by emailing the address above.
• Correct inaccurate personal data we hold about you.

When we surface customer reviews on a generated site we attribute them as First L., City— for example, “Mark E., Calgary.” We do not display full reviewer names, profile photos, or links to the reviewer’s Google profile.

If you are a reviewer who would like a quote removed from a Rankary-generated site, email matt.b.edward@gmail.com with the URL of the page and the text of the quote. We will remove the quote within 7 days of verification.

Photos surfaced on generated sites come from the Google Places API, which licenses them for display in applications like Rankary. We download and rehost them on our CDN with attribution preserved per the Google Places API terms. We do not modify the underlying photographs aside from resizing and format conversion for performance.

We use a small number of strictly necessary cookies for sign-in sessions and CSRF protection. We use Vercel Analytics, which is cookieless on the visitor side. When Google Analytics 4 is enabled (configurable per-tenant), it sets analytics cookies that anonymize the IP and respect Do Not Track signals.

We do not use third-party advertising cookies.

Rankary is a B2B service for business owners. The service is not directed at children under 13 (or 16 in jurisdictions where that is the threshold). We do not knowingly collect data from children. If you believe a child has signed up, email matt.b.edward@gmail.com and we will remove the account.

Rankary is operated from Calgary, Alberta, Canada by Matt Edward as a sole proprietorship. Data may be processed in any region our service providers operate in (primarily Canada and the United States). For European visitors, we operate as a data controller for account information and as a data processor for the content you generate. EU and UK GDPR rights apply.

If we materially change this policy we will email every active account and update the “Last updated” date at the top of this page. Smaller corrections are updated in place.

Privacy questions go to matt.b.edward@gmail.com. We typically respond within one business day.