Ranktron · Last updated 2026-10-10

Privacy Policy

Ranktron is operated by APG Media, Lithuania (“we”). This policy explains what personal data we process when you use https://ranktron.ai, why, and what rights you have under the GDPR. Questions and requests: hello@ranktron.ai.

What we collect

Account data — email address, a password hash (never the password), organisation name, plan and billing status, team invitations.
Content you give us — topics, titles, keywords, notes, brand documents and product feeds you upload, articles the service generates for you, and tracker prompts.
Usage data — which features you use and when, the number of articles and checks generated (this is how plans are metered), request logs with IP address and browser type kept for security and debugging.
Payment data — handled entirely by Stripe. We store the Stripe customer and subscription identifiers, never card numbers.

Why we process it

To provide the service you signed up for (contract, Art. 6(1)(b) GDPR): generating and scoring content, running visibility trackers, publishing to your CMS when you connect one.
To bill you and prevent abuse (contract and legitimate interest, Art. 6(1)(b) and (f)).
To keep the service secure and fix defects (legitimate interest, Art. 6(1)(f)).
To send you service emails — trial and quota notices, invitations, password resets. We do not send marketing email without separate consent.

Where your data goes (subprocessors)

Generating an article means sending your topic, notes and brand context to third-party providers. Each is bound by a data-processing agreement:

Supabase — database and authentication (EU region).
Render and Netlify — application hosting.
Anthropic and OpenAI — language models that draft and refine content. Inputs are not used to train their models under our API terms.
Google (Gemini) — a language model that drafts and refines content, and generates article images.
OpenRouter — when you choose which model drafts an article (one, or several side by side), sends the brief and the research it rests on to each model you chose, through that model’s own provider.
DeepL — translates an article when you ask for a translation.
Perplexity, SerpApi, DataForSEO, Moz — search and citation data. They receive the topic being researched, not your account details.
Stripe — payments. Resend — transactional email. Sentry — error reports, with secrets and email addresses masked before sending.

Some providers process data in the United States under the EU-US Data Privacy Framework or Standard Contractual Clauses.

How long we keep it

While your account is active, for as long as you keep it.
After your subscription ends, your content is kept for 360 days so you can come back to it. You receive a deletion notice 50 days, 10 days and 1 day before it is erased.
You can export everything at any time from the dashboard (Settings → Export my data) and request erasure at any time by email; erasure is completed within 30 days. Metering records (counts of runs, not their content) are kept for accounting for the legally required period.

Improving the product

We analyse generated content and scores in aggregate to calibrate the scoring rubric and the writer — this is what makes the product better for every customer (legitimate interest, Art. 6(1)(f)). Your content is never shown to another customer. We never use it to train third-party models. Whether a provider may use it to train its own models is set by that provider’s terms: Anthropic and OpenAI do not, under our API terms. You may object at any time by emailing us; we will exclude your organisation’s content from that analysis.

Your rights

You have the right to access, correct, export and erase your personal data, to restrict or object to processing, and to lodge a complaint with a supervisory authority — in Lithuania, the State Data Protection Inspectorate (VDAI). Write to hello@ranktron.ai; we answer within 30 days.

Cookies and local storage

The dashboard stores your session token and interface preferences (theme, dismissed notices) in your browser’s local storage. We do not use advertising or cross-site tracking cookies. The public website uses no analytics that identify you.

Changes

We will announce material changes to this policy by email and update the date above.