Privacy Policy

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, participate in activities on the Services, or otherwise contact us.

Personal Information Provided by You

The personal information we collect depends on the context of your interactions and the features you use. It may include:

• names, job titles
• phone numbers, email addresses, mailing addresses
• usernames, passwords, contact preferences
• contact or authentication data
• billing addresses, debit/credit card numbers (tokenized via our processor)

Sensitive Information: We do not process sensitive information.

Payment Data: We may collect data necessary to process your payment if you make purchases (e.g., payment instrument number and security code). All payment data is handled and stored by Stripe. See https://stripe.com/privacy.

Social Media Login Data: You may be able to register using social accounts (e.g., Facebook, X). If you choose to do so, we will collect certain profile information as described in Section 7.

Application Data: If you use our application(s), we may collect:

• Geolocation Information. With your permission, we may collect location data to provide certain features.
• Mobile Device Access. With your permission, we may access Bluetooth, calendar, camera, microphone, etc.
• Mobile Device Data. We automatically collect device information, OS, identifiers, IP, ISP/carrier, and app interaction data.
• Push Notifications. With permission, we may send push notifications. You can disable these in your device settings.

All personal information you provide must be true, complete, and accurate, and you must notify us of any changes.

Information automatically collected

In Short: Some information — such as IP address and/or device characteristics — is collected automatically when you visit our Services.

We automatically collect device and usage information (e.g., IP address, browser, device/OS, language preferences, referring URLs, pages viewed, actions taken, error reports). We also collect information via cookies and similar technologies (see Section 5).

Google API: Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Information collected when you use our Facebook application(s): By default, we may access your basic Facebook account information and other permissions you grant. See the Facebook Permissions Reference for more.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer the Services; communicate with you; for security/fraud prevention; and to comply with law. We may also process your information with your consent.

We process personal information to:

• Create and authenticate accounts; manage user profiles
• Deliver Services (e.g., SEO dashboards, analytics, reporting)
• Respond to inquiries and provide support
• Send administrative information (e.g., product updates, policy changes)
• Fulfill and manage orders, payments, returns, and exchanges
• Request feedback and contact you about your use of the Services
• Send marketing and promotional communications (consistent with your preferences)
• Deliver tailored content/advertising
• Protect the Services (e.g., security, fraud monitoring, abuse prevention)
• Identify usage trends and improve our Services
• Determine the effectiveness of marketing campaigns
• Save or protect an individual's vital interest

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

In Short: We process your information when we have a valid legal basis under applicable law (e.g., consent, contract, legitimate interests, legal obligations, vital interests).

EU/UK GDPR legal bases may include: consent, performance of a contract, legitimate interests, legal obligations, and vital interests.

Canada: we rely on express or implied consent, and in limited cases, other grounds permitted by law.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We share information in specific situations and with specific categories of third parties.

Vendors/Service Providers (under contract and subject to confidentiality):

• Ad Networks, Data Analytics Services
• Finance & Accounting Tools, Payment Processors
• Sales & Marketing Tools, User Authentication Services
• Performance Monitoring Tools, AI Platforms

Business Transfers: In connection with a merger, sale, financing, or acquisition.

Google Maps Platform APIs: We may use certain Google Maps Platform APIs. We may cache location data on your device for up to six (6) months. You may revoke consent by contacting us (see Section 16).

Business Partners: To offer products, services, or promotions.

Offer Wall: If displayed, it may show third-party offers; when you click, you leave our app. A unique identifier may be shared to credit rewards.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and similar technologies for functionality, analytics, and advertising.

We and certain third parties use cookies/pixels to maintain security, save preferences, analyze usage, and personalize ads (see also Section 13 for US state law choices). See our Cookie Notice for details and controls.

Google Analytics: You can opt out via https://tools.google.com/dlpage/gaoptout or industry tools (e.g., http://optout.networkadvertising.org/). See Google's Privacy & Terms for more.

6. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?

In Short: Yes. We offer AI-powered features/tools ("AI Products").

AI Service Providers may include OpenAI, Anthropic, and Google Cloud AI. Your inputs/outputs may be processed by these providers to enable AI features, consistent with this Notice and applicable laws. Do not use AI Products in ways that violate provider terms.

Use Cases may include content suggestions, keyword clustering, anomaly detection, and SEO insights.

7. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

If you register or log in using social accounts, we receive certain profile data from the provider. We use such data only for purposes described in this Notice or disclosed to you at collection. Review the social provider's privacy notice for their practices.

8. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We retain personal information as long as necessary to fulfill the purposes in this Notice unless a longer period is required/permitted by law. When no ongoing legitimate business need exists, we delete or anonymize; if not possible (e.g., backups), we securely store and isolate until deletion is feasible.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

We implement appropriate technical and organizational measures to protect personal information. However, no method is 100% secure; transmission is at your own risk. Access the Services within a secure environment.

10. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect or market to children under 18 (or the equivalent age in your jurisdiction), nor knowingly sell such data. If we learn that data from under-18 users has been collected, we will deactivate the account and delete such data. Contact [email protected] if you believe we collected such data.

11. WHAT ARE YOUR PRIVACY RIGHTS?

Depending on your location, you may have rights to access, rectify, erase, restrict processing, data portability, object, and to not be subject to automated decisions with legal or similarly significant effects. If a decision is made solely by automated means, we will inform you and offer a way to request human review.

Marketing Communications: You can unsubscribe via links in our emails or by contacting us. We may still send service/transaction messages.

Account Information:

• Update your profile in account settings; or
• Contact us using the information below.

Upon account termination, we delete or anonymize personal data subject to legal holds and our legitimate interests (e.g., fraud prevention).

If you have questions about your rights, email [email protected].

12. CONTROLS FOR DO-NOT-TRACK FEATURES

Browsers/apps may offer DNT settings. No standard currently exists; we do not respond to DNT signals. If a standard is adopted, we will update this Notice.

13. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Some US states grant residents specific rights (e.g., access, correction, deletion, portability, opt-out of targeted ads/sale/sharing, limit use of sensitive data).

Categories Collected (past 12 months): A–K as defined below; L (Sensitive): NO.
We may disclose personal information to service providers for business purposes (see Section 4). We have not sold or shared personal information for monetary consideration in the past twelve (12) months.

Collected Categories:
A (Identifiers), B (Customer Records), C (Protected characteristics), D (Commercial), E (Biometric), F (Internet activity), G (Geolocation), H (Audio/Visual), I (Professional), J (Education), K (Inferences).
Retention: As long as the user has an account, unless otherwise required by law.

Your Rights & How to Exercise:
Submit requests via [email protected] or our DSAR portal (if available). We honor Global Privacy Control (GPC) signals where required. You may designate an authorized agent (we will verify identity/authority). Appeals: Email [email protected] if we decline your request.

California "Shine the Light." California residents may request details once per year about categories of personal information disclosed for direct marketing (see Section 16).

14. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?

Australia/New Zealand: We comply with the Privacy Act 1988 (AU) and Privacy Act 2020 (NZ). You may request access/correction; complaints may be filed with OAIC (AU) or NZ Privacy Commissioner.

Republic of South Africa: You may request access/correction. Complaints may be submitted to the Information Regulator ([email protected]; [email protected]; [email protected]).

EEA/UK/Switzerland: You may lodge complaints with your local Data Protection Authority.

15. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes. We may update this Notice periodically. The updated version will be indicated by a revised date. Material changes may be notified via prominent notice or direct communication.

16. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments, email [email protected] or contact us by post at:

For privacy-specific inquiries: [email protected]
For data protection officer: [email protected]

17. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Depending on your jurisdiction, you may request access to personal information we collect from you, details of processing, corrections, deletion, or withdrawal of consent. To submit a request, contact [email protected] or [email protected].

18. SMS AND TEXT MESSAGING

In Short: When you provide your phone number and consent, we may send you text messages. Consent is optional, you can opt out anytime, and we never sell or share your mobile number.

When you provide your phone number and consent on our website (including through our text-updates sign-up at https://www.rankgale.ai/sms), you agree that RankGale (Optiminds, Inc.) may contact you by SMS/text message, including through automated technology. Message frequency varies. Message and data rates may apply.

You can reply STOP to any text message to opt out at any time, or reply HELP for assistance. Consent to receive text messages is not a condition of any purchase or service.

We do not sell or share your mobile number or your SMS opt-in consent with third parties or affiliates for their own marketing purposes. Mobile carriers are not liable for delayed or undelivered messages.