Privacy policy
Last updated 6 July 2026
This explains what we collect, why, and how to get rid of it. If anything here is unclear, email hello@rankloops.com and a person will answer.
Who we are
Rankloops writes and publishes blog content for small businesses. For UK GDPR, we are the data controller for your account details, and the data processor for content we generate on your behalf.
What we collect
- If you run the free AI check: the website address you enter. If you ask for the full report, your name and email too.
- If you sign up: your email, business name, website, and the answers you give during setup.
- While you use it: posts we generate for you, your settings, and basic usage counts so we can bill correctly.
- Automatically: standard server logs, and anonymous page-view counts on your blog.
We do not use third-party advertising trackers, and we do not sell your data to anyone.
Why we collect it
- To run the service — writing posts needs to know about your business.
- To take payment — handled by Stripe; we never see your card number.
- To reply to you — the contact form attaches your account so support can help without an email chain.
- To improve the product — in aggregate, never by reading one customer's content for our own use.
Who we share it with
Only the suppliers needed to run the service:
- Supabase — database and authentication
- Vercel — hosting
- Anthropic, OpenAI, Google — writing posts and generating images
- Stripe — payments
Your business details are sent to AI providers so they can write about your business. They are not used to train models on your data under the API terms we use.
How long we keep it
Account data for as long as you have an account, then 30 days after you delete it, so an accidental deletion can be undone. Free AI check records are kept for 12 months. Server logs, 30 days.
Your rights
Under UK GDPR you can ask us to:
- Show you everything we hold about you
- Correct anything that is wrong
- Delete your data
- Send you a copy in a portable format
- Stop processing it
Email hello@rankloops.com and we will action it within 30 days. You can also delete your account yourself from Settings, which removes your blog and posts. If you are unhappy with how we handle it, you can complain to the ICO.
Cookies
We use one essential cookie to keep you signed in. No advertising or tracking cookies, which is why you have not been asked to accept a banner.
Security
Data is encrypted in transit and at rest. Every account's data is isolated at the database level, so one customer can never read another's. Any API keys you give us are encrypted before storage.
Changes
If we change anything material we will email you before it takes effect, rather than quietly editing this page.