Privacy Policy

RankPilotHQ (“we,” “our,” or “us”) operates the RankPilotHQ platform, accessible at app.rankpilothq.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using RankPilotHQ, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our service.

Account Information

When you create an account, we collect your name, email address, and business information you provide during onboarding (business name, website URL, description, and target audience).

Google Account Data

If you choose to connect your Google account, we request access to the following scopes with your explicit consent:

• Google Analytics (analytics.readonly): We read your Google Analytics 4 property data — including sessions, traffic sources, and page performance — solely to display this information within your RankPilotHQ dashboard. We do not modify, share, or use this data for any other purpose.
• Google Search Console (webmasters.readonly): We read your Search Console performance data — including search queries, impressions, clicks, and rankings — solely to display this information within your RankPilotHQ dashboard. We do not modify, share, or use this data for any other purpose.
• Basic Profile (openid, email, profile): We use your Google email and name to identify the connection and display it in your account settings.

Google user data obtained through these scopes is used only to provide the analytics features of the RankPilotHQ dashboard. We do not use this data to serve advertisements, build profiles for third parties, or train machine learning models.

Usage Data

We may collect information about how you interact with our service, including pages visited, features used, and actions taken within the dashboard.

Content Data

We store the AI-generated content articles, prompts, and settings you create or configure within the platform.

We use the information we collect to:

• Provide, operate, and maintain the RankPilotHQ platform
• Generate and schedule AI-powered content for your business
• Display your Google Analytics and Search Console data within your dashboard
• Send weekly performance reports (if enabled)
• Respond to support requests and communications
• Improve our service and develop new features
• Comply with legal obligations

We do not sell your personal information or Google user data to third parties.

RankPilotHQ's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only use Google user data to provide or improve the features visible within the RankPilotHQ dashboard
• We do not transfer Google user data to third parties except as necessary to provide our service (e.g., our database provider Supabase), and only under confidentiality agreements
• We do not use Google user data for advertising purposes
• We do not allow humans to read your Google user data unless you have given explicit permission, it is necessary for security purposes, or we are required to do so by law

Your data, including Google OAuth tokens, is stored securely using Supabase (a SOC 2 compliant database provider). OAuth tokens are encrypted at rest and in transit.

We retain your Google OAuth tokens only as long as your account is active or as needed to provide the service. You can revoke access at any time from your Google Account settings at myaccount.google.com/permissions, or by disconnecting Google from within RankPilotHQ settings.

While we implement commercially reasonable security measures, no method of transmission or storage is 100% secure.

We share your data only in the following limited circumstances:

• Service providers: We use Supabase (database), Vercel (hosting), Anthropic (AI content generation), OpenAI (LLM checks), and Resend (email delivery). These providers process data only as necessary to provide their services to us and are bound by data processing agreements.
• Legal requirements: We may disclose information if required by law or to protect our rights, property, or safety.
• Business transfers: In the event of a merger or acquisition, your data may be transferred as part of that transaction.

We do not sell, rent, or trade your personal information or Google user data.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Revoke Google OAuth access at any time
• Export your content data

To exercise any of these rights, contact us at cody@rankpilothq.com.

We use session cookies to maintain your authentication state. We do not use tracking cookies or third-party advertising cookies.

RankPilotHQ is not directed to children under 13. We do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice in the dashboard. Continued use of the service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, please contact us:

RankPilotHQ
Email: cody@rankpilothq.com
Website: app.rankpilothq.com