Privacy Policy

RankPilotHQ (“we,” “our,” or “us”) operates the RankPilotHQ platform, accessible at app.rankpilothq.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using RankPilotHQ, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our service.

Account Information

When you create an account, we collect your name, email address, and business information you provide during onboarding (business name, website URL, description, and target audience).

Google Account Data

If you choose to connect your Google account, we request access to the following scopes with your explicit consent:

• Google Analytics (analytics.readonly): We read your Google Analytics 4 property data — including sessions, traffic sources, and page performance — solely to display this information within your RankPilotHQ dashboard. We do not modify, share, or use this data for any other purpose.
• Google Search Console (webmasters.readonly): We read your Search Console performance data — including search queries, impressions, clicks, and rankings — solely to display this information within your RankPilotHQ dashboard. We do not modify, share, or use this data for any other purpose.
• Basic Profile (openid, email, profile): We use your Google email and name to identify the connection and display it in your account settings.

Google user data obtained through these scopes is used only to provide the analytics features of the RankPilotHQ dashboard. We do not use this data to serve advertisements, build profiles for third parties, or train machine learning models.

Usage Data

We may collect information about how you interact with our service, including pages visited, features used, and actions taken within the dashboard.

Content Data

We store the AI-generated content articles, prompts, and settings you create or configure within the platform.

Managed Service Credentials (Growth program)

If you enroll in our managed Growth program, you may choose to provide access to third-party accounts your search presence depends on — such as your domain registrar, website hosting, Google Business Profile, business directories, review platforms, and social profiles — through the Accounts & Access screen. Wherever a platform supports it, we ask you to grant delegated or manager access instead of sharing a password. Where you do provide login credentials or two-factor authentication setup keys, they are encrypted before storage, are never displayed back through customer-facing screens, and are accessible only to authorized RankPilotHQ personnel for the sole purpose of performing the work you have engaged us to do.

Prospective Customer Information

If you request a free scan or a Growth scoping call, we collect the contact and business details you submit (such as your name, email, business name, website, and market) and use them to prepare your assessment and respond to your request.

We use the information we collect to:

• Provide, operate, and maintain the RankPilotHQ platform
• Generate and schedule AI-powered content for your business
• Display your Google Analytics and Search Console data within your dashboard
• Send weekly performance reports (if enabled)
• Set up, access, and manage third-party accounts on your behalf when you enroll in a managed program and authorize us to do so
• Respond to support requests and communications
• Improve our service and develop new features
• Comply with legal obligations

We do not sell your personal information or Google user data to third parties.

RankPilotHQ's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only use Google user data to provide or improve the features visible within the RankPilotHQ dashboard
• We do not transfer Google user data to third parties except as necessary to provide our service (e.g., our database provider Supabase), and only under confidentiality agreements
• We do not use Google user data for advertising purposes
• We do not allow humans to read your Google user data unless you have given explicit permission, it is necessary for security purposes, or we are required to do so by law

Your data, including Google OAuth tokens, is stored securely using Supabase (a SOC 2 compliant database provider). OAuth tokens are encrypted at rest and in transit.

Credentials you provide for a managed program are encrypted before storage and decrypted only when needed to perform work you have authorized. When your managed program ends, we delete stored credentials on request and in the ordinary course of offboarding; you can also rotate or revoke access on any platform at any time.

We retain your Google OAuth tokens only as long as your account is active or as needed to provide the service. You can revoke access at any time from your Google Account settings at myaccount.google.com/permissions, or by disconnecting Google from within RankPilotHQ settings.

While we implement commercially reasonable security measures, no method of transmission or storage is 100% secure.

We share your data only in the following limited circumstances:

• Service providers: We use Supabase (database), Vercel (hosting), Cloudflare (edge infrastructure), Anthropic (AI content generation), OpenAI, Google, and Perplexity (AI visibility checks), Stripe (payment processing), and Resend (email delivery). These providers process data only as necessary to provide their services to us and are bound by data processing agreements. Credentials you provide for a managed program are not shared with any of these providers beyond encrypted storage in our database.
• Legal requirements: We may disclose information if required by law or to protect our rights, property, or safety.
• Business transfers: In the event of a merger or acquisition, your data may be transferred as part of that transaction.

We do not sell, rent, or trade your personal information or Google user data.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Revoke Google OAuth access at any time
• Export your content data

To exercise any of these rights, contact us at cody@rankpilothq.com.

We use session cookies to maintain your authentication state. We do not use tracking cookies or third-party advertising cookies.

RankPilotHQ is not directed to children under 13. We do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice in the dashboard. Continued use of the service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, please contact us:

RankPilotHQ
Email: cody@rankpilothq.com
Website: app.rankpilothq.com