Legal

Privacy Policy

Last updated: 2026-05-25

Template notice.This document is a template covering Google's Business Profile API review requirements. It is not legal advice. Have a lawyer in your jurisdiction review and customize it before publishing.

1. Who we are

Ranksphere("we", "us") operates the Ranksphere platform — a local SEO operating system. You can reach us at hello@ranksphere.com. For operating address and entity details, see the About page.

2. What data we collect

We collect data in three categories:

2.1 Account & workspace data you give us

Name, email, optional profile photo (via Google sign-in or email magic link).
Workspace name, logo, plan, billing information, team member email addresses.
Location details you add manually.

2.2 Data we fetch from Google on your behalf

With your explicit consent (a separate OAuth grant from sign-in), we use the Google Business Profile API and the Google Places API to retrieve:

Business profile fields (name, address, categories, hours, attributes, photos).
Customer reviews and ratings.
Google Posts you have authored.
GBP insights and engagement metrics (when available via the API).
Public Google Places data (place ID, formatted address, types, rating, review count).

We do not request scopes beyond what is required to deliver the features you have asked for. We do not access Gmail, Drive, Calendar, or any unrelated Google services.

2.3 Data we generate

Local-pack scan results for your locations and selected keywords.
AI-generated Smart Tasks, insights, and suggested actions.
Aggregated competitor data derived from your scans.
Usage analytics necessary to operate and improve the service.

3. How we use your data

To deliver the Ranksphere features you signed up for.
To generate AI explanations and recommended actions for your locations.
To send you transactional notifications (alerts, reports, billing).
To improve the service in aggregate, in a way that cannot identify individuals.

We do not sell your data. We do not use your GBP data to train AI models and we do not share it with third parties except as listed in section 5.

4. Google API Services User Data Policy compliance

Ranksphere's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Who we share data with

We share data only with the sub-processors required to operate the service:

Hosting & database: our cloud infrastructure provider (e.g. Vercel, Neon, AWS — list updated as we add providers).
AI explanations: OpenAI, for generating Smart Task explanations and insight summaries. We do not include personally identifiable information in these prompts beyond the business name necessary to ground the output.
Scan providers: DataForSEO or SerpAPI, for fetching public local pack rankings.
Email delivery: Resend, for magic-link sign-in and transactional email.
Billing: our payment processor (e.g. Stripe) for paid plans.

6. Data retention

We retain your account and workspace data for as long as your workspace is active. You can delete your workspace at any time, which removes all associated locations, scans, tasks, insights, and stored OAuth tokens within 30 days. Aggregated, de-identified data may be retained for service improvement.

7. Revoking access

You can revoke Ranksphere's access to your Google Business Profile at any time in two ways:

Inside Ranksphere: open the relevant Location → Settings → Disconnect Google Business Profile.
At Google: visit https://myaccount.google.com/permissions and remove Ranksphere.

Revoking access stops Ranksphere from fetching new data. Existing data already in your workspace remains until you delete the location or the workspace.

8. Security

Data is encrypted in transit (TLS) and at rest. OAuth refresh tokens are stored encrypted in our database. Access to production systems is limited and audited. Report security issues to hello@ranksphere.com.

9. Your rights

Depending on your jurisdiction (GDPR, CCPA, PIPEDA, etc.) you may have rights to access, correct, port, or delete your data. Email hello@ranksphere.com and we will respond within 30 days.

10. Changes to this policy

We will email all workspace owners and update the "Last updated" date at the top of this page when this policy changes materially.

11. Contact

For privacy-related questions or to exercise any of the rights above, email hello@ranksphere.com.