Privacy policy

RankBeat ("we", "us") is a content engine for search, AI answer engines, and app stores, with human approval built into every step. It is operated from India. For anything in this policy, contact rkb639@gmail.com.

We collect only what the product needs to work:

• Account data — your email address and, if you sign in with Google, the name and email Google shares. We never see your Google password.
• Workspace content — the business profiles, monitoring sources, keywords, ideas, briefs, drafts, and published articles your workspace creates in the product.
• Integration credentials — tokens for services you connect (for example a publishing webhook). These are encrypted at rest in a token vault and are never written to logs.
• Google Analytics and Search Console data — if you connect Google, we read performance figures for the pages your workspace publishes: impressions, clicks, average position, the search queries that led to them, sessions, and conversions. We request read-only access and cannot change anything in your Google account.
• Usage records — credit metering, approval audit trails (who approved what, when), and standard server logs.

• We do not sell your data or share it with advertisers.
• We never train AI models on your content ourselves, and we send providers only the minimum a generation needs, under their commercial API terms.
• We do not use third-party analytics trackers or advertising cookies.

To draft content, we send the relevant workspace context (your business profile, the approved brief, monitoring findings) to our AI model providers through their commercial APIs — currently DeepSeek for text and ByteDance Seedream (via fal.ai) for images, with Anthropic as the text provider we scale onto. We share only what a given generation needs, and nothing is published anywhere until a member of your workspace approves it.

If you connect Google, RankBeat requests two read-only permissions: Google Analytics (analytics.readonly) and Search Console (webmasters.readonly). We ask for them so the product can report how the articles it helped you publish actually performed, and so poor or improving pages can suggest what to write next. We request no permission that can change or delete anything in your Google account, and you can disconnect at any time in the app, which deletes the stored grant and revokes it with Google.

What we do with it: we store per-page, per-day figures (impressions, clicks, average position, sessions, conversions) and show them to members of your workspace. Those figures are analysed by deterministic rules we wrote — no AI model sees them. Search Console queries are the one exception worth naming plainly: a query you already rank for can be proposed as an article idea, and if you approve that idea, its title is included in the prompt sent to our AI provider under their commercial API terms, exactly as any other idea title would be.

RankBeat's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we use this data only to provide and improve the user-facing features described above; we do not transfer it to others except as needed to provide those features, for security, or to comply with law; we do not use it for advertising; we do not sell it; and we do not use it to develop, improve, or train generalized AI or machine-learning models. Humans do not read it, except with your explicit permission, for security purposes, or where the law requires it.

Your data is processed by the infrastructure we run on:

• Supabase — database, authentication, and file storage (Mumbai region)
• Vercel — application hosting
• Inngest — background job orchestration
• DeepSeek — AI text generation (current provider)
• Anthropic — AI text generation (as we scale)
• fal.ai (ByteDance Seedream) — AI image generation (current provider)
• Google — sign-in (OAuth); Analytics and Search Console performance data when you connect it; image generation fallback

We set only the cookies the product needs to function: your sign-in session and your active-workspace choice. No tracking cookies, no third-party cookies.

Workspace content is kept while your workspace is active. To delete your account or workspace and its content, email rkb639@gmail.com — we will complete deletion within 30 days, except records we must keep for legal or billing reasons.

Data is encrypted in transit and at rest. Integration credentials are additionally encrypted application-side (AES-256-GCM). Access within a workspace is scoped by role, and every approval is recorded with identity and timestamp.

You can request a copy of your data, correction, or deletion at any time by emailing rkb639@gmail.com. If you are in a jurisdiction with specific data-protection rights (such as the GDPR or India's DPDP Act), we honor those rights.

RankBeat is a business tool and is not directed at anyone under 16.

If this policy changes materially, we will notify workspace owners by email before the change takes effect. The effective date above always reflects the current version.