Privacy policy

This policy explains what data RankFirst collects, why, and what you can do about it. The short version: it's your content and your data, we don't sell it, and you can export or delete it anytime.

What we collect

We collect only what we need to run the service:

• Account data: your name, work email, a hashed password, and the billing details needed to manage your subscription.
• Website and business inputs: the address and public content of the website you connect, plus the brand voice, keywords, and settings you provide so we can write in your voice.
• Content we generate: the articles, images, and metadata RankFirst produces and publishes for you, along with your edits and publishing history.
• Connected-service data: when you authorize a connection (for example, to read your search-performance data or to publish to your site), we access only the data that connection provides, and only to operate the service.
• Usage data: logins, dashboard activity, IP address, browser and device information, and error reports, used to keep the product secure and working.
• Support messages: anything you send us when you get in touch.

How we use it

We use your data to:

• Run the service: analyze your website, plan your calendar, and write, illustrate, and publish your articles.
• Operate your account: billing, support, account recovery, security monitoring, and abuse prevention.
• Improve the product and fix what's broken.
• Meet our legal obligations.

We do not sell your personal data, and we do not use your content for advertising.

AI and your content

To generate your articles and images, we send your inputs (such as your website content, brand voice, and keywords) to the third-party AI providers that power the service. They process this content solely to produce your output.

We do not use your content to train foundation models, and we work with AI providers on terms that prohibit them from using your content to train their models. Content is transmitted over encrypted connections.

How we share your data

We don't sell your data or share it for advertising. We share it only with the categories of service providers we rely on to operate RankFirst, each bound by a data-processing agreement and permitted to use it only on our instructions:

• Content-generation providers that produce your articles and images.
• Cloud hosting, storage, and content-delivery providers that run the service and serve your media.
• Payment providers that handle your subscription and billing.
• Analytics and error-monitoring providers that help us keep the product reliable.

We may also disclose data where required by a valid legal request, or as part of a merger or acquisition, in which case we'll notify you. We never provide more than is necessary.

Where data lives and how long we keep it

Your data is hosted with reputable cloud providers and encrypted in transit and at rest. We keep it only as long as we need it: your content and account data while your account is active, and after you close your account we delete or anonymize it, except records, such as billing and tax records, that we're legally required to keep for a limited period. Backups are encrypted and cycle out on a rolling schedule.

Your rights

You can ask us to view, correct, export, or delete your personal data at any time. Depending on where you live, including the EU, UK, and California, you may also have the right to restrict or object to certain processing, to withdraw consent, and to lodge a complaint with your data-protection authority.

To make a request, email contact@rankfirst.blog. We respond within 30 days and may need to verify your identity first.

Cookies

We use first-party cookies to keep you signed in, remember your preferences, and protect against cross-site request forgery. We also use a small set of cookies for product analytics and error monitoring. We don't use advertising cookies or cross-site trackers. You can clear or block cookies in your browser at any time.

Security

We protect your data with encryption in transit and at rest, access controls, and monitoring. No system is perfectly secure, but we work hard to keep yours safe, and we'll notify you and the relevant authorities if a breach ever affects your personal data as required by law.

Children

RankFirst is a business product and isn't directed at anyone under 16. We don't knowingly collect data from children. If you believe a minor has provided us data, let us know and we'll remove it.

Changes to this policy

We may update this policy as the product evolves. If a change is material, we'll email the account owner at least 14 days before it takes effect. The date at the top always reflects the current version.

Contact

Questions, or a privacy request? Email us at contact@rankfirst.blog.