Privacy policy

We collect your account email, a password hash and a signup verification code stored as a hash. We also collect the domain and keywords you enter in the demo, UTM campaign parameters and referrer information, and the IP address used to enforce demo limits and prevent abuse.

We store the keywords you track, project settings and ranking and AI visibility results. When you connect Google Search Console, we access its data with read-only permission, including queries, clicks, impressions and click-through rates. You can disconnect that access.

The payment operator holds billing and payment details needed to process your subscription. We receive subscription and payment status and the billing information needed to manage your account. We also process the information you choose to include in support messages.

We use account and tracking data to provide the service, verify access, run checks, manage subscriptions and answer support requests. Under the GDPR, this processing is necessary to perform our contract with you or take steps you request before entering a contract.

We use IP addresses and essential security records to enforce demo limits, protect accounts and prevent abuse. We use UTM and referrer information and cookieless analytics to understand how people find and use the service. Our GDPR legal basis is our legitimate interest in protecting and improving the service, balanced against your rights. You can object to processing based on legitimate interests.

We retain and disclose information when required by applicable law, including accounting obligations. The GDPR legal basis is compliance with a legal obligation. Where consent is required for a particular use, we ask for it and you can withdraw it without affecting earlier lawful processing.

US state privacy laws, such as the California Consumer Privacy Act, or CCPA, may give you additional rights depending on where you live and whether the law applies. We do not sell personal information or share it for cross-context behavioral advertising.

We use only essential cookies for functions such as keeping you signed in and protecting your session. We use cookieless analytics to understand visits and service use. We do not use advertising pixels or cookies for advertising. Blocking essential cookies may prevent account functions from working.

We use providers only for the functions needed to operate the service. Recipients are described by category.

• A hosting provider processes stored data and service requests.
• A payment operator processes payments and holds billing details.
• An email delivery provider processes email addresses and messages needed for account verification and service communication.
• A SERP data provider receives the keywords, domains, locations and device settings needed for ranking checks.
• An AI model provider receives only questions built from your keywords. We do not send account emails, passwords, signup codes or billing details to this provider.

Avoid putting personal or confidential information in tracked keywords. Providers process data under appropriate contractual obligations. We may disclose information to meet a binding legal requirement or protect legal rights.

Data may be processed outside your country. Where the GDPR requires safeguards for a transfer, we use an applicable adequacy decision or appropriate contractual safeguards, such as standard contractual clauses, with supplementary protections where needed. Contact us to ask about the safeguards that apply to your data.

We retain account and tracking data for as long as needed to provide your account and requested tracking history. Signup codes expire and are kept only as needed for verification and abuse prevention. Demo records and IP addresses are kept only as needed to enforce limits and investigate abuse.

Support records are kept as needed to resolve requests and related disputes. Billing records are retained for applicable accounting and legal requirements. When data is no longer needed, we delete or anonymize it. Legal obligations, disputes or security investigations may require longer retention of relevant records. Deleted data may remain in restricted backups until those backups are overwritten under the backup cycle.

Depending on the law that applies, you may ask to see a copy of your data, or ask for correction, deletion, a portable copy or a restriction on processing. You may object to processing based on legitimate interests, withdraw consent and complain to your data protection authority.

Applicable US state laws may also give you rights to know the categories of personal information collected and disclosed, appeal a denied request, and opt out of a sale, advertising-related sharing or certain profiling. We do not sell personal information, share it for cross-context behavioral advertising or make solely automated decisions that produce legal or similarly significant effects. We do not discriminate against you for exercising privacy rights.

Send your request to [email protected], preferably from your account email. Describe the right you want to use. We verify your identity using information proportionate to the request and respond within the applicable legal deadline. An authorized agent can contact us with evidence of authority where permitted. If we deny a request, you can ask us to review it by replying to the decision.

SearchTracking is intended for adults using the service for professional purposes. We do not knowingly collect personal data from children. Contact us if you believe a child has provided personal data so we can investigate and delete it where required.

We use access controls, password hashing and safeguards for data in transit and storage. Access is limited to what is needed to operate and support the service. No safeguard eliminates every risk. Read about rank tracker security and contact us if you suspect unauthorized access.

We update this policy when our data practices or legal obligations change. The date above identifies the current version. We notify account holders of material changes through the service or by email where required. For related account rules, read the terms of service, or use the contact page for support.