Skip to content

Privacy Notice

Last updated 10 October 2026

This notice describes how the product handles personal data. It is a working draft and must be reviewed by a qualified adviser, and completed with the operating company's details, before launch.

Who we are

Rankwell Insights is an SEO operations platform. For account and billing data we act as controller. For the search, website and client data you load into your organisation we act as your processor.

What we collect

  • Account data: name, email address, hashed password, two-factor settings, session records (IP address and browser).
  • Organisation data: client names and contacts, websites, tasks, notes, SEO changes and reports you create.
  • Search Console data: queries, pages, clicks, impressions, CTR and position for the properties you connect. This is aggregate search data, not data about identifiable searchers.
  • Crawl data: page titles, descriptions, canonicals, robots directives, status codes and links from websites you authorise.
  • Billing data: handled by Stripe. We store your subscription status, not card details.
  • Usage statistics for the free tools: counts of visits and uses. No IP address, no user agent and no persistent identifier is stored.

Why we use it and our lawful bases

  • To provide the service you signed up for (contract).
  • To secure accounts, prevent abuse and keep audit logs (legitimate interests).
  • To send service emails you can configure, such as alerts and reports (contract and legitimate interests).
  • To meet legal and tax obligations (legal obligation).

Google user data

We request read-only Search Console access and your Google email address to label the connection. Tokens are encrypted at rest. Search Console data is used only to provide the features you see in the product, is not used for advertising, is not sold and is not used to train generalised models. You can disconnect at any time, which revokes access at Google.

Retention

Daily search data is kept for the period set by your organisation (25 months by default), crawl snapshots for 6 months, notifications for 6 months, email logs for 90 days and audit logs for 24 months. Deleting an organisation erases its data after a 7-day grace period.

Your rights

You can access, export, correct and delete your data from Settings → Privacy & data, and you may object to or restrict processing or complain to the Information Commissioner's Office. Contact us using the details on the contact page.

Cookies

We use only essential cookies for sign-in, security and remembering your dashboard preferences. See the Cookie Notice.