Draft for review. Fill in the company details and have a solicitor check this page, then set LEGAL_REVIEWED=1 to remove this notice.
Privacy policy
Last updated 9 October 2026
This policy explains what personal data Ranka collects, why, and your rights. Ranka is run by [Your company name] ([Company number]), [Registered address], which is the data controller. Contact us about privacy at [support email].
What we collect
- Account details: your email address and a securely hashed password (we never store your password itself).
- Business details you give us: business name, website, what you sell, the areas you serve, offer links, and a reviewer's name and credentials if you add them.
- Content: text we read from your public website during setup, and the articles we create and you edit.
- Connection details: your WordPress username and application password, or a webhook address. We encrypt these when stored.
- Billing: handled by Stripe. We receive your plan and billing status; we never see or store your card details.
- Messages you send through our contact form.
- Usage events: which steps of sign-up and setup were completed. Before you sign up these are anonymous (no identifier, no IP address); afterwards they are linked to your business account.
- Technical logs: our hosting provider and error tracking record IP addresses and error details for security and reliability, kept for a limited time.
Why we use it, and our lawful basis
- To provide the service you signed up for: planning, writing and publishing articles, and billing (contract).
- To keep the service secure, prevent abuse and fix errors (legitimate interests).
- To understand where people get stuck during sign-up and improve the product, using the usage events above (legitimate interests).
- To send service emails such as password resets and billing notices (contract). We don't send marketing emails without your consent.
- To meet legal and tax obligations (legal obligation).
Who processes it for us
We share data only with providers who help us run Ranka, under contracts that require them to protect it:
- Anthropic: the AI that reads your website and writes articles.
- Stripe: payments and subscriptions.
- Resend: sending emails.
- Our hosting and database providers: running the app and storing data.
- Sentry: error tracking.
Some of these providers process data outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations or the International Data Transfer Agreement or Addendum, as applicable.
How long we keep it
We keep your account and content while your account is open. You can delete your account in Settings at any time; your account, business details, articles and connection details are deleted straight away, and copies in our backups expire within 30 days. We keep billing records held by Stripe for 6 years for tax purposes. Anonymous usage events are kept for up to 2 years.
Cookies
We use one essential cookie to keep you signed in. We don't use advertising or analytics cookies, so there is no cookie banner. Stripe sets its own cookies on its checkout page to prevent fraud.
Your rights
You can ask to access, correct, delete or export your personal data, object to or restrict how we use it, and withdraw consent where we rely on it. Email [support email] and we'll respond within one month. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).
Changes
If we make significant changes we'll tell account holders by email before they take effect.