Privacy Policy
RankLens is an SEO analysis service operated by an individual based in North Macedonia. We collect only the minimum data necessary to provide the service. We do not sell your data and do not use it for advertising. Privacy contact: contact@ranklens.si
1 Who We Are and Our Role
RankLens is an SEO analysis service providing manually provisioned accounts, website crawling and SEO reports, optional Google Search Console integration, and optional AI-assisted content analysis.
For account administration, access control, service security and operation of RankLens, the operator acts as the data controller. Website content submitted for crawling may contain personal data. Where a business customer uses RankLens to process personal data on its behalf, the parties must determine their respective controller/processor roles and put an appropriate data processing agreement in place where required.
2 Information We Process
Depending on the features you use, RankLens may process:
- Account and authentication data — username, password hash, account status and session information. Passwords are hashed using bcrypt with cost factor 12 and are never stored in plain text.
- Crawl and report data — URLs submitted for analysis, page content retrieved by the crawler, SEO findings, scores, reports and crawl history.
- Usage and security data — crawl timestamps, project counts, pages crawled, login timestamps, IP addresses and events used to enforce plan limits or detect suspicious account use.
- Google Search Console data — if you connect Google Search Console, data made available under the read-only permission described below, along with OAuth tokens needed to maintain the connection.
- AI feature input — when you explicitly choose to use Content AI, the page title, description, headings, keywords and word count selected for analysis are sent to Groq.
- Website analytics data — RankLens uses Google Analytics 4 (GA4) for page views and session counts, subject to your consent. Google Analytics may process cookie or device identifiers and related technical data.
RankLens does not collect payment-card information.
3 Why We Use Information and Legal Bases
We use information to create and authenticate accounts, provide crawling and reports, retain crawl history, enforce plan limits, operate the Google Search Console integration when requested, provide AI analysis when requested, secure the Service, detect misuse, and respond to support or legal requests.
Where the GDPR applies, the likely legal basis is:
- Performance of contract — for core account and requested feature processing.
- Legitimate interests — for security, abuse prevention and service reliability, where those interests are not overridden by individual rights.
- Legal obligations — for records that must be kept.
- Consent — for non-essential analytics (GA4) where legally required.
Data will not be used for unrelated marketing or profiling.
4 Website Crawling and Third-Party Data
RankLens crawls URLs submitted by users using a headless browser and includes SSRF protection intended to prevent access to internal network resources. Crawl results may include personal data that appears on public web pages.
You must have a lawful basis and any permissions required to submit a website for analysis, and must respect applicable access restrictions, privacy rights, intellectual-property rights and website terms of service. Do not submit confidential, sensitive or restricted information unless the Service and your agreement expressly support it.
5 Google Search Console Integration
When you connect Google Search Console, RankLens uses Google OAuth 2.0 and requests the webmasters.readonly scope — read access only, no changes to your GSC account.
- OAuth tokens are stored encrypted in your session and in our database.
- We access only the sites verified under your Google account.
- You can disconnect Google at any time from the Settings page, which deletes your stored tokens.
- You may also revoke access through your Google Account security settings.
RankLens's use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.
6 AI-Assisted Analysis
If you activate Content AI, RankLens sends the selected page title, description, headings, keywords and word count to the Groq API to generate analysis. Specifically:
- Only data from pages you explicitly choose to analyze is sent.
- Your Groq API key is stored locally in your browser (localStorage) — it is never sent to or stored on our servers.
- We do not store or log AI responses.
AI output may be incomplete or inaccurate and must be reviewed before use. Do not submit confidential or special-category personal data through this feature. Groq processes requests under its own applicable terms and privacy documentation.
7 Third-Party Services
RankLens uses the following third-party services:
- Google APIs — for Google Search Console integration. Governed by Google's Privacy Policy.
- Groq API — for Content AI requests explicitly initiated by the user. Governed by Groq's Privacy Policy.
- Google Fonts — for typography. Google may receive technical data such as an IP address when fonts are requested.
- Google Analytics 4 — for website traffic measurement, subject to your consent. Governed by Google's Privacy Policy.
All data is stored on a private VPS server. We do not share your data with any other third parties and do not sell personal data or use it for advertising.
8 International Transfers
The use of Google, Groq, Google Fonts and Google Analytics may involve processing in countries outside your country of residence or outside the European Economic Area. The actual locations and transfer mechanisms depend on the providers, account configuration and applicable terms.
Where GDPR transfer rules apply, RankLens relies on applicable adequacy decisions or appropriate safeguards such as standard contractual clauses, where required.
9 Retention and Deletion
- Crawl data is retained while your account remains active. You may request deletion at any time.
- Stored Google OAuth tokens are deleted when you disconnect Google in Settings.
- The session cookie expires after seven days of inactivity.
- AI responses are not stored or logged by RankLens; the Groq API key remains in browser localStorage only.
You can export crawl data as CSV from within the Service and may request full account and data deletion by contacting us at contact@ranklens.si. We will respond within 30 days.
10 Security
RankLens implements the following security measures:
- Bcrypt password hashing with cost factor 12 — never stored in plain text.
- Server-side sessions with secure, HTTP-only cookies.
- One active session per account at any time.
- Authentication required for all API endpoints except login.
- HTTPS enforced on all production traffic.
- Encrypted Google OAuth tokens stored in the session and database.
- SSRF protection for the crawler.
No system can guarantee absolute security. If you suspect a security issue, contact us at contact@ranklens.si.
11 Your Data Protection Rights
Depending on applicable law, you may have the right to:
- Access — view your account and crawl data within the app.
- Portability — export crawl data as CSV at any time.
- Correction — request correction of inaccurate account data.
- Erasure — request full deletion of your account and associated data.
- Restriction or objection — object to processing based on legitimate interests.
- Withdraw consent — withdraw analytics consent at any time by clicking Decline in the cookie banner or clearing your browser's localStorage.
- Lodge a complaint — with a competent data protection authority.
To exercise any of these rights, contact us at contact@ranklens.si. We will respond within 30 days.
13 Children
RankLens is designed for professional and business-oriented website analysis and is not directed to children. Users must be legally capable of entering into the applicable agreement. If you believe a minor has submitted data to RankLens, contact us at contact@ranklens.si and we will delete it promptly.
14 Changes and Contact
We may update this Policy to reflect changes to RankLens, its providers or applicable law. The revised date will be shown above.
To exercise privacy rights or ask questions, contact us:
RankLens is operated by an individual based in North Macedonia.
Privacy contact: contact@ranklens.si