R
rankwize

Legal

Security

This page describes how Rankwize handles data security, infrastructure, and privacy obligations. For our full data practices, see the Privacy Policy.

Infrastructure

Rankwize is hosted on Cloudflare Pages and uses Cloudflare's global network for CDN, DDoS protection, and traffic security. Application data is stored and processed in cloud infrastructure within the United States.

Encryption

All traffic between your browser and Rankwize is encrypted via TLS. OAuth tokens issued when you connect integrations (such as Google Search Console) are encrypted at rest using AES-256-GCM before storage.

Data residency

Rankwize is based in the United States. Data you submit — including your domain, prompts, and connected Search Console data — is processed in the United States and in other countries where our subprocessors operate.

Where required by applicable law, we rely on Standard Contractual Clauses or other lawful transfer mechanisms for data transferred from outside the United States, including from the European Economic Area.

GDPR

Rankwize supports GDPR compliance obligations. If you are based in the European Economic Area, you have the right to access, correct, delete, or export your personal data. To exercise these rights, contact us at hello@rankwize.io.

We do not sell personal information. We do not use your workspace data, prompts, or connected Search Console data to train third-party large language models.

Subprocessors

We share information with the following vendors to operate the Service. Each vendor is bound by contract to use data only to provide services to Rankwize:

  • Cloudflare — hosting, CDN, and DDoS protection for rankwize.io.
  • Stripe — subscription billing and payment processing.
  • Google (Search Console API) — only when you connect a Search Console property; access is read-only and limited to the properties you authorize.
  • DataForSEO — keyword, autocomplete, SERP, and People Also Ask data used to validate prompt demand.
  • AI model providers (including OpenAI, Anthropic, Google, and Perplexity) — we send the prompts and context required to query their answer engines on your behalf. Each provider's API terms prohibit using API inputs to train their models by default.
  • Email and support tooling — used to send transactional and marketing email and to respond to support requests.
  • Product analytics and error monitoring — used to measure product usage and diagnose bugs.

Subprocessor changes

We will notify customers of material changes to our subprocessor list at least 14 days before the change takes effect. Notification will be sent to the email address associated with your account.

Contact

Security questions or concerns: hello@rankwize.io