Privacy Policy
Last updated: October 2026 · Effective: October 6, 2026
Overview
rankmy.blog (“rankmy.blog”, “we”, “us”) is an automated SEO blogging tool. You connect a website, our AI studies it, plans content, and publishes human-quality blog posts on your own domain. This policy explains what data we collect, why, who we share it with, and the choices you have. It covers account holders (our customers) and, where relevant, visitors to blogs published through our service.
Data controller
The data controller responsible for your personal data is:
RankmyBlog (sole proprietorship)
Bangalore, India
Email: hello@rankmy.blog
If you have any questions about how we handle your data, you can reach the controller at the address above.
What we collect
Information you give us
- Account details: your email address and full name when you sign up (including via Google sign-in, if you choose it).
- Website details: the domain(s) you connect, any custom domain and DNS configuration, an uploaded logo, chosen blog theme, and any “special instructions” you give the AI writer.
- Content: blog posts, drafts, titles, keywords, and edits you create or approve.
- Custom scripts: any analytics or head scripts you choose to inject into your own published blog.
- Support communications: messages you send us by email or social channels.
Information generated automatically
- Site analysis data: when you paste a domain, we fetch and read that site’s public homepage to understand what the business is about (see “Website analysis” below).
- Usage data: posts generated and published, plan limits, and basic product interactions needed to run the service.
- Blog visitor analytics: for blogs published through us, we record anonymous page views and link clicks (see “Blog analytics”).
We do not collect payment card numbers directly; payments are handled by our payment processor (see below).
Sources of personal data
We collect personal data from the following categories of sources:
- Directly from you: when you sign up, connect a website, create content, configure settings, or contact support.
- From authentication providers: if you sign in with Google or GitHub, we receive your name and email from that provider.
- From your connected website: we fetch publicly available homepage text, titles, and meta descriptions when you paste a domain.
- Automatically from use of the service: usage data such as posts generated, plan limits consumed, and product interactions.
- From blog visitor requests: anonymous page views, link clicks, and coarse country derived from the request.
- From our payment processor: Dodo Payments sends us your plan status, subscription status, and customer identifier. We do not receive or store your payment card details.
How we use your data
- To create and manage your account and authenticate you.
- To run the core product: analyze your site, discover keywords, generate and schedule posts, and publish them on your domain.
- To enforce plan limits and process subscriptions and trials.
- To show you analytics about how your published content performs.
- To provide support and respond to your requests.
- To secure the service, prevent abuse, and comply with legal obligations.
We do not sell your personal data, and we do not use your content to train our own models.
Legal grounds for processing
We process your personal data on the following legal bases under the GDPR and equivalent data protection laws:
| Processing activity | Legal basis |
|---|---|
| Creating and managing your account, authenticating you | Contract — necessary to provide the service you signed up for |
| Analyzing your site, discovering keywords, generating and publishing posts | Contract — core service delivery |
| Processing payments and enforcing plan limits | Contract — necessary to fulfil our billing obligations |
| Showing you analytics about your published content | Legitimate interest — helping you understand how your content performs |
| Recording anonymous blog visitor page views and clicks | Legitimate interest — providing site owners with content performance data |
| Sending you service emails (welcome, onboarding, product updates) | Legitimate interest — keeping you informed about the service you use |
| Securing the service, preventing abuse, and detecting fraud | Legitimate interest — protecting the service and our users |
| Complying with legal obligations (tax records, fraud prevention) | Legal obligation — required by applicable law |
Where we rely on legitimate interest, we have assessed that our interests do not override your rights and freedoms. You can object to processing based on legitimate interest at any time by contacting us.
Third-party processors we share data with
To operate rankmy.blog we rely on the following service providers, who process data only to perform services for us:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Authentication, database, and file storage (logos) | Account, site, post, and uploaded-logo data |
| AWS (Amazon Bedrock) | AI models that summarize your site and write posts | Scraped site text, keywords, and your instructions |
| SE Ranking | Real keyword search-volume data (optional) | Candidate keyword phrases only |
| Bright Data | Fallback website fetching when a site blocks direct access | The public URL being analyzed |
| Dodo Payments | Subscription billing and checkout | Billing details you provide to them; we store only your plan and subscription status |
These providers may process data outside your country. Specifically, Supabase and AWS process data in the United States, and other providers may process data in the US or Europe. Where personal data is transferred outside the European Economic Area or the UK, we rely on the safeguards provided by our processors, including Standard Contractual Clauses approved by the European Commission, processor certifications, and encryption of data in transit and at rest. We share only what each provider needs to perform its function.
Website analysis (scraping)
When you connect a domain, we fetch its publicly available homepage and extract readable text, the page title, and the meta description. That text is sent to our AI provider to produce a short summary of what the business does and suggested topics and keywords. We only analyze sites you submit through your account, we fetch a single public page (not a full crawl), and we validate URLs to prevent requests to private or internal addresses. If a site blocks a direct request, we may retry via a third-party unlocking service (Bright Data), which receives only the URL being fetched.
Blog analytics
For blogs published through rankmy.blog, we record anonymous page views and link clicks so we can show the site owner how their content performs. This uses a lightweight request (no cookies and no cross-site tracking), and we may record a coarse country derived from the request. We do not build advertising profiles of blog visitors. Note: site owners can inject their own analytics scripts (e.g. Google Analytics) into their blog, and those are controlled by the site owner and governed by the owner’s own privacy policy, not ours.
Cookies
On the rankmy.blog application we use only essential cookies required to keep you signed in (authentication session). We do not use advertising or third-party tracking cookies in the app. Public blogs published through us do not set our cookies for our analytics. This section serves as our complete cookie disclosure. We do not maintain a separate cookie policy because we only use essential cookies that are strictly necessary for the service to function.
Data retention
We keep your account, sites, and content for as long as your account is active. If you delete a site or post, we delete the associated data within 30 days. If you close your account, we delete your personal data within 30 days, except where we must retain limited records (such as billing history and usage logs) for up to 2 years for legal, tax, or fraud prevention purposes. Anonymous blog analytics events are retained on a rolling 12 month basis to power your dashboard, after which they are automatically purged.
Your rights
Under the GDPR and equivalent data protection laws, you have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your personal data when it is no longer needed or you withdraw consent.
- Restriction — ask us to limit how we process your data in certain circumstances.
- Portability — receive your personal data in a structured, commonly used format and transmit it to another controller.
- Objection — object to processing based on legitimate interest at any time.
- Withdrawal of consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
You can exercise most of these rights directly from your dashboard (edit profile, delete sites or posts, export data). For anything else, email hello@rankmy.blog and we will respond within 30 days or the timeframe required by applicable law.
Supervisory authority
If you are not satisfied with how we handle your data or respond to your request, you have the right to lodge a complaint with a supervisory authority. If you are in the European Economic Area, you may contact the data protection authority in your country of residence. A list is available at edpb.europa.eu. If you are in another jurisdiction, you may contact the relevant data protection regulator where you live.
Security
We use reputable infrastructure providers, encrypt data in transit, restrict access to your data through row-level security, and keep privileged credentials server-side only. No system is perfectly secure, but we work to protect your information and will notify you of a breach affecting your personal data as required by law.
Children
rankmy.blog is not intended for anyone under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
Changes to this policy
We may update this policy as the product evolves. When we make material changes we will update the “last updated” date and, where appropriate, notify you. Continued use of the service after changes take effect means you accept the updated policy.
Contact
For any privacy question or request, email hello@rankmy.blog or reach us on X (@zaidbuilds).