Data Protection & Privacy

Privacy Policy

Last updated: October 2026 · Compliant with GDPR, ePrivacy and CCPA/CPRA

1.Introduction & Data Controller

This Privacy Policy explains how RANKVERI ("RANKVERI", "we", "our", "us") collects, uses, processes, and protects your personal data when you visit our website rankveri.com or use our AI visibility measurement and Generative Engine Optimization (GEO) platform (the "Service").

We are firmly committed to processing personal data in full compliance with the European General Data Protection Regulation (EU GDPR 2016/679), the UK GDPR, the California Consumer Privacy Act as amended by the CPRA, and French data protection legislation (Loi Informatique et Libertés).

Data Controller Contact

RANKVERI Platform

Privacy & Legal Inquiry Email: contact@rankveri.com

Hosting: Sovereign European Cloud Infrastructure (AES-256 encrypted at rest)

2.Personal Data We Collect

In accordance with the principle of data minimization, we only collect data that is strictly necessary to deliver our AI visibility monitoring services:

  • Account Identification Data: name, professional email address, company name, encrypted password, role within your workspace.
  • Billing & Subscription Data: billing address, VAT or tax identification number, payment token. Payment transactions are securely processed by our certified PCI-DSS payment gateways; RANKVERI never stores your full credit card number.
  • Brand & Monitored Domain Configuration: website URLs, brand name and spelling variants, targeted search queries/prompts, direct competitor domains, CMS integration credentials (stored AES-256 encrypted).
  • Technical & Automated Usage Logs: IP address, browser type and version, operating system, timestamped audit trail of platform modifications, feature interaction metrics.
  • Customer Communications: contents of support requests, bug reports, and correspondence addressed to contact@rankveri.com.

Special Categories: We never intentionally collect sensitive personal data (health, biometric, religious, or political data). You should not enter sensitive data into the platform.

3.How We Use Data & Legal Bases

Contract Performance (Art. 6-1-b)

• Providing AI engine citation audits

• Multi-engine prompt sampling

• Assisted content generation with human approval

• CMS publishing & ROI attribution

Legal Obligations (Art. 6-1-c)

• Processing payments and invoicing

• VAT and tax compliance in the EU

• 10-year accounting record retention

• Response to legitimate authority requests

Legitimate Interests (Art. 6-1-f)

• Platform security and fraud prevention

• Immutable administrative audit trails

• Algorithmic precision improvements

• Critical service and security notifications

Consent (Art. 6-1-a)

• Optional marketing and newsletter communications

• Non-essential analytics cookies

• Revocable at any moment with 1 click

4.Strict Guarantee: No AI Model Training On Customer Data

RANKVERI strictly guarantees that Customer Content is never used to train third-party public AI models.

Our enterprise integrations with AI model providers (such as OpenAI, Anthropic, Google Cloud, Perplexity, and xAI) operate under contractual Data Processing Agreements (DPA) and zero-retention API policies. Outputs and inputs submitted through our service are excluded by contract from being used for model training or refinement.

5.Data Sharing & Trusted Subprocessors

We never sell, rent, or trade your personal information. We only share personal data with vetted third-party subprocessors under strict contractual safeguards:

  • Cloud Infrastructure & Database: Secured European cloud hosting (AWS eu-west region, Supabase EU).
  • Payment Processors: PCI-DSS Level 1 payment services for subscription processing.
  • Transactional Email Providers: Encrypted transactional email delivery for invitations, password resets, and audit alerts.
  • AI Model Inference APIs: API execution under enterprise no-training clauses for measurement and writing assistance.

6.Data Retention Periods

We retain personal information only for the duration necessary to fulfill the purposes for which it was gathered:

  • Active Account Data: Retained for the lifetime of your account, plus 90 days after workspace closure to allow recovery.
  • Invoices & Accounting Documents: 10 years, as mandated by European and French commercial law.
  • Administrative Audit Trail & Logs: Up to 3 years to ensure traceability, compliance, and dispute resolution.

7.Your Rights & How to Exercise Them

Under the GDPR and international privacy legislation, you have the following rights regarding your personal information:

Right of Access & Portability:

Obtain a full portable export of all your tracked data (JSON/CSV).

Right of Rectification:

Correct any inaccurate or obsolete personal details directly or upon request.

Right of Erasure ("Forgotten"):

Request irreversible deletion of your account and personal history.

Right to Object & Restrict:

Object at any time to legitimate interest processing or marketing.

To exercise any of these rights, email us directly at contact@rankveri.com. We respond within a maximum of 30 days without fees. You also have the right to file a complaint with the French CNIL (cnil.fr) or your local supervisory authority.

8.Cookies, Tracking & Data Security

RANKVERI implements technical and organizational measures designed to ensure a state-of-the-art level of security:

  • AES-256-GCM encryption of sensitive secrets at rest.
  • TLS 1.3 encryption across all public and internal communications in transit.
  • Strictly necessary session cookies only by default, respecting the ePrivacy directive.

Questions regarding this Privacy Policy?

Our data protection team is available at contact@rankveri.com