Privacy policy

What we store, who we send it to, and how to get rid of it. Written against what the software actually does rather than what a template assumes.

Last updated 9 September 2026

What we collect

• Your account — email address and a salted hash of your password. We never store the password itself and cannot recover it.
• Your business — the name, website, and the latitude and longitude taken from the Google Maps link you paste. The coordinates are read out of the URL; we do not call a geocoding service.
• What you track — your keywords, the competitors you add, and the directory sites you mark as submitted.
• Results — the rank at each grid point for each scan, your website scan findings, and the questions you ask the assistant.
• Usage — how many scans, lookups and assistant questions you have used this month, so your plan limits can be applied.
• Billing state — which plan you are on, whether the subscription is active, and when it renews. We never see or store your card.

Analytics

We count page views and daily unique visitors in our own database. There is no Google Analytics, no advertising pixel and no third-party tracker. A cookie named rm_day holds a random value that changes every day and is used only to avoid counting the same browser twice; it contains nothing that identifies you.

Who we send data to

Running a scan means sending some of your data to services that do the work:

• Apify — receives your keywords and grid coordinates in order to read Google Maps results. It does not receive your email or account details.
• Anthropic — when you ask the AI assistant a question, that question and the relevant numbers from your own scans are sent to be answered.
• Razorpay and PayPal — receive your email and the amount, and handle the card or UPI details themselves. Those details never reach us.
• OpenStreetMap or MapTiler — serve the map tiles behind the grid. Your browser requests those tiles directly.

We do not sell your data, and we do not share it with anyone else.

Where it lives, and for how long

Everything is stored in our own database on our hosting provider's servers. Scan history is kept while your account exists, because comparing this week to last week is the product. Delete your account and it goes with it.

Getting it deleted

Email support@rankmapp.com from the address on the account and we will delete it, and everything attached to it, within seven days. You do not have to give a reason. You can also ask for a copy of what we hold on the same terms.

Cookies

• A session cookie, so you stay signed in. Removing it signs you out.
• rm_day, described above.

That is the complete list.

Changes

If this policy changes in a way that affects what we do with your data, we will say so on this page and change the date at the top.