Rank Drift

Privacy Policy

Service: https://rankdrift.dev · Effective Date: November 11, 2026

This Privacy Policy explains how Rank Drift (https://rankdrift.dev, “we”, “us”, or “the Service”) collects, uses, and protects information when you use the application.

1. Information We Collect

  • Account Information: Name, email address, and encrypted authentication credentials when an account is created or invited by an administrator.
  • Workspace & SEO Project Data: Domains, keywords, rank-tracking records, site audit results, generated reports, and AI chat conversations submitted to or created within the Service.
  • Connected Google Account Data: When you choose to link Google integrations, we retrieve the data you authorize through Google APIs as described in Section 2.
  • Technical & Security Logs: Standard HTTP request logs (such as IP address, timestamps, and error diagnostics) needed to operate and secure the server.

2. Google API User Data & Limited Use

You may optionally connect Google Search Console and Google Analytics (GA4) to your projects using OAuth 2.0. All scopes requested for these integrations are read-only.

  • Data Accessed: For Google Search Console, search performance metrics (queries, pages, clicks, impressions, average position) and URL inspection results for verified properties you select. For Google Analytics, property lists and read-only analytics metrics (traffic, pages, events, conversions, device/country breakdowns). We also store the connected Google account email address to display connection status.
  • How We Use Google Data: Google user data is used solely to provide and improve the user-facing SEO reporting, analytics, and assistant features you explicitly request inside this Service. We do not sell Google user data, use it for advertising, or use it to train generalized AI or machine learning models.
  • Third-Party Transfers: Google data stays within this deployment except when sent at your direction to configured AI model providers (such as OpenRouter) solely to generate an assistant response you requested, or to an MCP client that you explicitly connect.
  • Storage & Protection: OAuth access and refresh tokens are encrypted at rest in the Service’s database and transmitted over HTTPS/TLS.
  • Revocation & Deletion: You can disconnect Google integrations at any time from Project Settings, or revoke access from your Google Account permissions page at https://myaccount.google.com/permissions.

The Service’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. Third-Party Service Providers

Depending on features enabled by the server operator, queries or prompts you initiate may be sent to configured third-party providers (such as DataForSEO for SEO metrics and OpenRouter for AI features) solely to fulfill your requests.

4. Data Retention & Security

We retain account and project data while your account remains active or as needed to operate the Service. Administrators can remove users, projects, or stored connections upon request.

5. Contact

For privacy questions or data deletion requests, contact the site operator at [email protected].