Privacy Policy

Data controller

YANA DEV, SAS, 14 rue Bausset, 75015 Paris, France (SIREN 940 443 492). Personal-data contact: contact@searchrankly.com.

Data we collect

Account: name, e-mail address, password (stored hashed), role in the organization, timestamp of acceptance of the terms.

Billing: company name, registration number (SIREN/SIRET), VAT number, billing address and e-mail, subscribed plan, invoices.

Search-engine connection: your cluster's host and API key, stored encrypted (AES-256-GCM) and used only to perform the actions you request.

Usage: an audit log of actions performed in the service, and technical connection data (IP address, browser) for security purposes.

Early-access and roadmap forms: we store the details you give us (e-mail, and optionally name, company, role, business type, search engine, catalogue size, budget, your votes and where you came from) to contact you about Rankly and prioritise our roadmap. The legal basis is your consent. We keep them for 24 months after your last interaction, then delete them. You can withdraw your consent, access, correct or delete your data at any time by writing to contact@searchrankly.com.

Purposes and legal bases

Providing the service and managing the account (performance of the contract); invoicing and accounting obligations (legal obligation); security, fraud prevention and support (legitimate interest); company identity verification for invoicing (performance of the contract).

Recipients and processors

Amazon Web Services EMEA SARL (hosting, eu-west-3 (Paris, France) region); Stripe (card payments); Brevo (chat support, only for signed-in paying subscribers, and transactional e-mails); the French public company register (recherche-entreprises.api.gouv.fr) for automatic SIREN/SIRET verification. No data is sold or shared for advertising purposes.

Retention periods

Account data: for the duration of the contractual relationship, then deleted within 3 years of account closure. Invoices and accounting data: 10 years (legal obligation). Technical and audit logs: 1 year.

Your rights

Under the GDPR you have the rights of access, rectification, erasure, restriction, portability and objection, and the right to set post-mortem directives. Exercise them by writing to contact@searchrankly.com. You may also lodge a complaint with the CNIL (www.cnil.fr).

Cookies and local storage

The service uses only strictly necessary trackers, exempt from consent: the session token (authentication), a sign-in indicator shared between the website and the app (rankly_session), theme and language preferences, and the Brevo chat widget, loaded only for signed-in paying subscribers. No advertising or third-party analytics trackers are set.

Security

Encrypted transport (TLS), hashed passwords, your engines' API keys encrypted at rest, restricted and logged access. Data is hosted in the European Union.