Privacy Policy
Who we are
RankoHub (“we”) is a self-hosted SEO analytics service operated at rankohub.com. It connects to your Google Search Console and Google Analytics 4 accounts, at your request, to show your own data back to you in dashboards, insights and reports. Contact: [email protected].
What data we collect
Account data: when you sign in with Google we receive your name, email address and profile picture, used only to create and identify your account.
Google user data, via read-only APIs and only for the properties you explicitly connect: Search Console performance data (queries, pages, clicks, impressions, positions, by country and device) and Google Analytics 4 metrics (sessions, users, landing pages, traffic sources, on-site search terms, conversion events). We request the narrowest read-only scopes available and never gain write access to your Google accounts.
Content you add yourself: report titles and text, uploaded images, annotations, tracked keywords and imported keyword lists.
How we use Google user data
Exclusively to provide the visible features of the service to you: daily synchronization, dashboards, trends, SEO recommendations (“action items”), rank tracking and the reports you create. Your data is shown to you, and to the people you deliberately share a report link with. Nothing else.
We do NOT sell your data, do NOT share it with advertisers or data brokers, do NOT use it for advertising, and do NOT use it to train AI or machine-learning models.
No human reads your Google user data, except: (a) with your explicit permission (for example when you ask us for support on a specific issue), (b) when strictly necessary for security or abuse investigation, (c) to comply with applicable law, or (d) as aggregated, anonymized statistics that cannot identify you or your sites.
If you create an API token and connect an AI assistant (such as Claude, via our MCP integration), that assistant receives the aggregated metrics you query through it. This transfer happens only at your request, under a token you create and can revoke at any time from the application.
RankoHub's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Storage and security
All data is stored on our own server in the European Union. Google access tokens are stored encrypted at rest; all traffic is encrypted in transit (HTTPS). Access to your data inside the product is restricted to your account; each account only sees its own sites. See our Security page for details.
Sharing and third parties
We use a small number of infrastructure providers to run the service: server hosting (Hetzner, EU), encrypted off-site backups (DigitalOcean, Frankfurt/EU), Cloudflare (DNS/TLS proxy) and Postmark (transactional email such as alerts). They process data only as needed to provide their function; data does not leave the EU.
Reports you share via link are visible to anyone who has that link. You stay in control: you can protect any shared link with a password, pause it (unpublish) or revoke it at any time, and shared reports are frozen snapshots — they show exactly what you shared, nothing more.
Retention and deletion
We retain your synced history for as long as your site is connected — that is the core value of the product. Deleting a site permanently deletes all its data (metrics, insights, reports, uploads). Deleting your account deletes everything associated with it. You can also disconnect your Google account at any time from myaccount.google.com/permissions, which immediately stops all synchronization. For a full erasure request, email [email protected] — we honor it within 30 days.
Deleted data also disappears from our backups as they rotate: daily backups are kept 8 days and weekly backups at most 35 days, so no trace of deleted data remains after 35 days at the latest.
Your rights (GDPR)
If you are in the EU/EEA you have the right to access, rectify, export and erase your personal data, to restrict or object to processing, and to lodge a complaint with your supervisory authority (in Romania: ANSPDCP). Write to [email protected] for any of these.
Cookies
We use a single, strictly necessary session cookie to keep you logged in. No advertising cookies, no third-party tracking, no analytics beacons on the application.
Changes
If this policy changes in a way that matters, we will announce it in the application before the change takes effect. The date above always reflects the latest revision.