GDPR & Data Privacy

Who This Applies To

This notice applies to users in the European Union, United Kingdom, and any other jurisdiction with applicable data protection laws. RankFox is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Indian data protection laws.

Data Controller

The data controller for RankFox is:

Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract performance: Processing your email and payment information is necessary to deliver your paid report.
• Legitimate interest: Basic analytics to improve RankFox.
• Legal obligation: Retaining transaction records as required by law.

Your Rights Under GDPR

If you are located in the EU or UK, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate personal data.
• Right to erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to restriction: Request that we restrict processing of your data in certain circumstances.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email contact [at] rankfox [dot] io. We will respond within 30 days.

Data Transfers

RankFox uses third-party services including DataForSEO, Anthropic, Resend, and Vercel which may process data outside of India or the EU. Where data is transferred internationally, we rely on standard contractual clauses or equivalent safeguards as required by applicable law.

Data Retention

Report data is retained for 30 days. Email addresses are retained for up to 12 months for support purposes. Transaction records are retained as required by Indian tax and accounting law.

Complaints

If you believe your data rights have been violated, you have the right to lodge a complaint with your local data protection authority. In the EU, this would be your national supervisory authority. In India, complaints may be directed to the relevant authority under the Digital Personal Data Protection Act.

Contact

For all data privacy matters, contact us at contact [at] rankfox [dot] io.