Ranksphere logo
Get Started

Legal

Privacy Policy

Last updated: 2026-07-17

This Privacy Policy explains how Ranksphere LLC ("Ranksphere", "we", "us", or "our") collects, uses, stores, shares, and protects personal data when you visit ranksphere.io, use the Ranksphere platform at app.ranksphere.io, or otherwise interact with us (together, the "Service"). It applies alongside our Terms of Service, which govern your use of the Service, including disclaimers and limitations of liability.

1. Who we are

The Service is operated by Ranksphere LLC, a limited liability company registered in the Sharjah Media City Free Zone (Shams) under the authority of the Government of Sharjah.

For the purposes of the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("PDPL"), the EU and UK General Data Protection Regulation ("GDPR"), and the California Consumer Privacy Act as amended ("CCPA/CPRA"), Ranksphere LLC is the data controller of the personal data described in section 3.1, and a data processor for the data described in section 3.2. See section 2 for what that distinction means.

2. Our roles: when we are the controller, and when we are only a processor

Ranksphere is used by agencies and local business owners to manage their own or their clients' local search presence. Your responsibilities differ depending on the data:

If you provide us with personal data about any third party (for example a client, an employee, or a reviewer), you confirm and warrant that you have the authority and a lawful basis (including any required consent) to share that data with us and to have us process it as described in this policy. You are responsible for the accuracy and lawfulness of the data you put into the Service. Where we act as your processor, the data-processing terms in our Terms of Service apply.

3. What data we collect

3.1 Account and workspace data you give us

3.2 Client and location data you add

Business information you enter or import about the locations you manage, such as business name, address, phone number, categories, hours, and website. As explained in section 2, you are the controller of this data.

3.3 Data we fetch from Google on your behalf

With your explicit consent (a separate authorization from sign-in), we use the Google Business Profile API and the Google Places API to retrieve, where you have enabled the relevant feature:

We do not request access beyond what is required to deliver the features you have asked for, and we do not access Gmail, Drive, Calendar, or any unrelated Google service. Our use of this data also complies with section 6.

3.4 Data from other providers

To power rank tracking, citation checks, and review monitoring, we retrieve publicly available search and directory data through third-party data providers (see section 8). This data relates to the locations and keywords you choose to track.

3.5 Data we generate

3.6 Payment data

Paid plans are billed through Stripe. Stripe collects and processes your card or payment details directly. We do not receive or store full card numbers; we retain only limited billing metadata (such as plan, amount, and the last four digits) needed for invoicing and accounting.

3.7 Technical and usage data

4. How we use your data, and our legal bases

Depending on the activity, we rely on one or more of the following legal bases under the GDPR:

We do not sell your personal data, and we do not "share" it for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.

5. AI features and your data

Some features use reputable third-party AI providers to generate insights, tasks, and draft content. We send only the data needed to produce the requested output, and we avoid including unnecessary personal information in prompts. These providers process that data under business terms that do not permit them to use it to train their models, and we do not use your data to train our own models.

6. Google API Services User Data Policy compliance

Ranksphere's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide or improve the features you have enabled, we do not transfer it except as necessary to provide those features or as required by law, we do not use it for advertising, and we do not allow humans to read it except with your consent, for security, to comply with law, or where the data is aggregated and anonymized.

7. Cookies and analytics

We use two categories of cookies and similar technologies:

You can also block or delete cookies in your browser settings. Blocking strictly necessary cookies may stop parts of the Service from working.

8. Who we share data with

We share data only with the categories of providers we rely on to run the Service, each bound by contract to protect your data and use it solely on our instructions. A current list of the specific companies we use as sub-processors is available on request at support@ranksphere.io.

ServicePurpose
Cloud hosting & CDNRuns and delivers the application securely
Managed databaseStores your account and workspace data
Google APIsSign-in, Business Profile, and Places (only when you connect Google)
Search & directory dataPublic rankings, citations, and review data
AI processingGenerates insights, tasks, and draft content
Email deliverySign-in links and transactional email
Payment processingBilling for paid plans
Website analyticsAggregate, consent-based usage measurement

We may also disclose data where required by law, to enforce our agreements, to protect the rights, safety, and property of Ranksphere or others, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you and this policy will continue to apply).

9. International data transfers

Ranksphere is based in the United Arab Emirates, and the providers above process data in the United States, the European Union, and other countries. This means your data may be transferred to and processed outside your country and outside the UAE. Where we transfer personal data across borders, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, transfers to countries recognized as providing an adequate level of protection, or the data-protection commitments in our providers' terms. You can contact us at support@ranksphere.io for more information about these safeguards.

10. Data retention

We keep your account and workspace data for as long as your workspace is active. When you delete your workspace or close your account, we delete the associated locations, scans, tasks, insights, and stored authorization tokens from our live systems within 30 days, and residual copies in encrypted backups are purged within 90 days. We may retain limited records for longer where required for legal, tax, or accounting purposes, and we may keep aggregated, de-identified data that can no longer identify you.

11. Security

We protect data with encryption in transit (TLS) and at rest. Authorization tokens are stored encrypted. Access to production systems is limited to authorized personnel and is logged. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the relevant authorities of a breach where the law requires. Report security concerns to support@ranksphere.io.

12. Your privacy rights

Depending on where you live, you may have some or all of the following rights over your personal data:

To exercise any right, email support@ranksphere.io. We will respond within 30 days (or sooner where the law requires). You may use an authorized agent where the law allows. If you added data about a third party as a controller (section 2), please direct their requests to us and we will assist you in responding as your processor.

You also have the right to complain to a data-protection authority: the UAE Data Office, your local EU supervisory authority, or the UK Information Commissioner's Office (ICO). We would appreciate the chance to address your concern first.

13. Revoking Google access

You can revoke Ranksphere's access to your Google Business Profile at any time:

Revoking access stops us from fetching new data. Data already in your workspace remains until you delete the location or the workspace.

14. Children

The Service is intended for business use by people aged 18 or older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us at support@ranksphere.io and we will delete it.

15. Accuracy of third-party data

Rankings, reviews, profile fields, and directory listings are sourced from Google and other third-party data providers and are provided on an "as is" basis. They may be incomplete, delayed, or inaccurate, and we do not guarantee them. Your reliance on the Service and its outputs is subject to the disclaimers and limitations of liability in our Terms of Service.

16. Marketing communications

With your consent, we may send you newsletters and product updates from no-reply@marketing.ranksphere.io. You can unsubscribe at any time using the link in any marketing email or by emailing support@ranksphere.io. Transactional messages (such as sign-in links, billing notices, and service alerts) are not marketing and are sent as part of providing the Service.

17. Changes to this policy

We may update this policy from time to time. When we make a material change, we will update the "Last updated" date above and, where appropriate, notify workspace owners by email. Your continued use of the Service after a change takes effect means you accept the updated policy.

18. How to contact us

For any privacy question or to exercise your rights, contact:

Ranksphere LLC
Sharjah Media City (Shams), Al Messaned, Al Bataeh, Sharjah, United Arab Emirates
support@ranksphere.io