Privacy policy

Rank Optimizer (“we”, “us”) is a Canadian local SEO service. We build and manage your Google Business Profile, submit and monitor your listings across local directories, generate customer reviews on your behalf, and track your local search rank. This policy applies to everyone who creates a Rank Optimizer account or visits rankoptimizer.ca.

We collect the information we need to run and bill for the service:

• Business information — the name, address, phone number, website, categories, service areas, hours, and photos you give us during onboarding, used to build and manage your local presence.
• Google account access — when you connect Google Business Profile management, you authorize Rank Optimizer to read and update your profile via Google's business.manage scope. See how we use this access below.
• Scan queries — the search terms, categories, and locations you ask us to track, and the resulting rank and competitor data Google returns for those searches.
• Contact and account information — your name, email, phone number, and billing address, collected when you create an account or make a purchase.
• Payment information — handled directly by Stripe; we don't store full card numbers on our own servers.
• Usage data — the pages you visit and actions you take in the app, collected to run and improve the service.

When you connect your Google Business Profile, Rank Optimizer requests Google's business.manage scope so our team and our AI agent can read and update your profile on your behalf — and only your profile. We use this access to:

• Read your current profile — business information, categories, hours, service items, photos, and posts — to audit its live status.
• Draft optimizations to your profile description, categories, hours, service items, and photos, using Google’s own data as the source of truth.
• Publish Business Profile posts (updates, offers, and events) that you or our team have approved.
• Read and reply to reviews left on your Business Profile.

Every change is reviewed — by our team, or generated by our AI agent and held for approval — before it is written to your live profile. We never push unreviewed changes to a customer's Business Profile. We don't use this access to view or modify any Business Profile other than the one(s) you've explicitly connected, and we never request scopes for unrelated Google account data (Gmail, Drive, Calendar, and similar are never accessed).

You can revoke this access at any time — from your Rank Optimizer account settings, or directly from Google's third-party access settings.

We use the information above to:

• Build and maintain your Google Business Profile and directory citations.
• Run rank-tracking scans and generate your reports.
• Send review requests to your customers on your behalf, only where you’ve enabled it.
• Bill you for the services you’ve purchased, via Stripe.
• Respond to your support requests.
• Improve the service, using aggregated, non-identifying analysis.

We don't sell your personal information.

• We keep your account and business data for as long as your account is active, plus a reasonable window afterward for billing, legal, and reactivation purposes — up to 24 months after cancellation, after which it’s deleted or anonymized.
• Google Business Profile data we’ve read is kept only as long as needed to show you your own audit or report.
• You can ask us to delete your data at any time — email support@rankoptimizer.ca. We'll delete it within 30 days, except where we're required to keep records (for example, tax or billing history).

We share only what each provider needs to do its job, and each is bound by its own privacy commitments:

• Google — Business Profile API access to read and update the profile(s) you've connected, and Maps/Places data to run your rank-tracking scans.
• Stripe — payment processing and billing. Stripe holds your payment method directly; we never see your full card number.
• Auth0 — authentication. Manages your login credentials and session so you can sign in securely.
• Resend — delivers the transactional and review-request emails we send on your behalf.

• All traffic to and from Rank Optimizer is encrypted (HTTPS).
• Google OAuth tokens and other credentials are encrypted at rest.
• Access to customer data inside our team is limited to what’s needed to deliver the service.
• No system is 100% secure. If we ever learn of a breach affecting your data, we’ll notify you as required by law.

• Disconnect your Google Business Profile at any time, in-app or via Google’s own permissions page.
• Access, correct, or request deletion of your personal information — email support@rankoptimizer.ca.
• Unsubscribe from marketing email at any time; you may still receive service and billing emails tied to an active account.
• We handle personal information in line with Canada’s federal private-sector privacy law (PIPEDA), for customers in every province.

We use essential cookies to keep you signed in and remember your session. We may use privacy-respecting analytics to understand product usage in aggregate. We don't use third-party ad-tracking cookies.

Rank Optimizer is a business-to-business service for business owners and operators, and isn't directed at children. We don't knowingly collect information from anyone under 18.

We may update this policy as the service evolves. We'll post material changes here with a new “last updated” date, and where required, notify you directly.

Questions about this policy or your data: support@rankoptimizer.ca