Privacy Policy
Last updated: 21 October 2026
1. Summary
- We collect what we need to run checks and orders: the site you enter, your product facts, your email, and the order record.
- We don't sell personal data and don't use it for advertising profiles.
- Analytics cookies are used only if you click Accept.
- AI text is written by Google Gemini through Google Cloud. Google doesn't use your data to train its models.
- You can ask us for a copy of your data, or to correct or delete it, at hello@rankdime.com.
2. Who is responsible (controller)
Yosi Fridman, trading as RankDime, sole proprietor, business registration no. 304529605, 5 Max & Amparo Shein Blvd, Rehovot, Israel. Email: hello@rankdime.com.
We haven't appointed a data protection officer. The law doesn't require one for a business of our size and type. Write to the address above about any privacy matter.
3. What we collect, why, and the legal basis
| What | Why | Legal basis (EU/UK GDPR) |
|---|---|---|
| Site address you enter, and the public pages our crawler reads (homepage, robots.txt, product list or sitemap, a sample of pages). Public pages can incidentally contain names or contact details of the site owner. | To run the free check you asked for and show you the report | Performance of a contract / steps you asked for (Art. 6(1)(b)); legitimate interests in providing the free tool (6(1)(f)) |
| Product facts, links or files you send, and the text we generate | To produce your order | Contract (6(1)(b)) |
| Email address | To send your sign-in link, confirm free tools, send order confirmations and result links, and answer you | Contract (6(1)(b)) |
| Order record: tool, quantity, price, currency, time, payment status, PayPal transaction ID and payer email from PayPal, your consent to immediate delivery | To deliver, keep business and tax records, handle refunds and disputes | Contract (6(1)(b)); legal obligation (6(1)(c)), bookkeeping and tax law |
| Account data: email, monthly free-use counters, list of your orders | To let you sign in and use the free allowance | Contract (6(1)(b)) |
| Technical data: IP address (stored hashed for rate limits), browser type, time of request, server logs | Security, abuse prevention, rate limits, fault diagnosis | Legitimate interests in keeping the service secure and available (6(1)(f)) |
| Usage counts on our server: how often a tool is chosen, a payment starts or completes, a file is exported. No store address, email or order ID. | To understand which tools are used | Legitimate interests (6(1)(f)) |
| Analytics (Google Analytics 4), only after you click Accept | To measure how the site is used | Consent (6(1)(a)) and the cookie rules |
| Messages you send us | To reply | Legitimate interests (6(1)(f)), or contract when about an order |
Giving your email is necessary to order or to use tools that need confirmation. Without it we can't deliver. Everything else is optional or automatic as described. We don't make decisions with legal or similarly significant effects about you by automated means. The AI writes product text; it doesn't decide anything about you.
Please don't include other people's personal data (such as customer names or emails) in product facts or files.
4. AI processing
- Product text is written by Google Gemini on Google Cloud Vertex AI, using the EU processing location. We send it the product facts and page text needed for your order, not your email.
- For the Gemini visibility report, shopping questions about your niche (without your store name or personal data) are sent to Gemini with Grounding with Google Search on Google's global endpoint, so they may be processed outside the EU. Google keeps grounding query logs for up to 3 days for debugging.
- Under Google Cloud's terms, Google does not use this data to train or fine-tune its models. We don't train models on your data either.
5. Who receives data (processors and other recipients)
| Recipient | Role | What | Where |
|---|---|---|---|
| Google Cloud (Cloud Run, Firestore, Cloud Logging) | Processor (hosting, database, logs) | All service data | Belgium (europe-west1) |
| Google Cloud Vertex AI (Gemini) | Processor (AI text) | Prompts as in §4 | EU for writing; global for the Gemini report |
| Brevo (Sendinblue SAS, France) | Processor (sending email) | Email address, message content | EU |
| Google Analytics 4 (Google Ireland / Google LLC) | Processor, only with your consent | Pages viewed, time, approximate location from IP, browser and device type | EU and US |
| PayPal | Independent controller for the payment | The payment details PayPal requires; PayPal sends us the transaction ID, amount, status and payer email | PayPal's own privacy statement applies |
| Authorities, advisers | Only when required by law, or to establish or defend legal claims | As required | — |
We don't sell personal data and don't share it for cross-context behavioural advertising.
6. International transfers
- The controller is in Israel. The European Commission has recognised Israel as providing an adequate level of data protection, and the UK recognises it too. Data can therefore be sent to us from the EU, EEA and UK without extra safeguards.
- Where a provider processes data in the United States (for example Google Analytics), the transfer relies on the EU-US Data Privacy Framework (and the UK Extension) for certified providers, and on the provider's Standard Contractual Clauses (with the UK Addendum).
7. How long we keep data
| Data | Period |
|---|---|
| Free check reports | Up to 30 days |
| Gemini report snapshot (per domain, without the full answer text) | Up to 7 days |
| Rate-limit counters (hashed IP, email, domain) | Expire automatically within about an hour to a month, depending on the counter |
| One-time sign-in links | 30 minutes, single use |
| Account (email, free-use counters) | While you use the service. Deleted on request, except data we must keep for orders. |
| Orders, payment records and the delivered text | 7 years from the order, as required for business and tax records. On request we can delete the generated product text earlier and keep only the minimum invoice record. |
| Messages you send us | Up to 1 year after the conversation ends, longer only if linked to an order or a claim |
| Server logs | About 30 days |
| Emails sent through Brevo | Brevo's delivery logs, per Brevo's retention |
8. Cookies and similar technologies
Necessary (no consent needed):
| Name | Purpose | Duration |
|---|---|---|
| `sc_acct` | Keeps you signed in after you use a sign-in link (HttpOnly) | 30 days |
| `sc_order` | Connects your return from PayPal to your order | 3 days |
| `sc_orders` | Lets "Your orders" on this device show your recent order links | 12 months |
| `sc_lang` | Remembers a language choice | 30 days |
| `localStorage: rankdime_analytics_consent` | Remembers your cookie choice | Until you clear site data |
Analytics (only if you click Accept): Google Analytics 4 sets `_ga` and `_ga_<ID>` cookies, with a random ID, to recognise returning visits from the same browser, for up to 13 months. Before you choose, and if you click Reject, Google Analytics is not loaded and no analytics cookies are set. Ad storage, ad personalisation and Google Signals are always off. Store addresses, emails and names you type are not sent to Google Analytics. Order and report links are shortened before measurement.
You can change your choice at any time under Cookie settings in the footer. Rejecting deletes the analytics cookies.
Fonts are served from our own server, not from Google Fonts.
9. Your rights
Depending on where you live (including the EU, EEA, UK and Israel), you can:
- access your data and get a copy;
- correct inaccurate data;
- delete data we don't have to keep;
- restrict processing, or object to processing based on legitimate interests;
- receive data you gave us in a portable format (portability);
- withdraw consent (for analytics) at any time, without affecting earlier processing.
Write to hello@rankdime.com from the email linked to your orders, or tell us how to verify you. We reply within one month (extendable by two months for complex requests, and we'll tell you if so). It's free.
You can also complain to a data protection authority: in the EU or EEA, the authority where you live or work; in the UK, the ICO (ico.org.uk); in Israel, the Privacy Protection Authority. We'd appreciate the chance to fix things first.
10. Security
We use encrypted connections (HTTPS), single-use, time-limited sign-in links stored only as hashes, HttpOnly cookies, hashed IP addresses for rate limits, and access controls on our cloud project. No system is perfectly secure. If a breach affects you in a way the law requires us to report, we'll tell you and the authorities.
11. Children
RankDime is for people aged 18 or over running a business. We don't knowingly collect data from children. If you believe a child has given us data, write to us and we'll delete it.
12. United States residents
We don't sell personal information or share it for cross-context behavioural advertising, and we don't use sensitive personal information. The categories we collect are listed in §3, and the periods in §7. You can ask for access or deletion at hello@rankdime.com, and we won't treat you differently for asking.
13. Changes
We'll post any update here with a new date. If a change is significant, we'll put a notice on the site or email active customers.