Privacy Policy

Account information: when you sign up, we collect your email address and authentication details. If you sign in with Google, we receive basic profile information from Google (such as your name and email) to create your account.

Usage information: we collect the URLs and text you submit for audits, reports, and content generation, the outputs produced, your chat messages with the assistant, and basic activity and diagnostic data needed to run and improve the Service.

Payment information: purchases are processed by Stripe. We do not store your full card details; Stripe handles payment data and shares limited information with us (such as your plan and payment status).

We use information to provide and operate the Service (including running audits, generating content, and maintaining your chat history and plan), to process payments, to secure and improve the Service and prevent abuse, to communicate with you about your account, and to comply with legal obligations.

If you are in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases: (a) performance of a contract — to provide the Service you request and manage your account and billing; (b) legitimate interests — to secure, maintain, and improve the Service, prevent abuse, and communicate about your account, balanced against your rights; (c) consent — where we ask for it (for example, certain optional communications), which you may withdraw at any time; and (d) legal obligation — to comply with applicable law. Where we rely on legitimate interests, you may object as described in "Your rights and choices" below.

To generate audits, reports, and content, we send the URLs and related content you submit — along with our prompts — to our AI provider, OpenAI, which processes them to produce output that is returned to you. Do not submit information you are not permitted to share or that you consider confidential and do not want processed by a third-party AI provider.

We share information with service providers who process it on our behalf, including: OpenAI (AI generation and search), Stripe (payments), Supabase (authentication and database), and Vercel (hosting and delivery). These providers are permitted to use the information only to provide services to us. We do not sell your personal information and we do not share it for cross-context behavioral advertising. We may disclose information if required by law or valid legal process, or to protect our rights, users, or the Service, and in connection with a business transfer such as a merger or acquisition.

We use cookies and similar technologies that are necessary to keep you signed in, remember preferences, and operate the Service securely. You can control cookies through your browser, but disabling them may affect functionality such as staying logged in. We do not use cookies for third-party advertising.

We retain information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or de-identify it. You may request deletion of your account and associated data as described below.

We use reasonable technical and organizational measures to protect information, including encryption in transit, encryption at rest at our infrastructure providers, row-level access controls, and server-side authentication. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on where you live, you may have rights to: access the personal information we hold about you; correct inaccurate information; delete your information; export/receive a copy in a portable format; object to or restrict certain processing; and, where we rely on consent, withdraw it at any time (without affecting prior processing). To exercise any of these, contact us at hello@hirank.ai; we will respond as required by applicable law and will not discriminate against you for exercising your rights.

If you are in the EEA or UK, you also have the right to lodge a complaint with your local data-protection supervisory authority. If you are a California resident, you have rights under the CCPA/CPRA, including to know, delete, and correct personal information and to not be sold or "shared" (as defined by that law) — which we do not do.

For information about your own HiRank account, HiRank acts as the data controller. When a reseller/agency user uses the Service to scan, generate content for, or publish a page about a third-party business, that reseller is responsible for having a lawful basis and any required permissions for that business's information; as between the reseller and HiRank, the reseller acts as controller for such information and HiRank acts as a processor handling it on the reseller's behalf. Resellers subject to the GDPR or similar laws are responsible for their own compliance with respect to their clients' data. If you require a data processing agreement (DPA), contact us at hello@hirank.ai.

The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

We and our service providers may process and store information in countries other than yours, including the United States. Where personal data is transferred out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum) or an adequacy decision, as applicable.

We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you, such as posting the updated Policy with a new date. Your continued use after changes take effect means you accept the updated Policy.

Questions or requests about this Policy or your data? Contact us — the data controller for your account information — at hello@hirank.ai.