سياسة الخصوصية

1. Who We Are

The RankCaster AI website and platform (the "Service") are operated by Digital Team of Terekh, Sderot Yeelim 72, Beer Sheva, Israel ("we", "us", "our"). We are the controller of the personal data described in this policy, except where Section 8 says we act on behalf of our customers. Questions and requests: [email protected].

2. Information We Collect

• Account information: name, email address, password (stored hashed), profile picture, organization and team membership. If you sign in with Google, Microsoft or GitHub, we receive your name, email and profile picture from that provider.
• Billing information: plan, subscription status, billing country and address, and payment history. Card details are collected and stored by Stripe, not by us.
• Customer content: brand and product information, competitors, websites, prompts, personas, files you upload (for example, PDF or DOCX documents), content you create, and settings.
• Integration data: access tokens and basic profile data for third-party services you connect (for example, Wix, Dev.to, Reddit, LinkedIn or your CRM).
• Website forms: information you submit on our website, such as your email and website URL for a free audit, your name and email for webinars and newsletters, questions submitted to our expert Q&A, and messages sent through contact forms.
• Support communications: messages and attachments you send to us by email or through the in-app support chat.
• Technical data: IP address, browser and device information, session records, pages visited, referral and campaign parameters, and service logs.
• Cookies and similar technologies: see Section 11.

3. How We Use Information

• To provide the Service (performance of our contract with you): creating accounts, running audits and monitoring, generating reports and content, processing payments, and providing support.
• To secure and improve the Service (legitimate interests): preventing fraud and abuse, rate limiting, debugging, measuring usage, and developing new features. We may use aggregated, de-identified data (for example, which sources AI engines cite) to improve our models and benchmarks.
• To communicate with you: service and billing notices (contract), and marketing emails such as newsletters (your consent, which you can withdraw at any time using the unsubscribe link).
• To follow up on free audits and enquiries (legitimate interests): we may add your email to our CRM and supplement it with publicly available information about your company, such as company name, logo and public company profile pages, so we can respond relevantly. You can object at any time.
• To comply with law (legal obligation): tax, accounting and responding to lawful requests.

4. AI Processing

To deliver the Service, we send relevant customer content (for example, brand descriptions, prompts and extracts from uploaded documents) to the AI model and data providers listed in Section 6. Monitoring works by sending prompts to third-party AI assistants and answer engines and analysing their answers. We do not sell customer content. We do not make decisions that produce legal or similarly significant effects about individuals solely through automated processing.

5. Public Content

Some features make information publicly accessible. Report share links are off by default; you can enable and disable them at any time. Visibility certificates are issued to eligible paid projects when they reach a qualifying result and can be verified by anyone with the certificate link; they show the project's brand and results unless NDA mode is enabled, which replaces the brand name with "Confidential Project". Certificates remain verifiable after the underlying project is deleted; to have a certificate removed, contact us.

6. Service Providers and Sharing

We do not sell your personal information. We share it only with service providers that process it on our behalf under contract, and as described below:

• Hosting and infrastructure: Amazon Web Services (EU and US regions), Cloudflare (DNS and file storage), Upstash (caching and rate limiting), Flagsmith (feature flags), Sanity (website content)
• Payments: Stripe
• AI models and document processing: Amazon Bedrock (Anthropic Claude), OpenAI and Microsoft Azure OpenAI, Google (Gemini, Vertex AI, Document AI), Perplexity, DeepSeek
• Search, web and keyword data: providers such as DataForSEO, Brave Search, Serper, Tavily, Jina, Exa, Firecrawl, Apify, Browserbase and Yandex. These receive queries, prompts and public website URLs, not your account details.
• Email and communications: Google Workspace (transactional email), Amazon SES and Resend (newsletters and event emails), Plain (in-app support chat), Atlassian Jira (support tickets), Tally (website forms)
• CRM and analytics: HubSpot (leads and customer relationships), Google Analytics and Google Tag Manager
• Integrations you connect: we send content to the third-party platforms you authorize (for example, publishing a post to your Wix site or LinkedIn page)
• Legal and business transfers: when required by law or to protect rights, and to a successor in a merger, acquisition or asset sale

7. International Transfers

We are based in Israel, which the European Commission recognizes as providing adequate protection for personal data. Our primary database is hosted in the EU (Frankfurt), and some processing takes place in the United States and other countries where our providers operate. DeepSeek, available on certain plans, processes monitoring prompts in China; those prompts concern your brand and market and do not include your account details. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

8. Data We Process on Behalf of Customers

When a customer installs our AI traffic script on their website or uses our MCP tools to capture leads, we process data about that customer's visitors or leads on the customer's behalf, and the customer is the controller. The AI traffic script does not set cookies and does not store raw IP addresses. It records the referring site and URL, the landing page and title, campaign parameters, approximate country, whether the visit came from a mobile app, and a pseudonymous visitor identifier computed as a salted one-way hash of IP address and browser information. Visitors should contact the website owner to exercise their rights; we will assist our customers in responding. We also use this script on our own website to understand traffic from AI assistants.

9. Data Retention

• Account and customer content: kept while your account is active. When you delete your account in settings, we delete it from our production systems; encrypted backups are overwritten within 30 days. Issued certificates are kept until you ask us to remove them (see Section 5).
• Billing records: kept as long as required by tax and accounting law.
• Leads and marketing contacts: kept until you unsubscribe or ask us to delete them.
• AI traffic data: kept while the customer's account is active or until the customer asks us to delete it.
• Logs and security records: kept for as long as needed for security and troubleshooting.

10. Security

We use technical and organizational measures to protect personal data, including encryption in transit (TLS), encrypted backups, hashed passwords, role-based access controls and keeping secrets in a managed secrets store. No system is completely secure, and we will notify you and the relevant authorities of a personal data breach where required by law.

11. Cookies and Similar Technologies

• Essential: sign-in session cookies for the platform, and referral and promotion code cookies (up to 30 days) that let us apply offers and partner attribution.
• Preferences: interface settings such as sidebar state, selected project and your cookie choice (stored in cookies or browser local storage).
• Analytics: Google Analytics cookies, which are stored only after you accept them in our cookie banner.
• Third-party embeds: the support chat (Plain) in the platform and forms (Tally) on our website may set their own cookies when loaded.

You can change your analytics choice through the cookie banner and block or delete cookies in your browser settings; blocking essential cookies will prevent you from signing in.

12. Your Rights

Depending on where you live (including under the GDPR and the Israeli Privacy Protection Law), you may have the right to access, correct, delete or port your personal data, to restrict or object to its processing, and to withdraw consent at any time. You can delete your account yourself in account settings; for other requests, email [email protected]. We will respond within the time required by law. You may also complain to your local data protection authority or to the Israeli Privacy Protection Authority.

13. Children

The Service is intended for businesses and is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

14. Changes to This Policy

We may update this policy from time to time. We will post the new version on this page with an updated date and, for material changes, notify account holders by email or in the Service.

15. Contact

Digital Team of Terekh (RankCaster AI)
Sderot Yeelim 72, Beer Sheva, Israel
Email: [email protected]