Privacy policy
Last updated: 1 November 2026
This is a first draft. A full legal review will take place before launch, and this page will be updated if anything changes.
This policy explains how RankWitty ("we") handles personal data when you visit the site, contact us or use the service. We serve businesses in the USA, the UK, Canada and Europe, and we apply the same standard to everyone.
What we collect
- Account data: your name, email address, password (stored only as a secure hash by our sign-in system) and, for admins, a two-step verification factor.
- Business details: what you tell us about your business so we can write about it, such as name, website, location, services, tone of voice, audience, competitors, logo and images.
- Orders and content: keywords, articles, your own submitted articles, review comments, and the status and history of each order.
- Payment records: amounts, dates, method and the payment provider's reference. Crypto payments are handled by Cryptomus; we do not receive your wallet's private keys. For bank transfers we keep the details needed to match and confirm your payment.
- Messages: what you send through the contact form or support, including your name, email address and message. We store a one-way hash of your IP address with contact messages to deal with abuse, not the address itself.
- Technical data: server logs and error reports needed to keep the service secure and working. Logs are written with passwords, tokens and keys removed.
Why we use it
- To provide the service you ordered: writing, editing, publishing, indexing and tracking articles (contract).
- To take and confirm payments and keep financial records (contract and legal obligation).
- To answer your messages and support requests (legitimate interest, or steps before a contract).
- To keep the service secure, prevent abuse and fix problems (legitimate interest).
We do not sell personal data and we do not use it for advertising.
Who processes it for us
We use these service providers, only for the purposes above:
- Hosting: our own server and self-hosted database, where your account and order data is stored.
- Cryptomus: crypto payments.
- Resend: sending service emails.
- Telegram: internal notifications to our team about orders and payments.
- Anthropic: drafting articles from your business details and keywords, before human editing.
- DataForSEO: keyword research and Google position checks (keywords and published URLs only).
- Sentry: error reports, with secrets removed.
- Plausible: privacy-friendly visit statistics without cookies, if enabled.
Articles are published publicly on LinkedIn company pages. Anything in a published article, including your business name in the Sponsored line, is public once it goes live.
International transfers
Some providers process data outside your country. Where the law requires it, we rely on safeguards such as standard contractual clauses.
How long we keep it
- Account, brand and order data: while your account is open, then deleted or anonymised, except as below.
- Payment and invoice records: as long as tax and accounting law requires.
- Contact messages: as long as needed to deal with them, then deleted.
- Logs: kept for a short period for security, then deleted.
Your rights
You can download your data or request deletion yourself, from the Your data section of your account page. Depending on where you live, you can also ask to access, correct, delete or export your personal data, object to or restrict how we use it, and withdraw consent where we rely on it. Residents of the UK and EU can also complain to their data protection authority. California residents have the right to know, delete and correct, and not to be discriminated against for using these rights; we do not sell or share personal data for advertising.
To use any of these rights, contact us. We may need to confirm your identity first.
Security
Data is sent over encrypted connections. Access to customer data is limited by role, every customer can see only their own data, admin accounts require two-step verification, and uploaded files are stored privately.
Cookies
We use only the cookies needed to keep you signed in. See the cookie policy.
Changes
We will update this page if anything changes and show the date at the top.
