Legal

Privacy Policy

How Suparank handles your data.

This is a template that reflects how Suparank operates. Have it reviewed by your own legal counsel before relying on it.

This policy describes how Suparank ("Suparank," "we," "us") collects, uses, and protects information when you use our website and our chat-first AI SEO/GEO product (the "Service"). It applies to visitors to suparank.io and to account holders using the Suparank app.

Last updated: 2 July 2026.

Information we collect

We collect the following categories of information:

Account information. When you sign in with Google, we receive your name, email address, and profile photo from Google OAuth via Supabase Auth. We do not collect or store your Google password.

Workspace and project data. The workspaces, projects, and domains or URLs you add for auditing and visibility tracking.

Chat content and generated artifacts. The messages you send in the Suparank chat, and the reports, content plans, and other artifacts generated from those conversations.

Connected analytics data. If you connect Google Analytics 4, Google Search Console, or Bing Webmaster Tools, we access the analytics, search performance, and indexing data those accounts expose via their respective APIs, so we can ground our answers in your real traffic and search data.

Usage and billing metadata. Information about how you use the Service (features used, tool calls, usage against your plan's cost allowance) and billing details such as your plan, subscription status, and invoice history. Full payment card details are handled by our payment processor, Polar, and are not stored on our servers.

Cookies and session data. Minimal cookies needed to keep you signed in and maintain your session. We do not use cookies for third-party advertising.

How we use information

We use this information to provide the Service: to run audits against the domains and URLs you add, to generate answers and artifacts in chat, to check how AI assistants describe or cite your brand, to connect and display your GA4, Search Console, and Bing Webmaster data, to process billing through Polar, to send account and service emails, and to keep the Service secure and working as intended. We also use aggregated, non-identifying usage data to improve the product.

How AI processing works

When you use chat or run an audit, the relevant prompts and data are sent to underlying AI model providers through OpenRouter, which routes requests to providers such as OpenAI, Anthropic, and Google. Where a provider offers a setting to exclude your data from being used to train their models, we use that setting. We also use Google's gemini-embedding-001 model to generate embeddings that power search and retrieval inside your workspace.

Sub-processors

We do not sell your personal data. We share information with the following service providers, each engaged to perform a specific function of the Service:

  • Supabase - database (Postgres), authentication, and file storage infrastructure, with row-level security enforcing that each workspace can only see its own data.
  • Google - sign-in (OAuth), and, where you connect them, GA4 and Search Console data; also provides the embedding model used for search.
  • OpenRouter and underlying LLM providers (including OpenAI, Anthropic, Google, and Perplexity) - process chat prompts and generate AI responses and artifacts.
  • Polar - our payment processor and merchant of record; handles checkout, subscription billing, and payment card data.
  • Cloudflare - object storage (R2) for files and generated assets, and network/security services.
  • Resend - delivery of transactional and account emails.
  • DataForSEO - keyword and backlink data used in audits and chat answers.
  • Microsoft - where you connect Bing Webmaster Tools, provides the search performance data for that connection.
  • Hetzner, via Coolify - hosts the servers the Service runs on.

Data retention

We keep account, workspace, chat, and connected analytics data for as long as your account is active, so the Service can continue to work and so you can refer back to past audits and conversations. If you delete a workspace or close your account, we delete or anonymize the associated data within a reasonable period, except where we need to retain records for legal, tax, or billing purposes.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to object to certain processing. You can export or delete most of your data directly from your workspace settings. For anything you can't do yourself, or to close your account entirely, contact us at [email protected] and we'll handle the request.

International transfers

Our infrastructure and sub-processors operate in multiple countries, so your information may be processed outside the country you live in. Where that happens, we rely on our sub-processors' own safeguards and contractual protections for cross-border transfers.

Cookies

Suparank uses a small number of cookies to keep you signed in and to maintain your session. We do not use tracking cookies for advertising purposes.

Children's privacy

The Service is intended for business use and is not directed to, and should not be used by, anyone under 16 years old. We do not knowingly collect information from anyone below that age.

Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the date at the top of this page and, where appropriate, notify you directly.

Contact

If you have questions about this policy or your data, email us at [email protected] or reach out through our contact page.