RankGenius Data Handling Agreement

RANKGENIUS - DATA HANDLING AGREEMENT

Last updated: 2026-08-13

1. Introduction

   RankGenius is dedicated to the secure and responsible handling of data entrusted to us by our users. This Data Handling Agreement outlines our commitment to ensuring the confidentiality, integrity, and lawful processing of data in compliance with applicable laws and regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Scope

   This agreement applies to all individuals and entities affiliated with RankGenius, including employees, contractors, consultants, partners, and third parties who handle data on our behalf. It encompasses the personal and account data of our users and the data our Service returns to them.

3. What Data We Handle

   RankGenius handles two broad categories of data:

   • Account and usage data. Information you provide or that is generated when you use the Service — your name and email address, an encrypted (hashed) password, your account’s API key, records of your API and MCP requests for metering and billing, your Watch configurations and the time-series results they produce, and billing records such as credit purchases and balances.
   • Marketplace data. Publicly available Amazon marketplace information — such as search results, Buy Box status, product page details, and product reviews — that the Service retrieves on your request, in some cases by means of third-party data services. This is public listing data; the Service does not require, request, or use your Amazon seller login credentials, and does not access private seller-account information.

   Payment information. Payment card details are collected and processed by our third-party payment processor (a PCI-DSS compliant provider). We do not store full card numbers on our servers; we retain only limited, non-sensitive references (such as a card brand, last four digits, and a processor token) needed to manage billing.

4. How We Use Data

   Account and usage data is used solely to operate, secure, meter, and bill the Service, to provide support, and to communicate with you about your account. We never sell your data, and we do not use it for any purpose other than providing and improving the Service. Marketplace data is returned to you for your own use and is retrieved only in response to your requests or your scheduled Watches.

5. Data Storage and Security

   Data is stored securely in Amazon Web Services (AWS) data centers, using encryption in transit and access controls. We implement reasonable technical and organizational measures to safeguard data against unauthorized access, and we limit access to the minimum personnel necessary to operate the Service. Access to production systems requires strong authentication.

6. Data Retention and Disposal

   We retain account and billing data for as long as your account is active and as needed to comply with our legal, accounting, and reporting obligations. Watch results are retained according to the retention period configured on each Watch (90 days by default) and older results are automatically removed. Cached marketplace responses are transient and expire automatically. When you delete your account, we delete or anonymize associated personal data within a reasonable period, except where retention is required by law.

7. Data Sharing

   We share data with a limited set of service providers strictly to operate the Service — for example, our cloud hosting provider, our payment processor, our email delivery provider, and the third-party data services used to retrieve marketplace data. These providers are bound by appropriate agreements to maintain confidentiality and security. We may also disclose data where required by law or to protect our rights, users, or the public.

8. Incident Response and Breach Notification

   We maintain procedures to detect, assess, and respond to security incidents and data breaches. In the event of a breach affecting your personal data, we will notify affected parties in accordance with applicable legal requirements and our internal procedures.

9. Your Rights

   Depending on your jurisdiction, you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to or restrict certain processing. You can update much of your information directly in your account, and you may exercise your rights by contacting us through our contact form. We handle such requests promptly and in accordance with applicable laws.

10. Contact

    For inquiries or concerns regarding this Data Handling Agreement, please reach us through our contact form.