1. Who we are
Ranker ai ("Ranker AI", "we", "us") provides the Ranker AI service described at this website. We act as the data controller for personal data we process about users of the Service, except where Paddle.com acts as controller for payment data (see "Sharing your data" below).
2. Data we collect
- Account data — name, email address, password hash, profile preferences.
- Content data — prompts, drafts, projects and other material you submit to the Service.
- Usage and telemetry — pages viewed, features used, generation counts, error logs.
- Device and connection data — IP address, browser type, operating system, approximate location derived from IP.
- Support communications — messages you send us through support forms or email.
- Cookies and similar technologies — used to keep you signed in and to operate the Service. We do not use third-party advertising cookies.
3. How we use your data
- create and operate your account and provide the Service (legal basis: contract);
- process AI generations you request, including sending prompts to model providers (legal basis: contract);
- secure the Service and prevent fraud or abuse (legal basis: legitimate interests);
- communicate with you about service issues, changes and support (legal basis: contract / legitimate interests);
- improve the Service through aggregated analytics (legal basis: legitimate interests);
- comply with legal obligations such as tax, accounting and responding to lawful requests (legal basis: legal obligation).
4. Sharing your data
We share personal data only with:
- Service providers / subprocessors who help us run the Service, including hosting, database, email delivery, error monitoring and AI model providers. They process data on our instructions under written contracts.
- Paddle.com, our Merchant of Record, for the sale of subscriptions, payment processing, billing, tax compliance and invoicing. Paddle is an independent controller for payment information collected through its checkout. See the Paddle Privacy Notice.
- Professional advisers such as legal, accounting and audit firms, where required.
- Authorities when we are legally required to disclose data, or to protect rights, property or safety.
- Successors in connection with a merger, acquisition or restructuring, subject to confidentiality.
We do not sell your personal data.
5. International transfers
Your data may be processed in countries other than your own. Where required, we use appropriate safeguards such as Standard Contractual Clauses or rely on adequacy decisions.
6. Retention
We keep personal data only as long as needed for the purposes described above. Account and content data is retained for the life of your account and for a reasonable period afterwards to handle disputes, comply with law and recover from backups; we then delete or anonymise it. Logs and telemetry are kept for shorter periods consistent with operational needs.
7. Your rights
Subject to your local law, you have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent at any time. EEA/UK users also have the right to lodge a complaint with their local data protection authority. We respond to verifiable requests within the timeframe required by law (one month under GDPR).
8. Security
We use appropriate technical and organisational measures, including encryption in transit, access controls and least-privilege practices, to protect personal data. No system is completely secure; please contact us promptly if you believe your account has been compromised.
9. Changes
We may update this Privacy Notice from time to time. Material changes will be announced in the Service or by email. Continued use of the Service after changes means you accept the updated notice.
10. Contact
For privacy questions or to exercise your rights, contact us via the support page linked in the app footer.