Privacy Policy

When you request access or a demo, we collect:

• Name, email address, and phone number
• Your website URL and CMS platform
• Company profile and stated goals you provide in the form

When you create a RankMesh account and use the platform, we also collect the account data you provide directly (display name, email, password or Google sign-in identifier, phone number, persona) and usage data generated as you work in the product (projects, audits, keywords, content, and support conversations).

Where you choose to connect a third-party source — your website, a GitHub repository, or a Google product such as Google Analytics, Google Search Console, Google Business Profile, or Blogger — we process data from that source solely to perform the SEO/GEO services you request. See Google API data and data protection below for the specifics of what we access, why, and how it’s protected.

Like most websites, we automatically collect standard analytics data (pages visited, device/browser type, approximate location) via Google Analytics to understand site usage.

When a user connects a Google account or Google service to RankMesh, RankMesh accesses Google user data only after the user has granted the applicable permissions through Google’s OAuth consent process.

Depending on the Google services a user chooses to connect, RankMesh may access data associated with services such as Google Analytics, Google Search Console, Google Business Profile, and Blogger. We access this information only to provide the RankMesh features requested by the user, including analytics and performance reporting, search visibility monitoring, business profile management, content management, and related digital-presence services. Specifically:

• Sign in with Google (scopes: openid, email, profile) — your Google account’s name, email address, and profile photo, used only to create and authenticate your RankMesh account.
• Google Analytics (GA4) (scope: analytics.readonly) — read-only access to the GA4 property you connect, so we can pull traffic, engagement, and conversion metrics into your RankMesh dashboards, reports, and AI-generated insights.
• Google Search Console (scope: webmasters.readonly) — read-only access to the search performance data (queries, clicks, impressions, indexing status) for the property you connect, used to monitor and report on your search visibility.
• Google Business Profile (scope: business.manage) — read and, where you explicitly request it, publish access to the business locations you manage, used to surface local SEO insights and to publish posts/updates on your behalf as part of that feature.
• Blogger (scope: blogger) — used only when you choose to publish AI-drafted content directly to a Blogger site you own.

How we protect Google user data

We use reasonable administrative, technical, and organizational safeguards designed to protect Google user data against unauthorized access, disclosure, alteration, loss, or misuse. These safeguards include secure HTTPS/TLS connections for data transmitted between users, RankMesh, and Google APIs; access controls that restrict production data and credentials to authorized systems and personnel; secure storage and handling of OAuth access and refresh tokens (encrypted at rest, scoped to your account and project, and never exposed to other RankMesh customers); and monitoring and operational controls intended to detect or prevent unauthorized access.

Where Google user data or authentication credentials are stored, access is limited according to the principle of least privilege and is used only where necessary to operate the RankMesh services authorized by the user.

Use and sharing of Google user data

RankMesh uses Google user data only to provide or improve user-facing functionality that the user has requested and authorized.

We do not sell Google user data. We do not transfer Google user data to advertising platforms or data brokers, and we do not use Google user data for personalized advertising, retargeting, creditworthiness, or lending purposes. We do not use Google user data to train generalized or non-personalized AI or machine-learning models.

Where service providers process data on our behalf to operate RankMesh — for example, hosting and the AI processing that generates your insights — such processing is limited to providing the RankMesh functionality requested by the user and is subject to appropriate confidentiality and data-protection obligations.

Retention, revocation, and deletion

Google user data and OAuth credentials are retained only for as long as reasonably necessary to provide the connected RankMesh service, comply with applicable legal obligations, or maintain the user’s active integration.

Users may disconnect a Google integration through RankMesh or revoke RankMesh’s access through their Google Account permissions. When an integration is disconnected, RankMesh stops requesting new data from that Google service and removes or invalidates associated authorization credentials in accordance with our retention practices.

Users may also request deletion of their account or connected-source data by contacting RankMesh using the contact information in Contact us.

Google API Services User Data Policy

RankMesh’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• To respond to access requests and provide demos
• To deliver and improve the RankMesh platform and its AI agents
• To send product, billing, and support communications
• To meet legal and security obligations

We do not sell your personal information. We share data only with service providers who help us operate the platform (e.g. hosting, analytics, email delivery, and the AI processing that powers RankMesh agents), under confidentiality obligations, or when required by law. This includes any Google user data you’ve connected, as described above.

We treat the following as sensitive data and apply specific protections to each:

• Account passwords. Never stored in plain text. We store a salted, one-way PBKDF2-SHA256 hash of your password; we cannot see, recover, or reverse it, even internally.
• Google OAuth tokens and Google user data. Access and refresh tokens are encrypted at rest with a dedicated symmetric encryption key, stored separately from the rest of your account data, and decrypted only in memory, in-process, when we call a Google API on your behalf. See Google API data and data protection for the full detail on how we protect, use, and share Google user data specifically.
• Payment and billing details. Card and payment information is entered directly into our payment processor’s hosted checkout and handled by them, not our servers — RankMesh never sees or stores your full card number.

More broadly, we use industry-standard transport encryption (HTTPS/TLS) for all data in transit, restrict internal access to connected-account and Google user data to what’s needed to operate and support the platform, and log access to sensitive data stores for audit purposes. If a breach affecting your personal data or Google user data occurs, we will notify affected users and any relevant authorities as required by applicable law. No method of storage or transmission is 100% secure, but we continuously work to protect your data.

We retain account and connected-source data, including Google user data and OAuth tokens, for as long as your account is active or the integration stays connected. If you disconnect a Google integration or delete your account, we delete the associated tokens and cached Google data within 30 days, except where we must retain limited records to meet legal, tax, or security obligations. We retain access-request data for a reasonable period to follow up, unless you ask us to delete it sooner.

Depending on your location (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data, or to object to certain processing. This includes any Google user data we hold about you. To exercise these rights, contact us using the details below.

We use cookies and similar technologies for essential site functionality and analytics (Google Analytics). You can control cookies through your browser settings.

We may update this Privacy Policy from time to time. If we make a material change — including any change to how we access, use, store, or share Google user data — we’ll update the “Last updated” date above and, for material changes, notify active users by email and/or an in-product notice before the change takes effect.

For privacy questions or data requests, email hello@rankmesh.ai or call +91 80765 80694.