This policy explains what Rank & Report collects, why, how it's protected, and how to get it deleted. Rank & Report is run by Iron Oak Outdoors, LLC, a Florida limited liability company ("we"). Questions go to support@rankandreport.com.
Who uses Rank & Report
Rank & Report is a reporting tool for marketing agencies. An agency signs up, invites its team, adds its clients, and connects the accounts it already manages for those clients. The agency decides what to connect and who on its team can see it.
What we collect
- Your account: your name, email address, the agency's name, and your role on the team.
- Your clients: each client's business name, website, and office names and cities.
- Connected accounts: which Google accounts, properties, sites, ad accounts and Business Profile locations you picked for each client, and the access Google granted.
- Figures: totals and counts read from those accounts. For example: visits, clicks, impressions, ad spend, leads, keyword positions, and review counts and ratings. We also keep short top lists, such as search terms, page addresses and campaign names, with any email addresses, phone numbers and street addresses removed.
- Checks we run ourselves: for each client's website and offices, we read public information: whether the site is up, its security certificate and email protection settings, its mobile speed, its keyword and Google Maps positions, and mentions in AI search answers.
- Billing: handled by Stripe. We see the plan, the number of locations billed and whether it's paid. Card and bank details go straight to Stripe. We never see or store full card or account numbers.
- Messages you send us: your name, email address, agency name if you give it, and your message, when you use the contact form or email us. They go to our inbox so we can reply. The form keeps no copy.
- Sign-in cookies: a cookie that keeps you signed in. We use no advertising or tracking cookies.
What we don't collect
- No call recordings, caller names or caller phone numbers. Calls are reduced to counts.
- No reviewer names and no review text. Reviews are reduced to counts, ratings and whether they've been answered.
- No patient or health information. Rank & Report isn't built to hold it. Please don't enter any.
- No passwords for other services. Google connects through Google's own sign-in screen.
Google user data
When you connect Google, you choose which of these Rank & Report may use:
We use Google user data only to provide the features you see in Rank & Report: the figures, flags, monthly reports and monthly reviews. We don't sell it. We don't use it for advertising. We don't use it to train AI models, and we don't let anyone else do so. People at Rank & Report don't read it, except with your permission, for security, or when the law requires it.
The monthly review and AI. To draft each client's monthly review, we send that client's figures for the month, which can include figures from Google Analytics, Search Console and Google Ads, to Anthropic's Claude API. Nothing else is sent: no names or emails of your team, and no access tokens. Anthropic uses it only to return the draft to us, under terms that say it may not train its models on it. We then check every number in the draft against the figures before anyone sees it.
Rank & Report's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect Google at any time from the Connections page. That also asks Google to revoke our access. You can also remove access from your Google account settings.
How we use it
- To show your clients' figures, flags and reports to your team.
- To make the monthly reports you send to your clients.
- To write the monthly review, as described above.
- To run your account, send sign-in links and service emails (for example, when the month's reports are ready), and bill you.
- To keep the service secure and working.
Who we share it with
Only the service providers we need to run Rank & Report. Each one only gets what it needs:
- Cloudflare: hosting, the database, and turning reports into PDFs.
- Stripe: billing and payments.
- Anthropic: drafting the monthly review, as described above.
- DataForSEO: keyword and Google Maps rankings, site audits, backlink figures and AI search mentions. We send website addresses, keywords, business names and office locations, never Google user data.
- Google: mobile speed checks (PageSpeed Insights and the Chrome UX Report). We send the website address.
- Public records lookups: certificate and email-protection checks read public records for the website's domain.
- Our email provider: sign-in links, service emails, and messages sent through the contact form.
Your agency's team members see what your agency connects. Your clients see the reports you choose to send them. We don't share data between agencies, and we don't sell personal information.
How we protect it
- Everything travels over encrypted connections.
- Access tokens and API keys are encrypted before they're stored.
- Each agency's data is kept separate, and only that agency's team can see it.
- Paid data calls are capped, so a fault can't run up costs.
How long we keep it
- We keep figures, reports and reviews while your account is open, so you can compare months.
- Data from Google is kept no longer than Google's terms allow for that service.
- When you disconnect an account, we stop reading it and delete its access token straight away.
- If a free trial ends without a subscription, or a subscription ends, the account becomes read-only. We keep its data for 90 days so you can come back or export it, emailing the owner 30 days and 7 days before, then delete it.
- When you ask us to close your account, we delete your data within 30 days, and from backups within the following 30 days. We keep billing records as long as tax law requires.
Your choices and rights
You can see, correct, export or delete your information. Email support@rankandreport.com and we'll reply within 30 days. If you live in California or another state with a privacy law, you have those rights under that law too. We'll never treat you differently for using them.
If you're a client of an agency that uses Rank & Report, your agency controls your data in it. Ask your agency first, or contact us and we'll pass it on.
Children
Rank & Report is for businesses. It isn't meant for anyone under 16, and we don't knowingly collect their information.
Changes
If we change this policy, we'll update the date at the top. If a change is significant, we'll email account owners first.