Privacy policy

RankKit SEO is built so that your site's data stays on your site. This policy explains what the RankKit SEO plugin does with data, what rankkitseo.site collects when you visit or buy, and the choices you have.

The short version

• The plugin does not send your content, visitors' data or analytics to us.
• AI requests, Google data and IndexNow pings go directly between your site and the service you connect, using your own keys.
• When you buy Pro, our reseller Freemius processes the payment and shares the details we need to give you downloads, updates and support.
• We do not sell personal data and do not use advertising trackers.

1. The RankKit SEO plugin

Data that stays on your site

RankKit SEO stores its settings, SEO data, redirects, audit results, the change history and its reports in your own WordPress database. The AI crawler report records which AI bots fetched which pages, using the user-agent string; it does not store visitors' IP addresses. The 404 monitor (Pro) records the missing URL, the referrer and a hit count. All of this is deleted when you uninstall the plugin.

Services you choose to connect

Nothing below happens until you set it up in the plugin settings:

• AI providers (Anthropic, OpenAI, Google Gemini, OpenRouter, or your own server). When you run an AI action, the plugin sends the text needed for that action (for example a post's title and content) to the provider you chose, with your API key. AI visibility tracking (Pro) sends the questions you enter. Each provider's privacy policy applies.
• Google Search Console and Google Analytics 4. Read-only access through your own Google Cloud client or service account. Data comes from Google to your site and is cached there.
• IndexNow (off by default). Sends the URLs of pages you publish or update to participating search engines.
• Google tag (if you enter a GA4 measurement ID). Adds the Google tag to your site's pages; Google's policies apply to visitors' data, and you are responsible for any consent banner your visitors' laws require.

Freemius opt-in

The plugin uses the Freemius SDK for licensing and updates. On activation it asks whether you want to share basic, non-sensitive diagnostic data (your WordPress and PHP versions, the site URL, the plugin version, your admin name and email) to get security and feature updates. This is opt-in: if you skip it, nothing is sent. Pro licenses need activation, which shares the site URL and license key with Freemius so the license can be checked. See the Freemius privacy policy.

AI agents (MCP)

If you connect an AI client such as Claude, ChatGPT or Cursor to the plugin's MCP server, that client reads and changes data on your site under the token or OAuth permissions you approved. What the client does with that data is governed by its provider's policy.

2. rankkitseo.site

What we collect

• Account data: your name, email address and a hashed password, so you can sign in and download Pro.
• Purchase data from Freemius: name, email, country, the plan, license key, the sites a license is active on, subscription status and payment amounts. We never receive or store your card details.
• Support emails you send us.
• Newsletter: your email address, if you sign up for the newsletter on the home page.
• Server logs: IP address, browser user agent and the pages requested, kept for up to 14 days for security and debugging.

Why we use it (legal bases)

• To provide what you bought: downloads, license management, updates and support (performance of a contract).
• To send service emails such as receipts, renewal reminders and important security notices (contract and legitimate interest).
• To keep the site secure and prevent fraud (legitimate interest).
• To meet tax and accounting duties (legal obligation).
• To send the newsletter you signed up for (consent, which you can withdraw at any time).

We do not send marketing emails unless you ask for them, and every marketing email has an unsubscribe link.

Who we share it with

• Freemius, Inc. (payments, licensing, updates), as our reseller and merchant of record.
• Our hosting provider, which stores the site and its database in the European Union.
• Our email provider, to deliver account and service emails.
• Authorities, if the law requires it.

We do not sell or rent personal data.

How long we keep it

Account and license data is kept while your account is active. Purchase records are kept for as long as tax law requires (usually 7 years). Server logs are kept for up to 14 days. Newsletter addresses are kept until you unsubscribe. You can ask us to delete your account at any time.

Cookies

rankkitseo.site uses only essential cookies for signing in and security. See the cookie policy.

3. Your rights

Depending on where you live (for example under the GDPR, the UK GDPR or US state laws), you can ask to access, correct, export or delete your personal data, to object to or restrict how we use it, and to complain to your data protection authority. Email hello@rankkitseo.site and we will reply within 30 days. We will never treat you differently for using these rights.

4. International transfers

Freemius and some service providers are based in the United States. Where data leaves the EU or UK, it is protected by the safeguards the law requires, such as Standard Contractual Clauses.

5. Security

We use HTTPS everywhere, store passwords hashed, encrypt stored API secrets, and verify every Freemius webhook signature. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.

6. Children

RankKit SEO is a tool for website owners and is not meant for children under 16.

7. Changes

We will update this policy when our practices change. The date at the top shows the latest version; for material changes we will email customers.

8. Contact

Privacy questions or requests: hello@rankkitseo.site.