Privacy Policy

This Privacy Policy explains how Vergrank ("Vergrank", "we", "us", or "our") collects, uses, and protects personal data when you visit our website, create an account, or use our service (the "Service"). We are the data controller of your personal data and are committed to handling it in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy or your data, contact us at hello@vergrank.com.

1. Information we collect

We collect the following categories of personal data:

• Account data. Your email address and an encrypted password when you sign up, plus any profile details you add.
• Billing data. Subscription tier and payment status. Card payments are processed by Stripe — we do not store your full card details on our systems.
• Onboarding and content data. Information you provide about your business, website domain, target audience, competitors, keywords, and brand voice samples so the Service can generate and publish content for you.
• Connected-account data. If you connect Google Search Console, we receive read-only search performance data (impressions, clicks, positions, and queries) for the properties you authorise. We store an encrypted access token and never receive your Google password.
• Usage and technical data. Log data, device and browser information, and basic analytics about how you use the Service.

2. How we use your data and our legal bases

• To provide the Service — creating your account, running the content engine, publishing pages, and showing your reports (performance of a contract).
• To take payment and manage your subscription (performance of a contract).
• To communicate with you about your account, service updates, and support (legitimate interests and performance of a contract).
• To improve and secure the Service, prevent abuse, and meet our legal obligations (legitimate interests and legal obligation).
• For optional marketing, only where you have given consent (consent), which you can withdraw at any time.

3. Sharing your data

We do not sell your personal data. We share it only with service providers ("processors") who help us run the Service, including:

• Supabase — authentication and database hosting.
• Stripe — payment processing.
• Cloudflare — hosting and delivery of your published pages and email routing.
• Google — Search Console data you choose to connect.
• AI model providers (such as OpenAI and Anthropic) — to generate and analyse content based on the inputs you provide.

We may also disclose data where required by law, to enforce our terms, or in connection with a business transfer.

4. International transfers

Some of our providers process data outside the UK. Where that happens, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement (or Addendum to the EU Standard Contractual Clauses).

5. Data retention

We keep your personal data for as long as your account is active and for a reasonable period afterwards to meet legal, accounting, or reporting requirements. You can ask us to delete your account and associated data at any time.

6. Your rights

Under UK GDPR you have the right to:

• access a copy of your personal data;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to certain processing;
• data portability;
• withdraw consent where processing is based on consent.

To exercise any of these rights, email hello@vergrank.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we'd appreciate the chance to resolve your concern first.

7. Cookies

We use essential cookies and similar technologies to keep you signed in and to operate the Service, plus limited analytics to understand usage. You can control cookies through your browser settings.

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption of credentials and access tokens. No method of transmission or storage is completely secure, but we work to protect your data and review our practices regularly.

9. Children

The Service is not intended for individuals under 18, and we do not knowingly collect their personal data.

10. Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the "Last updated" date above. Significant changes will be communicated where appropriate.

11. Contact

Questions or requests? Email us at hello@vergrank.com.