Privacy Policy

What we collect

We collect only what the service needs to function:

• account data: your email address, name and organization name;
• project data: the domains you ask us to analyse and the business details you provide;
• analysis data: the public page content we crawl, and the results we compute from it;
• billing data: a Stripe customer reference. We never see or store your card details;
• operational data: hashed IP addresses used for rate limiting, and structured logs that exclude page content and secrets.

What we do not collect

We do not use tracking pixels from advertising networks, we do not sell personal data, and we do not add anyone to a marketing list without an explicit opt-in.

Third-party processors

To deliver the service we send data to a small number of processors. Page text is sent to an AI provider for classification; brand names are sent to a web search provider to find third-party mentions; email addresses are sent to our email provider for transactional messages; and payment data is handled entirely by Stripe.

Which providers are active depends on the deployment configuration. Any report tells you which classification source was used.

Retention

Scan results and reports are kept while your account is active, because their value is the historical comparison. Anonymous free scan results expire after 30 days. Rate limit counters are pruned after one day.

Your rights

You can request access to, correction of, or deletion of your personal data by emailing support@airankertool.com from your registered address. We will respond within 30 days.

Purchase records are retained for the period tax and accounting rules require, even after account deletion.

Security

Data is stored in Postgres with row-level security, so one organization cannot read another’s records. Reports are stored in a private bucket and served through short-lived signed URLs. Secrets are held in environment configuration and never sent to the browser.