Privacy Policy
This policy explains how ElasticRank collects, uses, and protects your personal data.
1. Data Controller
ElasticRank is operated by:
RYTOV DIGITAL SOLUTIONS SP Z O. O.
Stawowa 137A/14, 31-346 Krakow, Poland
Contact: Use our contact form
2. Data We Collect
| Category | Data |
|---|---|
| Account | Email, password (hashed), marketing preferences |
| Payment | Processed by Stripe - we don't store card details |
| Usage | Keywords, domains tracked, ranking history |
| Technical | IP address, browser, device info, session data |
3. How We Use Your Data
- • Provide and maintain the service
- • Process payments (via Stripe)
- • Send service notifications
- • Marketing emails (only with consent)
- • Improve service and prevent fraud
4. Data Sharing
We only share data with:
- • Stripe - payment processing
- • Postmark - transactional emails
- • Google Analytics - website analytics (public pages only)
- • Hosting provider - infrastructure
We never sell your data.
5. Data Retention
- • Active accounts: Data retained while account exists
- • Deleted accounts: Removed within 30 days
- • Financial records: 7 years (legal requirement)
6. Data Security
We use encryption (TLS), secure hosting, access controls, and regular security reviews to protect your data.
7. Cookies & Analytics
We use essential cookies for authentication and sessions throughout the platform.
Google Analytics: We use Google Analytics on our public pages (homepage, pricing, legal pages) to understand how visitors find and interact with our website. This helps us improve our marketing and user experience.
No tracking inside the platform: Once you log in to your dashboard, we do not use Google Analytics or any third-party tracking. Your keyword data, rankings, and usage within the application remain completely private.
8. Legal Basis for Processing
- • Contract: To provide services you requested
- • Consent: Marketing (opt-in only)
- • Legitimate interest: Security, fraud prevention
- • Legal obligation: Tax/regulatory compliance
9. Your Rights (GDPR)
EU/EEA residents have the right to:
- • Access - Request a copy of your data
- • Rectify - Correct inaccurate data
- • Erase - Delete your data ("right to be forgotten"). Registered users can request account deletion from Account Settings in the dashboard.
- • Port - Export data in machine-readable format
- • Object - Stop certain processing
- • Withdraw consent - Unsubscribe from marketing
To exercise your rights, use our contact form.
10. International Transfers
Data may be processed outside the EEA. We use Standard Contractual Clauses (SCCs) to ensure adequate protection.
11. Complaints
Contact us first via our contact form. You may also lodge a complaint with your local data protection authority.
12. Changes
We'll notify you of significant changes via email. Continued use after changes means acceptance.
This service is not intended for users under 16 years old.