Legal

Privacy policy

Last updated August 2026

Who is responsible for your data

WebSuitable Inc., 525-532 Montreal Road, Ottawa, Ontario K1K 4R4, Canada, is the controller of the personal data described here. RankingMojo is a brand of that company.

Ask us anything about it — including to see, correct or delete what we hold — through the contact form.

What we collect

Your email address, so you can sign in and so we can send you the weekly summary and account notices. We do not use passwords — signing in sends a one-time code to that address.

Your business details: name, website, the towns you serve, your services, and how you describe yourself. You give us these during setup, and we read your website to fill in what we can.

If you connect your website for publishing, the credentials for it. These are encrypted before they are stored and are only ever used to publish your articles.

If you connect Google Search Console, read-only access to the search performance data for the property you choose. We never request write access.

Basic technical records — the pages you use in the app, and error reports when something breaks — so we can keep it working.

What we do with it, and why we are allowed to

We use your business details to decide what to write about and to write it in a way that fits your business, and your website's content to know what is true about you so that what we publish is accurate. We do this to perform our contract with you.

We check where you rank in Google and whether AI assistants mention you, and store those measurements over time so you can see whether it is working. This is also part of the service you are paying for.

We use your email for sign-in codes, billing notices and the weekly summary. Sign-in and billing messages are necessary to the contract; you can turn the weekly summary off in Settings.

We keep error and usage records to run the service safely and fix faults — our legitimate interest in a product that works. We do not use them to profile you.

We do not sell your data, we do not share it for advertising, and we do not use it to train anyone's models.

Who else sees it

We use third parties to run the service: Supabase for the database and sign-in, Vercel for hosting, Anthropic to write articles, DataForSEO for rank and AI visibility checks, Stripe for payments, Resend for email, and Sentry for error reporting. Each receives only what it needs to do its part, and none of them may use it for their own purposes.

Stripe handles card details directly. We never see or store your card number.

We will hand over data if the law requires it, and we will tell you unless we are forbidden from doing so.

Where your data is held

Our database and application run in the United States. Our email and AI suppliers also operate there.

If you are in the UK or the European Economic Area, that means your data is transferred outside it. Those transfers rely on the European Commission's standard contractual clauses, or the equivalent UK addendum, in our agreements with those suppliers.

How long we keep it

For as long as your account is open, and for 12 months afterwards so that you can come back to an account rather than start again.

Billing records are kept for seven years, because tax law requires it.

If you cancel, the articles already published to your own website remain yours and stay where they are — they are on your site, not ours.

Ask us to delete your account and we will remove your data within 30 days, apart from records we must keep by law.

Your rights

You can see and correct everything we know about your business in Settings, and disconnect any integration at any time.

Use the contact form for a copy of your data, a correction, deletion, or to object to or restrict how we use it. We answer within 30 days and do not charge for it.

If you are in the UK or the EEA you may also complain to your data protection authority. In Canada you may complain to the Office of the Privacy Commissioner.

Security

Access to your data is restricted per account at the database level, website credentials are encrypted before storage, and connections are encrypted in transit.

No system is perfect. If a breach affects your personal data, we will tell you and the relevant regulator as the law requires.

Cookies and children

We use a cookie to keep you signed in, and local storage to remember your light or dark preference. We do not use advertising or tracking cookies.

RankingMojo is a product for businesses and is not directed at children. We do not knowingly collect data about anyone under 16.

Changes to this policy

If we change how we use your data in a way that materially affects you, we will email you before it takes effect. The date at the top of this page always reflects the current version.

Anything here you want to ask about? Get in touch.