Privacy Policy

How AutoRank collects, uses, and protects your data in our GEO analytics platform.

Privacy Policy

Last updated: August 2, 2026

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, subscribe to our service, or contact us for support.

  • Account information (email, name, company details)
  • Payment information (processed securely through Stripe)
  • Usage data and analytics queries
  • Communication preferences
  • Behavioral data collected automatically via session recording (clicks, scrolling, mouse movement, page navigation, and device metadata)
  • Connected-service authorization data, such as OAuth tokens, granted permissions, property identifiers, and permission levels
  • Google Search Console data you authorize us to import, including search queries, page URLs, clicks, impressions, click-through rates, and average search positions

2. Google Search Console Integration

Connecting Google Search Console is optional and must be authorized by an organization owner through Google's OAuth consent flow. We request read-only Search Console access and do not receive or store your Google password.

When you connect Google Search Console, we use the authorized data to:

  • Identify Search Console properties that match a domain in your AutoRank account
  • Import and refresh organic search-performance data
  • Display search-performance metrics and trends
  • Generate analyses, answers, and recommendations within AutoRank
  • Maintain, secure, and troubleshoot the integration

Google Search Console data may be processed by hosting, database, and AI service providers acting on our behalf only as necessary to provide these user-facing features. We do not sell Google user data or use it for advertising. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

OAuth credentials are stored as protected secrets. Imported Search Console data is retained while the integration remains connected or as otherwise needed to provide the Service. When an organization owner disconnects Search Console, we request revocation of the Google authorization and delete the stored OAuth credentials and imported Search Console data for that domain. You can also revoke access through your Google account.

3. Session Recording

We use session recording to understand how users interact with our site and app, helping us identify issues and improve the product. Sensitive fields (such as passwords and payment details) are automatically masked and not recorded.

4. How We Use Your Information

We use the information we collect to:

  • Provide and improve our GEO analytics services
  • Process payments and manage subscriptions
  • Send service updates and marketing communications
  • Analyze usage patterns to enhance our platform

5. Payment Processing

We use Stripe as our payment processor. Stripe may collect and process your payment information according to their privacy policy. We do not store your complete payment card information on our servers.

6. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

  • Service providers (Stripe for payments, hosting and database providers, AI service providers, and session recording and analytics providers)
  • Google, when needed to authenticate the connection, obtain data you authorized, or revoke the connection
  • Legal authorities when required by law
  • Business partners with your explicit consent

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

8. Your Rights

You have the right to:

  • Access and update your personal information
  • Delete your account and associated data
  • Opt-out of marketing communications
  • Request data portability
  • Withdraw Google Search Console access and delete imported Search Console data by disconnecting the integration

9. Data Controller

The data controller is Autorank AB (org.nr 559575-4093), Östermalmsgatan 26A, Stockholm, Sweden.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at contact@autorank.ai.