Legal
Privacy policy
What we collect, why we collect it, who we share it with, and the choices you have.
This policy explains how AIRankSurge ("we", "us") handles personal information when you visit airanksurge.com, use the app at app.airanksurge.com, or contact us. The short version: we collect only what we need to measure your visibility and run your account, we never sell it, and you can ask us to access, export or delete it.
What we collect
- Account details. Your name and email address, and your sign-in method (for example Google sign-in, from which we receive your name, email address and profile identifier).
- Website details you give us. The websites and business profiles you add, the competitors and locations you tell us to monitor, and the questions you approve us to ask AI platforms.
- Measurements about your websites. Public pages we crawl, and the results of our checks. We record the source, method and time of each.
- Data from integrations you connect. For example Google Search Console or a WordPress site, only after you authorise it. Access tokens are kept in a protected secrets store and are not stored in readable application fields. We never ask for your WordPress or Google password.
- AI visibility records. The approved question, the platform and model, the date, the answer and the linked sources.
- Billing information. When paid plans launch, payments are processed by Stripe. We receive your plan, billing status and the last digits and type of your card, not the full card number.
- Technical and security data. IP address, browser and device type, and logs of requests and actions, used to keep the service secure and working.
- Messages. What you send us when you contact us.
Our marketing website sets no cookies and loads no third-party advertising or tracking scripts. The app uses the cookies or local storage needed to keep you signed in and protect your session.
Why we use it
- To provide the service: measure your visibility, show findings, prepare and run changes you approve, and verify them.
- To run your account: sign you in, manage your plan and usage, take payment, and send service messages such as security notices and receipts.
- To keep the platform secure, prevent abuse and fix problems.
- To improve the product, using aggregated or de-identified information where possible.
- To meet legal obligations and to establish or defend legal claims.
We do not sell personal information, and we do not use it for advertising profiles.
Who we share it with
We share personal information only with service providers that help us run AIRankSurge, under terms that limit how they may use it:
- Database and sign-in: Supabase.
- Network, security and delivery: Cloudflare.
- Website hosting and email: Hostinger.
- AI model access: OpenRouter and the model providers it routes to. They receive the questions you approve, not your account details.
- Google when you sign in with Google or connect Search Console.
- Payments: Stripe, once billing is switched on.
We may also disclose information if the law requires it, to protect people or our rights, or as part of a business sale or reorganisation (we would tell you first where we can). Some providers process data in other countries. Where they do, we rely on contractual safeguards that the law accepts.
How long we keep it
We keep account and measurement data while your account is active. When you close your account or ask us to delete your data, we delete or anonymise it, except records we must keep by law (for example billing records) or need to resolve a dispute. Deleted data may remain in encrypted backups for a limited time before it is overwritten.
How we protect it
Each organisation's data is isolated at the database level and tested, traffic is encrypted in transit, and changes are authorised on the server. No system is perfectly secure. If a breach affects your information, we will notify you and the relevant authority as the law requires. More detail is on our security page.
Your choices and rights
Depending on where you live, you can ask to access the personal information we hold about you, correct it, export it, delete it, restrict or object to how we use it, or withdraw consent you have given. Email hello@airanksurge.com from your account address and we will respond within a reasonable time, and within any period the law sets. We may need to verify your identity first.
If you are not satisfied with our response, you can complain to your local data protection authority. In Australia, that is the Office of the Australian Information Commissioner (oaic.gov.au).
Children
AIRankSurge is built for businesses and is not intended for anyone under 18. We do not knowingly collect information from children.
Changes to this policy
If we make a material change, we will update the date above and, where the change affects you, tell you by email or in the app before it takes effect.
Contact
Privacy questions and requests: hello@airanksurge.com. See also our terms of service and refund policy.