This Privacy Policy explains how Online Ranking AI ("Online Ranking AI", "we", "us" or "our") collects, uses, shares and protects personal information when you visit www.onlineranking.ai (the "Site"), contact us, request an audit, or subscribe to our services (together, the "Services").

We provide our Services internationally. Depending on where you live, you may have specific rights described in the Your Privacy Rights section below.

If you do not agree with this Policy, please do not use the Site or the Services.

1. Who We Are

The controller responsible for your personal information is:

  • Legal entity: Online Ranking AI LLC
  • Registered address: 6451 NW 102nd Ave, Unit 11, Doral, FL 33178, United States
  • Email: hello@onlineranking.ai

2. Information We Collect

2.1 Information you give us

  • Contact and account details — name, business name, email address, phone number, website URL, and the city or service area of your business.
  • Audit request details — the information you submit when you request a free site audit, including your domain and the business categories you want to rank for.
  • Billing information — the plan you select and the billing details required to process your subscription. Card numbers are entered directly with our payment processor; we do not store full card numbers on our systems.
  • Communications — the content of emails, forms, chat messages and support requests you send us.

2.2 Information collected automatically

  • Usage data — pages viewed, time on page, referring URL, clicks and scroll behaviour on the Site.
  • Device and connection data — IP address, browser type and version, operating system, device type, language and approximate location derived from IP.
  • Cookies and similar technologies — see the Cookies section.

2.3 Information from third parties and connected accounts

To deliver the Services, you may authorise us to access business platforms on your behalf. Where you do, we process the data those platforms make available to us, which may include:

  • Google Business Profile — business listing details, posts, photos, reviews, questions, and performance metrics such as calls, direction requests and search impressions.
  • Google Search Console and analytics tools — queries, impressions, clicks, rankings and page-level performance for your website.
  • Your website — publicly accessible page content and technical data gathered by crawling, for the purpose of SEO analysis.
  • Publicly available sources — directory listings, citations and competitor data used for benchmarking.

We access these accounts only to the extent needed to provide the Services you have purchased, and only for as long as you keep the connection active. You can revoke our access at any time through the relevant platform's security settings.

2.4 Information we do not intentionally collect

We do not seek to collect special categories of personal data (such as health, biometric, racial or ethnic origin, political opinions, religious beliefs, or sexual orientation), and you should not send such data to us. If you provide it inadvertently, we will delete it once identified.

3. How We Use Your Information

  • To provide, operate and improve the Services, including audits, optimisation, content production and reporting.
  • To create and manage your account and process your subscription payments.
  • To communicate with you about your account, results, service updates and support requests.
  • To send marketing communications about our own services, where permitted by law and subject to your right to opt out at any time.
  • To measure and improve the performance of the Site and our marketing.
  • To detect, investigate and prevent fraud, abuse and security incidents.
  • To comply with legal obligations and to establish, exercise or defend legal claims.

We do not sell your personal information, and we do not share it with third parties for their own independent marketing purposes.

4. Legal Bases for Processing (EEA, UK and Switzerland)

If you are located in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases under the GDPR and UK GDPR:

  • Performance of a contract — to deliver the Services you have purchased and to manage your account and billing.
  • Legitimate interests — to secure and improve the Services, to understand how the Site is used, and to promote our business, provided your rights do not override those interests.
  • Consent — for non-essential cookies and for marketing communications where consent is required. You may withdraw consent at any time.
  • Legal obligation — to meet accounting, tax and other statutory requirements.

5. How We Share Information

We share personal information only with the following categories of recipients, and only as necessary:

  • Service providers (processors) who help us run the business — including customer relationship management and marketing automation, email delivery, website hosting, analytics, and payment processing. Our current providers include Stripe (payment processing and subscription billing), GoHighLevel (CRM and marketing automation), FirstPromoter (affiliate tracking), Google (analytics and business platform services), and our website hosting provider.
  • Platforms you connect — where you authorise us to manage your Google Business Profile or similar accounts, data flows between us and that platform under your authorisation.
  • Professional advisers — accountants, auditors and lawyers, bound by confidentiality.
  • Authorities — where required by law, court order or a valid legal request, or to protect our rights, users or the public.
  • Business transfers — if we are involved in a merger, acquisition or sale of assets, your information may transfer to the successor entity, subject to this Policy.

We require our service providers to process personal information only on our instructions and to apply appropriate security measures.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Site, remember your preferences, measure traffic and understand which content performs well. Categories we use:

  • Strictly necessary — required for the Site to function. These cannot be switched off.
  • Analytics — help us understand how visitors use the Site so we can improve it.
  • Marketing — used to measure campaign performance and, where applicable, to show relevant ads.

Most browsers let you block or delete cookies through their settings. Blocking some cookies may affect how the Site works.

7. Data Retention

We keep personal information only as long as necessary for the purposes described in this Policy:

  • Account and service data — for the duration of your subscription and for a reasonable period afterwards to handle queries and disputes.
  • Billing and tax records — for the period required by applicable accounting and tax law.
  • Marketing contacts — until you unsubscribe or ask us to delete your details.
  • Site analytics — for the retention period configured in our analytics tools.

When information is no longer needed, we delete it or anonymise it so it can no longer be linked to you.

8. Your Privacy Rights

8.1 Everyone

Wherever you are located, you may contact us at hello@onlineranking.ai to ask us to access, correct or delete your personal information, or to unsubscribe from marketing.

8.2 EEA, UK and Switzerland (GDPR)

You have the right to: access your data; have inaccurate data corrected; have your data erased; restrict or object to processing; receive your data in a portable format; and withdraw consent at any time. You also have the right to lodge a complaint with your local supervisory authority.

8.3 California (CCPA/CPRA)

California residents have the right to know what personal information we collect, use and disclose; to request deletion; to request correction; and to be free from discrimination for exercising these rights. We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we have not done so in the preceding twelve months.

8.4 How to exercise your rights

Email hello@onlineranking.ai with your request. We may need to verify your identity before acting. We will respond within the timeframe required by applicable law, generally within 30 days (GDPR) or 45 days (CCPA/CPRA), and will tell you if we need more time.

9. International Data Transfers

We operate from the United States and use service providers located in the United States and elsewhere. If you are outside the United States, your personal information will be transferred to and processed in countries whose data protection laws may differ from those of your country. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, together with additional measures where necessary.

10. Security

We apply technical and organisational measures appropriate to the risk, including encryption in transit, access controls limiting who can view client data, and use of reputable providers for hosting and payment processing. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal information and the law requires it, we will notify you and the relevant authorities without undue delay.

11. Children's Privacy

The Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Third-Party Websites

The Site links to third-party websites and platforms that we do not control, including social media profiles and our affiliate platform. This Policy does not apply to those sites, and we are not responsible for their privacy practices. Review their policies before providing personal information.

13. Changes to This Policy

We may update this Policy from time to time. We will change the "Last updated" date above and, where the change is material, take reasonable steps to notify you. Continued use of the Services after an update means you accept the revised Policy.

14. Contact Us

Questions, requests or complaints about this Policy or your personal information:

See also our Terms & Conditions.