Privacy Policy · RankSignal

RankSignal is run by Go Hype Media (“we”, “us”). This policy explains, in plain words, what information we collect when you use our website and app, why we collect it, who we share it with, how long we keep it, and what you can ask us to do with it. It applies to RankSignal's website, the free website check, the app, and our emails and WhatsApp messages.

We follow India's Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000 and its rules. Under the DPDP Act, we are the “data fiduciary” for your account information.

1. What we collect

Your account

Your name, email address and password (we store only a scrambled version of the password, never the password itself).
Your business name, the people you invite to your team, and their roles.
If you sign in with Google: your Google account email and name.
Settings you choose, like your time zone and which emails you want.
If you turn on WhatsApp updates: your WhatsApp number.

Your websites and checks

The website addresses you add, your business and brand names, competitors, country and language.
The customer questions you add or that we suggest for you.
What we find when we check your website: the public pages we read, scores, problems and fixes. We read only pages anyone can see on the internet, and we follow your site's robot rules file.
The answers AI assistants give to your customer questions, which we save so you can read them.
Drafts, approvals, changes made to your website, and the saved old versions used for undo.

Connected services

If you connect your website (for example WordPress, Shopify, Wix or GitHub) or Google Search Console and Google Analytics, we store the access key or login token needed to do what you approve. These are stored encrypted, and we never show them back to anyone.
From Google Search Console and Google Analytics we read summary numbers about your website, such as searches and visits.

The free website check

The website address you type, the score we work out, and a scrambled code made from your internet (IP) address so we can stop misuse. We do not store your IP address itself.
Your email address, only if you choose to give it to get your result.
We do not store the pages we read during a free check.

Payments

Payments are handled by Razorpay. We receive your plan, payment status, invoice details and a Razorpay customer reference. We never see or store your full card number, UPI PIN or bank login.

Messages and contact

Messages you send us through the contact form or by email.

Security and usage

Sign-in records, a log of important actions in your account (like approvals and published changes), and basic technical logs (browser type, time, errors) that help us keep the service safe and working.

2. Why we use it

To run the service you signed up for: check your website, ask AI assistants your customer questions, show your scores and fixes, and make the changes you approve.
To keep your account safe, stop abuse and fix problems.
To bill you and keep the records the law asks for (for example GST invoices).
To send you emails and, if you turned them on, WhatsApp messages about your account: check results, fixes waiting for your OK, monthly reports, trial reminders, and important notices.
If you gave your email on the free check: to send your result and a short follow-up. You can say stop any time.
To improve RankSignal, using totals and patterns rather than looking at your business one by one.

We use your information because you agreed to it when you signed up or gave it to us, because we need it to provide the service you asked for, or because the law requires it. We do not sell your personal information, and we do not use it for advertising.

3. Who we share it with

We share information only with companies that help us run RankSignal, and only what they need:

AI providers — OpenAI (ChatGPT), Google (Gemini), Perplexity, and data providers such as DataForSEO. We send them your customer questions, and sometimes your business name, website address and the text of your public pages, so they can answer the questions or help write drafts. We do not send your password, payment details or your team's personal details. These providers have their own privacy rules. We use their business (paid API) services and, where they offer the choice, settings that stop our requests being used to train their models.
Payments — Razorpay, to take payments and manage subscriptions.
Hosting and database — the cloud companies that host our app and store our data.
Email — our email sending service, to deliver account and report emails.
WhatsApp — our WhatsApp messaging provider, only if you turned on WhatsApp updates.
Security check — Cloudflare Turnstile, which checks that forms are filled in by a person, not a robot.
Services you connect — your website platform or Google, only to do what you asked.

Some of these companies store data outside India. When they do, we use providers that protect it with security and contract terms at least as strong as this policy, and we follow any limits the Government of India sets on sending data abroad.

We may also share information if the law requires it, to protect people from harm, or if our business is sold or merged (in which case this policy keeps applying to your information).

Staff access. Our support staff can look at your account only to help you or to fix a problem. Every time they do, it is recorded in your account's activity log.

4. Cookies

We use a small number of cookies that the site needs to work: one keeps you signed in, and others protect forms from misuse. We do not use advertising cookies or cookies that track you across other websites. If you block cookies, you will not be able to sign in.

5. How long we keep it

Your account and websites: while your account is open. After you close it, we delete or anonymise it within 90 days.
Check results and saved AI answers: while your account is open, so you can see your score history.
Free-check records (website, score, email if given): up to 12 months, or sooner if you ask.
Payment and invoice records: 8 years, because Indian tax law requires it.
Security and activity logs: up to 2 years.
Backups: deleted data can stay in encrypted backups for up to 35 days before it is overwritten.

6. Keeping it safe

We use encrypted connections (https), store passwords and access keys in scrambled or encrypted form, limit who on our team can see data, and keep an activity log of important actions. No system is perfectly safe; if a data breach affects you, we will tell you and the Data Protection Board of India as the law requires.

7. Your rights

You can ask us to:

tell you what personal information we hold about you and who we shared it with;
correct or update it;
delete it (we will delete it unless the law says we must keep it, for example invoices);
stop using it where you gave consent — for example, stop marketing emails or WhatsApp messages;
name someone to act for you if you die or cannot act yourself.

To do any of this, email info@gohypemedia.com from the email address on your account. Most things, like your name, email settings and WhatsApp updates, you can also change yourself in the app. We reply within 30 days. To delete your whole account, email us with the subject “Delete my account”; we confirm it is you, then delete it.

If you are not happy with our reply, you can contact our Grievance Officer (below) and, after that, complain to the Data Protection Board of India.

8. Children

RankSignal is for businesses. It is not meant for anyone under 18, and we do not knowingly collect information about children.

9. Changes to this policy

If we change this policy, we will update the date at the top. If the change is important, we will email account owners before it starts.

10. Contact us

Go Hype Media
TODO: registered office address, City, State, PIN, India
Email: info@gohypemedia.com

Grievance Officer: TODO: Grievance Officer name, reachable at info@gohypemedia.com. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.