Privacy Policy

Who we are

RankMap AI is operated by Yuva Nexus Technologies LLP, a Limited Liability Partnership registered in India. In this policy, “we” and “us” mean that company.

We are the data controller for the information described below. For anything in this policy, write to [email protected].

What we collect

Account details. Your name, email address and a password hash if you sign up with a password. We never store a readable password.

Google Business Profile data. When you connect a Google account, we read the listings you choose and store a copy so the product can work without calling Google on every page view: business name, address, phone, website, categories, hours, attributes, photos, reviews, posts, and the performance figures Google reports for that listing.

Connected pages and sites. If you connect a Facebook Page, an Instagram account or a LinkedIn page, we store which one, the token that lets us publish to it, the posts you approve for it and the reach and engagement figures the network reports back. If you connect a WordPress site, we store its address and the application password you create for us, and use them only to publish the articles you approve.

Customer contacts you add. Names, phone numbers, email addresses and dates you enter for your own customers, so the product can send the review requests, birthday and aftercare messages you ask it to. Emails are sent on your instruction; WhatsApp messages are never sent by us — the product opens a message in your own WhatsApp for you to send. You are responsible for having your customers’ permission to contact them.

Pictures. Photos you upload, sample designs you give us so the product can learn your brand’s style, and the pictures it designs or draws for your posts and articles.

Data we create. Audit scores, ranking measurements, competitor records, and any text you write or ask us to draft, and a record of the AI credits your account has used. These are ours to compute, but they are about your business, so they are covered by everything below.

Technical records. Session cookies that keep you signed in, and server logs containing IP address, timestamp and the request path — kept for security and debugging.

Referral links. If you arrive through an affiliate’s referral link, a cookie remembers which link for 30 days, so that the person who referred you can be credited if you create an account. It holds the referral code and the time of the visit, nothing about you. In the European Union, the rest of the European Economic Area, the United Kingdom and Switzerland we ask before setting it, and set nothing if you say no. The affiliate is told that somebody signed up and sees a first name and an initial; they are never shown your email address or anything in your account.

We do not use advertising cookies, and we do not track you across other websites.

Google user data, and Limited Use

This section describes our use of data obtained through Google APIs and applies in addition to the rest of this policy.

What we request. When you connect Google, we ask for the https://www.googleapis.com/auth/business.manage scope. It is the scope Google provides for reading and managing a Business Profile, and it is what lets the product audit your listing, show your reviews and posts, and — only when you press a button that says so — publish a reply or a post on your behalf.

What we do with it. Exactly the features you can see: scoring your profile, showing what changed, drafting replies and posts for your approval, and reporting on performance. Nothing else.

RankMap AI’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we do not:

• sell Google user data, ever, to anyone;
• use Google user data for advertising, retargeting, or building advertising profiles;
• transfer Google user data to third parties except as needed to provide or improve the features you use, to comply with the law, or as part of a merger or acquisition after notifying you;
• allow humans to read your Google user data, except with your explicit permission (for example when you ask us to look at a specific problem), where it is necessary for security or to comply with the law, or on data that has been aggregated and anonymised.

AI and your Google data. When you use an AI feature, the specific text being worked on — a review, a profile field, the business context you wrote in Settings — is sent to our AI provider to produce a draft. It is not used to train any general-purpose model, and drafts are shown to you before anything is published.

Taking access away. You can disconnect Google inside the product at any time, and you can revoke our access directly at myaccount.google.com/permissions. Revoking stops all future access immediately. To also remove the copy we already hold, delete the listing or your account — see Deleting your data.

Why we are allowed to hold it

• Your consent — for connecting a Google account and for optional AI features. You can withdraw it at any time.
• Performing our contract — we cannot run an audit of a listing without holding a copy of the listing.
• Legitimate interests — keeping the service secure, preventing abuse, and fixing faults.

Who else sees it

We do not sell your data. We share it only with the companies we need to run the product, each of which is contractually limited to that purpose:

We may also disclose data if the law requires it, or to establish or defend a legal claim. If we are ever acquired, your data may transfer with the business — you will be told before that happens, and this policy will continue to apply until you are given notice of a new one.

Where it is stored, and for how long

Data is stored in our managed database and processed on servers operated by our hosting and infrastructure providers. Some of those providers are outside India; where data is transferred internationally we rely on the provider’s standard contractual protections.

We keep your data while your account is open. Audits, ranking history and performance figures are kept as history, because a product about change over time is useless without it. When you delete a listing or your account, the data is removed as described below. Server logs are kept for a short period and then rotated.

How it is protected

• Google access and refresh tokens are encrypted with AES-256-GCM before they are written to the database, and are never returned by our API or rendered in a page.
• All traffic runs over HTTPS.
• Access to production data is limited to the people who need it to operate the service.
• Every request is scoped to your workspace, so one customer's data cannot be read through another customer's session.

No system is perfectly secure. If you find a vulnerability, please tell us at [email protected] — see our security page.

Deleting your data

You can delete everything yourself. In the dashboard, disconnecting a Google account removes its stored tokens; deleting a business removes that listing and everything computed from it; deleting your account from the Account page removes your user, your workspaces and every listing, audit, ranking, review copy and post inside them.

Deletion is immediate and cannot be undone. Backups are rotated on a rolling schedule and any residual copies age out with them. If you would rather we did it for you, email [email protected] from the address on the account and we will action it.

Your rights

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, restrict or object to how we use it, and to receive it in a portable form. Most of these you can exercise directly in the product; for anything else, write to [email protected] and we will respond within 30 days.

Children

RankMap AI is a business tool and is not directed at anyone under 18. We do not knowingly collect data from children.

Changes to this policy

If we change how we handle data in a way that affects you, we will update this page and the date at the top of it, and — for material changes — tell you by email before it takes effect.

Contact

Yuva Nexus Technologies LLP
Office No A1, Ground Floor, Ghodke Niwas, Sant Namdev Nagar, Behind Sahyadri Fabrication, Galli No. 2, Beed 431122, Maharashtra, India
[email protected]