Privacy Policy

1. Introduction

TruboRankAI ("we," "our," or "us") operates the website truborankai.com and its installable Progressive Web App ("PWA" or "App"), including the version distributed through Microsoft Store. We provide AI discoverability, Answer Engine Optimization (AEO), Generative Engine Optimization (GEO), and related website analysis services. This Privacy Policy applies to both the website and the App and explains how we collect, use, store, share, and protect personal information.

By using TruboRank AI, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our services.

2. Microsoft Store and PWA Information

• Hosted web experience: The Microsoft Store App is a packaged PWA that connects over HTTPS to the same TruboRankAI service and uses the same account, features, and server-side data as truborankai.com. Installing the App does not create a separate TruboRankAI account or a separate copy of your server data.
• Internet access: An internet connection is required for sign-in, website scans, reports, AI features, subscriptions, and most other functionality.
• Offline cache: The App's service worker intentionally caches only the offline fallback page and application icons. It does not intentionally cache authenticated dashboard pages, scan reports, submitted website URLs, account credentials, or AI chat content for offline use.
• Local app storage: The App may use cookies and browser storage on your Windows device for essential sessions, consent choices, theme and interface preferences, a device identifier used for account-session visibility, onboarding state, and short-lived feature handoffs. You can clear this local data through Windows or Microsoft Edge app and site-data settings, but doing so may sign you out or reset preferences.
• Device permissions: The current App does not request access to your camera, microphone, precise location, contacts, photos, or local file library. It uses standard internet and local web-storage capabilities required to provide the service.
• Microsoft as store operator: Microsoft may independently process Store acquisition, licensing, device, crash, or diagnostic information under the Microsoft Privacy Statement. Microsoft does not operate TruboRankAI and its privacy statement does not replace this policy.
• Uninstalling the App: Uninstalling removes the installed App but does not delete your TruboRankAI account or server-side records. Depending on Windows and browser behavior, local web data may remain until you clear it. To request deletion of server-side personal information, contact us as described in Section 15.

3. Information We Collect

3.1 Information You Provide

• Account data: Name, email address, and password when you register an account.
• Website URLs: URLs you submit for scanning and analysis.
• Payment and subscription data: Transaction or subscription identifiers, provider status, plan, amount, currency, and related records received from payment providers. Payment credentials are handled by the selected payment provider rather than entered into TruboRankAI.
• Communications: Messages you send to us via email or contact forms.

3.2 Information Collected Automatically

• Usage data: Pages visited, scan requests made, features accessed, and time spent on the platform.
• Device data: IP address, browser type and version, operating system, device type, and screen resolution.
• Cookies and tracking: Session cookies, authentication tokens, and analytics identifiers. See our Cookie Policy for details.
• Analytics data: Aggregated and anonymized usage statistics collected through Umami Analytics.
• Local preferences: Consent choices, display theme, interface state, onboarding progress, and similar preferences stored locally on your device.

3.3 Information From Third Parties

• Payment and subscription providers: NOWPayments or Whop may provide transaction, subscription, invoice, and payment-status information.
• Google integrations: If you choose Google sign-in or connect Google Search Console, Google may provide account identity details, authorization tokens, verified property information, and Search Console performance data within the permissions you approve.
• Scanned websites: When you submit a URL for scanning, we may collect publicly available information from that website, including robots.txt, sitemaps, headers, and page content.

4. How We Use Your Information

We use the collected information for the following purposes:

• Service delivery: Perform scans, generate reports, and provide AI discoverability and optimization analysis.
• Account management: Create and manage your account, handle authentication, and maintain your subscription status.
• Payment processing: Process payments or subscriptions through the provider you select and activate Pro features after verified confirmation.
• Communication: Send account-related notices, scan results, and respond to support inquiries.
• Analytics and improvement: Understand how users interact with our platform to improve features, performance, and user experience.
• Security: Detect and prevent fraud, abuse, and unauthorized access.
• Legal compliance: Comply with applicable laws, regulations, and legal processes.

5. Email Communications

When you create an account, we may send emails to the address you provide. These emails may include:

• Transactional emails: Email verification codes, password reset messages, login/security alerts, payment confirmations, subscription notices, and important account updates.
• Service emails: Scan status updates, report notifications, product changes, maintenance notices, and support replies related to your use of TruboRank AI.
• Optional marketing emails: Product tips, feature announcements, offers, or educational content. We only send these where permitted by law or where you have given consent.

Transactional and service emails are necessary to operate your account and may not include an unsubscribe option. Marketing emails, if sent, will include an unsubscribe method or can be stopped by contacting us. We do not sell or rent your email address to third parties.

6. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for processing your data includes:

• Contractual necessity: Processing required to provide our services under our Terms of Service.
• Legitimate interests: Improving our services, ensuring security, and analyzing usage patterns.
• Consent: Analytics cookies and optional communications where you have given explicit consent.
• Legal obligation: Compliance with applicable laws and regulations.

7. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share data only in the following circumstances:

Logos "Built with trusted technologies" represent technologies, integrations, or services used within TruboRankAI.

• Payments and subscriptions: NOWPayments and Whop process selected payment or subscription flows and return transaction or entitlement status to us.
• Analytics and marketing: Umami Analytics helps us measure product usage. Where configured and permitted by your consent choices, Meta Pixel and Whop Pixel may receive page or conversion-event information.
• AI processing: OpenRouter and the model providers routed through it may process prompts, relevant scan context, and generated content when you choose to use AI-powered features.
• Identity and connected data: Google processes sign-in and optional Search Console connections according to the permissions you approve. You can disconnect Search Console from TruboRankAI.
• Support and security: Crisp may process support-chat information, and Cloudflare Turnstile may process technical and interaction signals used to prevent automated abuse.
• Infrastructure: Hosting, database, email-delivery, logging, and security providers may process limited information as needed to operate and protect the service.
• Microsoft Store: Microsoft processes Store distribution, acquisition, licensing, and platform diagnostics independently as described in its own privacy statement.
• Legal requirements: When required by law, regulation, legal process, or governmental request.
• Protection of rights: To protect the rights, property, or safety of TruboRank AI, our users, or the public.
• Business transfers: In connection with a merger, acquisition, or sale of assets, subject to the receiving party honoring this Privacy Policy.

8. Data Retention

We retain your personal information only as long as necessary:

• Account data: Retained for the duration of your account and for up to 12 months after account deletion unless a longer period is required by law.
• Scan reports: New Free reports are scheduled to expire after 90 days. Pro reports are retained for continued account access unless you delete them or request deletion. Reports created before this retention policy are excluded from automatic deletion during the protected migration period.
• Payment records: Transaction data retained for a minimum of 5 years for accounting and legal compliance.
• Analytics data: Aggregated and anonymized data may be retained indefinitely.
• Local PWA data: App cache, cookies, and local preferences remain on the device until they expire, are replaced, or are cleared through the App, browser, or Windows settings.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• HTTPS encryption for all data in transit.
• Password hashing using industry-standard algorithms.
• HMAC signature verification for payment webhook events.
• Restricted access to personal data on our servers.
• Regular security reviews and updates.

Despite these measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

10. Your Rights and Controls

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request a machine-readable copy of your data.
• Objection: Object to processing based on legitimate interests or direct marketing.
• Restriction: Request restriction of processing under certain circumstances.
• Withdraw consent: Withdraw consent at any time where processing is based on consent.
• Local controls: Clear cookies, cached PWA resources, and local preferences through Microsoft Edge or Windows app and site-data settings.

To exercise any of these rights, contact us at the email provided in the "Contact" section below. We will respond within 30 days.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place, including standard contractual clauses and adequacy decisions where applicable.

12. Children's Privacy

TruboRank AI is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete it promptly.

13. Third-Party Links

Our platform may contain links to third-party websites, including NOWPayments and AI model providers. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy on this page with a new "Last updated" date. Continued use of our services after changes constitutes acceptance of the revised policy.

15. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: support@truborankai.com
• Website: truborankai.com