Skip to content
Login with Google Start free trial
RankZap

Privacy notice

This notice explains what RankZap collects, why we collect it, who we share it with, and what you can do about it. It is written to be read, not skimmed past.

Last updated: 29 September 2026

RankZap SEO (also called RankZap) is operated by Haseeb Iqbal, trading as I Webs Design, House # 116-Dc, ArvoSol Technologies, 2nd floor, D Block, Garden Town Phase III, Sialkot Road, Gujranwala 52250, Punjab, Pakistan. In this notice, "RankZap", "we" and "us" mean that entity. "You" means the person or business with a RankZap account.

1. What we collect

We process only what the product needs to work:

  • Account details. Your email address and name.
  • Workspace data. The workspaces, clients and client websites you add, and the settings you choose for them.
  • Connected data. Data read from Google Search Console, Google Analytics 4 and Bing Webmaster Tools through OAuth. We do not currently request access to Google Business Profile; local listing data comes from the public Google Places API using our own key. We read OAuth account data only after you connect those accounts, and only for the properties you choose. Public listing checks use the listing you select.
  • Audit and crawl results. The pages, findings and scores produced when you submit a website for an audit or crawl.
  • AI prompts and responses. The prompts sent and answers returned when RankZap generates recommendations, summaries or AI visibility checks on your behalf.
  • Usage and billing records. Which features you use, your plan, invoices and credit balances.

2. Why we use it

  • To provide the reporting, audit, local SEO and AI visibility features you asked for.
  • To bill you and manage your subscription, through Paddle.
  • To send transactional email: sign-in links, scheduled reports you configure, billing receipts and service notices.
  • To keep the service secure and to investigate abuse.
  • To meet legal obligations, such as tax record keeping.

We do not sell personal data. We do not use your data, or your clients' data, for advertising. We do not use it to train AI models.

2a. Product updates

If you subscribe to product updates, we store your email address and consent choice for that purpose. You can withdraw consent through an unsubscribe link when provided, or by emailing hello@rankzapseo.com. Withdrawing marketing consent does not stop essential account or security messages.

Haseeb Iqbal, trading as I Webs Design is the controller for personal data about RankZap account holders and visitors to rankzapseo.com. We rely on: performance of our contract with you (account, reporting, billing, support); our legitimate interests in keeping the service secure, preventing abuse and understanding how the marketing site is used, balanced against your rights; your consent for analytics cookies and for any marketing email, which you can withdraw at any time; and legal obligation for tax and accounting records.

3. Data from Google

RankZap's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

In practice that means:

  • Google data is used only to provide the reporting features you requested, such as Search Console performance tables and GA4 traffic summaries. Local listing checks currently use public listing information rather than a connected Business Profile account.
  • It is never sold.
  • It is never used for advertising.
  • It is never used to train AI models.
  • Humans at RankZap do not read it except to fix a problem you have reported, for security reasons, or where the law requires.

You can disconnect Google at any time from Settings in the app. You can also revoke RankZap's access directly at myaccount.google.com/permissions. When you disconnect, we stop reading from Google and delete the stored tokens.

4. Payments

When you make a purchase through Paddle, Paddle acts as merchant of record and an independent controller of payment data. It handles payment processing, tax and receipts. RankZap receives customer and transaction references and subscription status, not full card numbers or security codes. Paddle's handling of your payment data is covered by Paddle's privacy policy.

5. Who we share it with

We use a small number of providers to run RankZap. Each one receives only what its job requires.

Paddle
Independent controller for checkout, billing, tax, fraud prevention and receipts when you purchase through Paddle.
MongoDB Atlas
Database, Oregon, United States.
Contabo
Primary application hosting, Hub Europe.
DigitalOcean
Temporarily retained migration forwarding and backup resources.
Google
The Google APIs you choose to connect.
Microsoft Bing
Bing Webmaster API, if you connect it.
OpenRouter
AI model routing for RankZap's managed AI features.
Bright Data
Search-result and AI-answer sampling for AI visibility checks.
Resend
Transactional email and report delivery.
Twilio
WhatsApp delivery of client reports, if you enable it.

If you bring your own AI API key, our server sends prompts to the provider you select under that provider's terms. That provider may be OpenRouter if you select it.

We may also disclose data where the law requires it, or to protect the rights and safety of RankZap, our users, or others. If RankZap is ever acquired, your data would transfer with the service and you would be told beforehand.

5a. AI providers and your keys

When you use RankZap's managed AI, your prompts, including page content, report data and client names you include, are sent through OpenRouter to the model provider selected for the task. We do not train models on your data. Third-party handling and retention depend on the selected provider and its API terms; review those before sending confidential or personal data. If you bring your own key, requests use your selected provider account under its terms, which may route through OpenRouter; our managed account is not used. Stored keys are encrypted at rest with AES-256-GCM and are never shown again in the app.

6. Cookies and browser storage

We use essential authentication cookies and browser storage for sign-in and preferences. Optional Google Analytics is not loaded until you accept analytics cookies; declining prevents it from loading. You can withdraw consent from Cookie settings. A Global Privacy Control signal disables optional analytics. See the Cookie policy for names and lifetimes.

7. How long we keep it

We retain account and workspace data while needed to provide the service. To request deletion or a data export, email hello@rankzapseo.com from your account address. We verify the request and respond within the time required by applicable law. We delete or anonymise data that is no longer needed, except records we must retain for billing, security, disputes or legal obligations. Backup copies may remain until their normal rotation; they are not used for routine processing, and deletion requests must be reapplied if a backup is restored. Contact us for the retention arrangements applicable to your data.

8. Security

API keys you store are encrypted at rest with AES-256-GCM, OAuth tokens are encrypted at rest, browser and API connections to our service use HTTPS, and passwords are hashed. The full list of practices is on the Security page. If you believe your data has been affected by an incident, we will tell you without undue delay.

9. Your rights and choices

Wherever you are, you can:

  • See and correct your account details from Settings.
  • Disconnect any connected account from Settings.
  • Download available reports, or request an export of your personal data by email.
  • Request account deletion by email from your account address. This does not automatically cancel an external subscription.

If you are in the EU, the UK or another region with data protection law, you also have the rights that law gives you, including access, correction, erasure, restriction, portability and objection, and the right to complain to your supervisory authority. To exercise any of these, email hello@rankzapseo.com. We aim to acknowledge requests within one business day and respond within the time required by applicable law.

10. Where data is processed

Our application servers are hosted on Contabo in its Hub Europe region. We temporarily retain DigitalOcean resources for migration forwarding and backups. Our database is MongoDB Atlas in Oregon, United States, so account data and the data you connect are stored in the United States. Paddle, Google, Microsoft, OpenRouter, Bright Data and Resend also process data in the United States and elsewhere; the list with locations is at Sub-processors. For data from the EU or UK we rely on the EU Standard Contractual Clauses and the UK International Data Transfer Addendum, and on adequacy decisions where they apply. Ask hello@rankzapseo.com for a copy.

11. Your clients' data

When you connect a client's Search Console, Analytics or Bing account, you are responsible for having the right to do so. For that data, you decide what is collected and why, and RankZap processes it on your instructions to produce the reports you configure.

11a. California residents

In the last 12 months we collected identifiers, commercial information, internet activity and professional information for the purposes above. We do not sell personal information and do not share it for cross-context behavioural advertising. You may request access, deletion, correction, or to know what we hold, and we will not discriminate for exercising these rights. Email hello@rankzapseo.com; we verify requests against your account email. We honour Global Privacy Control signals.

12. Children

RankZap is for businesses and professionals. It is not directed at anyone under 18, and we do not knowingly collect data from them.

13. Changes to this notice

If we change this notice in a way that matters, we will email account holders before the change takes effect and update the date at the top of this page.

14. Contact

Questions about privacy go to hello@rankzapseo.com, or by post to Haseeb Iqbal, trading as I Webs Design, House # 116-Dc, ArvoSol Technologies, 2nd floor, D Block, Garden Town Phase III, Sialkot Road, Gujranwala 52250, Punjab, Pakistan.