Privacy Policy

Controller: RANKTYPE LLC
Website: https://ranktype.com
Applicable regulations: GDPR (EU / UK / Switzerland), CCPA / CPRA (California), CAN-SPAM (US), Wyoming state law.

1. Introduction

RANKTYPE LLC (“RANKTYPE,” “we,” “us,” or “our”) operates the website at https://ranktype.com (the “Site”). This Privacy Policy explains what personal information we collect when you visit the Site or contact us, how we use and share it, how long we keep it, and what rights you have.

We are committed to handling your data transparently and minimally. This policy applies to all visitors to the Site and to individuals who contact us through the Site. It does not cover data processing carried out under a signed Master Services Agreement (MSA) or Statement of Work (SOW) for paid engagements, which is governed by the terms of that agreement and any associated Data Processing Agreement (DPA).

If you do not agree with this policy, please do not use the Site.

2. Information We Collect

2.1 Information You Provide Directly

When you interact with the Site, you may voluntarily submit:

• Full name — via the contact form or email correspondence, so we can address you and route your inquiry.
• Business email address — via the contact form or email correspondence, so we can reply and send follow-ups.
• Company name and role — via the contact form or onboarding, so we can evaluate fit and personalize follow-up.
• Phone number (optional) — via the contact form or email, so we can arrange a call if you prefer one.
• Message / free text — so we understand what you need.
• File attachments (if any) — via email or engagement onboarding, so we can review assets you share (creative briefs, brand guidelines, and similar).
• Engagement data — during client onboarding after MSA execution, so we can deliver contracted services.

We do not operate user accounts, take payments, or host user-generated content on the Site.

2.2 Information Collected Automatically

When you visit the Site, we and our service providers automatically collect limited technical information through server logs and cookies:

• IP address — from server logs, used for security, abuse prevention, and coarse geolocation.
• Browser type and version — from HTTP headers, used for rendering, compatibility, and debugging.
• Device type and operating system — from HTTP headers and client-side JavaScript, used for rendering.
• Pages viewed and time on page — used to understand aggregate site usage (where server-side telemetry is enabled).
• Referring URL — from HTTP headers, used to understand traffic sources.
• Date and time of access — from server logs, used for security and diagnostics.
• Approximate location — derived from IP (country / region only), used for aggregate reporting.

2.3 Information from Third Parties

We do not purchase personal data from data brokers. We may receive limited information about you from:

• Publicly available business sources (for example, your company website or LinkedIn) if we research a prospect before a discovery call.
• Referrers — if a mutual contact introduces us.
• Service providers listed in Section 4 (for example, an email deliverability report from our email provider).

2.4 Cookies and Similar Technologies

The Site uses a small number of cookies and similar technologies, limited to what is needed to operate the Site and remember your consent choices:

• Strictly necessary — session and security cookies that keep the Site running (for example, load balancing, CSRF protection, and remembering your cookie-consent choice). These do not require consent and last from the session up to 12 months.
• Preference — where used, short-lived cookies that remember UI preferences such as language. These last up to 12 months.
• Analytics / performance — we do not currently run analytics cookies on the Site. If this changes, we will update this policy and request your consent before setting non-essential analytics cookies.
• Marketing / retargeting — not used on the Site. We do not set advertising, remarketing, or cross-site tracking cookies.

Where required by law, we request your consent before setting any non-essential cookies. You can review and change your choices at any time via the Cookie Preferences link in the Site footer, or by clearing cookies in your browser. Disabling strictly necessary cookies may affect basic Site functionality.

3. How We Use Your Information

We use personal data only for purposes that are either necessary to run the Site, necessary to respond to you, required by law, or carried out based on your consent. Specifically:

• To respond to your inquiries — when you submit a contact form or email us.
• To evaluate a potential engagement — assessing fit, preparing a proposal, scheduling follow-ups.
• To deliver services under an executed MSA or SOW.
• To operate, secure, and improve the Site — detecting abuse, debugging issues, analyzing aggregate usage, and preventing fraud.
• To send operational and, with your consent, occasional marketing communications — you can unsubscribe at any time via the link in any commercial email.
• To comply with legal, tax, and accounting obligations — for example, retaining invoices and engagement records for the statutory period.
• To enforce our terms and protect our rights — including investigating suspected violations of our Terms of Service.

3.1 Legal Bases for Processing (GDPR)

For visitors in the EEA, United Kingdom, or Switzerland, we rely on the following lawful bases under Article 6 of the GDPR:

• Contractual necessity (Art. 6(1)(b)) — to respond to inquiries and to negotiate or perform a contract, including pre-contract communications at your request.
• Legitimate interests (Art. 6(1)(f)) — for Site improvement, security, and fraud prevention. We balance our interest against your privacy and only process what is necessary.
• Consent (Art. 6(1)(a)) — for any optional analytics cookies (if added in the future) and for marketing emails. You may withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)) — for tax, accounting, and legal record-keeping retained for the statutory period.

3.2 No Automated Decision-Making

We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you, and we do not engage in profiling.

3.3 No Sale or Sharing for Behavioral Advertising

We do not sell your personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under CCPA / CPRA.

4. How We Share Your Information

We share personal data only with the categories of recipients listed below, and only to the extent necessary.

4.1 Service Providers (Subprocessors)

We use a small number of service providers to help us run the Site and our business. Each is bound by a written contract limiting its use of personal data to our instructions.

• Website hosting — Railway (United States), used to serve the Site.
• Transactional email delivery — Resend (United States), used to deliver replies and notifications.
• Spam and abuse protection — Google reCAPTCHA (United States / global), used to block form spam and abuse.
• Professional services — licensed accounting, legal, and payroll providers in the United States, bound by confidentiality obligations.

A current list of subprocessors is available on request from privacy@ranktype.com, and is published at /subprocessors.

4.2 Social Media and Advertising

Our homepage and marketing content may reference third-party platforms (for example, LinkedIn or YouTube). Unless you click through or we explicitly tell you otherwise, embedded content is loaded only after you interact with it, to minimize tracking. We do not run retargeting pixels or advertising trackers on the Site.

4.3 Legal and Safety Disclosures

We may disclose personal data if we reasonably believe disclosure is required or permitted by law, legal process, or government request; necessary to investigate or prevent illegal activity, fraud, or threats to safety; or necessary to enforce our agreements and protect our rights, property, or the rights, property, or safety of others.

4.4 Business Transfers

If RANKTYPE undergoes a merger, acquisition, reorganization, financing, or sale of all or substantially all of its assets, personal data may be transferred to the successor entity as part of that transaction. You will be notified of any material change to how your data is handled.

4.5 With Your Direction or Consent

We may share personal data with other recipients when you direct us to (for example, introducing you to a partner) or when you consent to the sharing.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in Section 3, unless a longer retention period is required by law. When the retention period expires, we delete or anonymize the data.

• Contact-form and inquiry submissions (non-converting) — retained for 24 months from last contact, as a future outreach window and audit trail.
• Client records (during and after an engagement) — retained for the duration of the engagement plus 7 years, for contract, tax, and professional-liability requirements.
• Invoices, tax, and accounting records — retained for 7 years, per IRS and state tax requirements.
• Email correspondence — retained for 3 years from the last message, as business records.
• Server and security logs — retained for 90 days on a rolling basis, for security incident investigation.
• Marketing opt-in / opt-out records — retained for 5 years after last interaction, for CAN-SPAM and GDPR accountability.
• Backups — overwritten on a rolling basis, typically within 35 days, for disaster recovery.

If you exercise your right to deletion (Section 7 or 8), we will delete your personal data, except where we are legally required or permitted to retain it (for example, to comply with tax or legal-hold obligations, to enforce our contracts, or to detect security issues). In that case we will minimize and isolate the retained data.

6. Data Security

We implement technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, or destruction. These include:

• Encryption in transit — the Site is served over HTTPS / TLS.
• Access controls — least-privilege access to internal systems; multi-factor authentication for administrative accounts.
• Reputable vendors — we select service providers with strong security postures and enter into Data Processing Agreements where required.
• Endpoint and account hygiene — up-to-date devices, password managers, and periodic access reviews.
• Incident response — a documented process for detecting, investigating, and responding to suspected security incidents.
• Data minimization — we collect only what we need, and we delete data on the schedule in Section 5.

No method of transmission or storage is 100% secure. If you believe your interaction with us is no longer secure, or you have reason to believe your data has been compromised, please contact us immediately at privacy@ranktype.com.

6.1 Breach Notification

If a personal-data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours of becoming aware (where required under GDPR) and will notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights.

7. Your Rights Under GDPR (EEA, UK, and Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights with respect to your personal data.

• Right of access — obtain confirmation of whether we process your personal data and, if so, a copy of the data and information about how we use it.
• Right to rectification — have inaccurate personal data corrected and incomplete data completed.
• Right to erasure (“right to be forgotten”) — request deletion of your personal data where one of the grounds in Article 17 GDPR applies.
• Right to restrict processing — require us to limit how we process your data in specific circumstances.
• Right to data portability — receive your personal data in a structured, commonly used, machine-readable format, and transmit it to another controller.
• Right to object — object to processing based on legitimate interests, and to object to direct marketing at any time.
• Right to withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
• Right not to be subject to automated decision-making — we do not engage in this type of processing, but the right remains available.
• Right to lodge a complaint — file a complaint with your local supervisory authority (for example, the UK ICO, Ireland’s DPC, or France’s CNIL).

7.1 How to Exercise GDPR Rights

To exercise any of these rights, email us at privacy@ranktype.com. We will respond without undue delay and, in any event, within one (1) month of receipt. We may extend that period by up to two further months where necessary, taking into account the complexity and number of requests, and will inform you of any extension within the first month.

We may need to verify your identity before fulfilling a request. There is no fee for exercising your rights, except where requests are manifestly unfounded or excessive.

7.2 International Data Transfers (from the EEA / UK / Switzerland)

Because we are based in the United States, personal data we process is transferred to, and processed in, the United States and potentially other countries where our service providers operate. Where required, we rely on appropriate safeguards for these transfers, including:

• Standard Contractual Clauses adopted by the European Commission;
• the UK International Data Transfer Addendum for transfers from the United Kingdom;
• the EU-U.S. Data Privacy Framework (and its UK Extension and Swiss-U.S. Framework) where a recipient is self-certified; and
• supplementary technical and organizational measures as appropriate, following the EDPB’s recommendations.

A copy of the safeguards in place may be requested at privacy@ranktype.com.

8. Your Rights Under CCPA / CPRA (California Residents)

If you are a California resident, you have the rights described below under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA”).

8.1 Categories of Personal Information Collected (Last 12 Months)

• (A) Identifiers — name, email, IP address, cookie IDs. Collected from you and automatically.
• (B) Cal. Civ. Code § 1798.80(e) records — business contact info. Collected from you.
• (C) Protected classification characteristics — not collected.
• (D) Commercial information — inquiry history. Collected from you.
• (E) Biometric information — not collected.
• (F) Internet or network activity — browsing on the Site, referrer. Collected automatically.
• (G) Geolocation — coarse, derived from IP. Collected automatically.
• (H) Sensory data — not collected. We do not record audio or video of discovery or client calls.
• (I) Professional or employment information — company, role. Collected from you.
• (J) Non-public education information — not collected.
• (K) Inferences — limited aggregate inferences drawn from the above.

Sensitive personal information: we do not knowingly collect or use sensitive personal information (as defined in Cal. Civ. Code § 1798.140(ae)) through the Site.

8.2 Business and Commercial Purposes

We use each of the categories above for the purposes listed in Section 3: to respond to inquiries, operate and secure the Site, deliver services under an MSA, comply with law, and, with your consent, market our services.

8.3 Sharing of Personal Information

We disclose the categories above to the categories of service providers described in Section 4.1. We do not sell personal information and do not share personal information for cross-context behavioral advertising as those terms are defined under CCPA. We have not sold or shared personal information of minors under 16.

8.4 Your CCPA Rights

California residents have the right to:

• Know — request the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties with whom we have shared it.
• Delete — request deletion of personal information we have collected, subject to statutory exceptions.
• Correct — request correction of inaccurate personal information.
• Opt out of sale / sharing — direct us not to sell or share personal information. Because we do not sell or share, no opt-out mechanism is currently required; if this changes, we will publish a “Your Privacy Choices” link.
• Limit the use of sensitive personal information — direct us to limit use to what is necessary. Not currently relevant — we do not use sensitive personal information.
• Non-discrimination — we will not deny services, charge different prices, or provide a different quality of service because you exercised a CCPA right.

8.5 How to Exercise CCPA Rights

Submit a verifiable consumer request by:

1. Emailing privacy@ranktype.com with the subject line “California Privacy Request,” or
2. Using our contact form and noting “Privacy Request” in your message.

We will confirm receipt within 10 business days and respond substantively within 45 days, with one possible 45-day extension upon notice to you. We will verify your request using information already in our possession; we may ask you to provide additional information to confirm your identity.

You may designate an authorized agent to make a request on your behalf. We may require the agent to provide written authorization signed by you and may contact you to verify the agent’s authority.

8.6 Shine the Light

California Civil Code § 1798.83 permits California residents to request information regarding our disclosure of personal information to third parties for those third parties’ direct marketing purposes. We do not make such disclosures.

9. Children’s Privacy

The Site is intended for business audiences and is not directed to children. We do not knowingly collect personal information from anyone under the age of 16. If you are under 16, please do not use the Site or submit any information through it.

If you are a parent or guardian and believe we may have collected information from your child, please contact us at privacy@ranktype.com and we will promptly delete the data. This Site is not a “website or online service directed to children” under COPPA.

10. Other Jurisdictions

10.1 Other U.S. State Privacy Laws

We extend the core rights described in Section 8 — the rights to know, correct, delete, and opt out of targeted advertising and sale — to residents of other U.S. states that have comparable privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others as those laws come into effect). To exercise these rights, use the contact methods in Section 8.5.

10.2 Canada (PIPEDA)

If you are located in Canada, you have the right to access and correct your personal data and to lodge a complaint with the Office of the Privacy Commissioner of Canada.

10.3 Australia and Other Jurisdictions

We handle personal data in accordance with applicable local laws. If you are located outside the United States and believe your local law provides rights we have not addressed, please contact us and we will work with you in good faith.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements.

• Non-material changes — we will update the “Last updated” date at the top of this page.
• Material changes — we will provide at least 30 days’ advance notice by posting a prominent notice on the Site and, where we have your email address, by emailing you.

What constitutes a “material change” will be determined in our reasonable discretion and in accordance with applicable law. Your continued use of the Site after a change becomes effective constitutes your acceptance of the updated policy. If you do not agree with the updated policy, you should stop using the Site and may exercise your rights under Sections 7 or 8.

12. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or have any privacy-related concerns, please contact us:

12.1 EU / UK Representative

RANKTYPE is a small B2B agency that handles only inquiry data and client engagement data. Based on our current processing activities, we are not required to appoint an EU Representative under Article 27 of the GDPR or a UK Representative under the UK GDPR. If our processing changes such that a representative is required, we will appoint one and list the representative’s details here.

12.2 Data Protection Officer

RANKTYPE is not required to appoint a Data Protection Officer under GDPR Article 37 based on its current processing activities. The privacy function is managed internally and can be reached at privacy@ranktype.com.

12.3 Supervisory Authorities

EEA residents may contact their national data protection authority. UK residents may contact the Information Commissioner’s Office (ICO) at ico.org.uk. California residents may contact the California Privacy Protection Agency at cppa.ca.gov or the California Attorney General.