Privacy at RankSprig.

Product privacy notice · October 2026

What the workspace stores

Your account email, profile preferences, websites and connected service settings are stored to operate your workspace. Connected website pages, Search Console metrics, agent tasks, proposals, approval records and change snapshots are saved so you can inspect and recover your work. Billing records retain subscription, transaction and refund references; PayPal handles payment authorization.

Your credentials and AI requests

Saved API keys, application passwords and Google tokens are encrypted. They are used to call the services you connect. Relevant website content, business context and search evidence may be sent to your chosen AI provider when you run an agent task. Credentials are not included in model prompts or returned in ordinary connection responses. Your chosen provider’s data policies apply to those requests.

Search Console access

Search Console access is read-only and limited to resources you authorize. Disconnecting Google in Settings revokes its authorization before removing the saved credential. Other sites using the same Google grant may also need reconnection.

Browser storage and analytics

Authentication and request-protection cookies keep your session secure. Browser storage remembers language, selected website and your analytics choice; a payment request identifier prevents duplicate submissions. Google Analytics 4 and 51.LA load on public marketing pages only after you allow optional analytics. You can decline without affecting sign-in or paid features, and change or withdraw your choice through Analytics preferences in the footer. These providers may receive IP addresses, browser and device data and set analytics cookies. Advertising personalization and Google signals are disabled. Withdrawing consent stops future optional analytics loading; contact support for requests about data already collected.

Account security and usage records

RankSprig records registration, email confirmation, sign-in results, sign-out and visits to known product pages for account security and product operations. Records can include account ID, UTC time, page path without query parameters, visitor IP, an IP-country estimate from local GeoLite2/IP2Region databases, User-Agent, estimated device category, browser and operating system. Browsers can report screen and window dimensions in CSS pixels, pixel ratio, language and time zone. These client values may be inaccurate or absent. A signed cookie remembers this browser environment for up to eight hours so account events can include it; it does not contain a visitor tracking ID. Passwords, tokens and request bodies are not stored in these records. Anonymous visits are not assigned a persistent tracking identifier or retrospectively linked to an account. Server checks are marked separately and excluded from visitor statistics by default. Detailed records are retained for up to 90 days and account-linked daily usage summaries without IP or User-Agent for up to 365 days. Access is restricted to administrators. IP location identifies an estimated network location, not a person's nationality or precise location. Contact support@ranksprig.com for access, deletion or retention requests.

Disconnecting is not account deletion

Disconnecting removes the saved integration credential and stops dependent future work. Historical analytics and change records are retained according to the retention periods described above. To request account deletion, a data export or removal of connected Google data, email support@ranksprig.com from your registered email address. We verify account ownership before processing a request and explain any records that must be retained for billing, security or applicable legal obligations.

Restricted operations integration

An authenticated server-to-server integration makes account identifiers, display names, email addresses, registration times and aggregate registration counts available to the operator’s ToolAI administration system for account support and product operations. Access requires a server-held key; this is not a public user directory. Contact support@ranksprig.com for access or deletion requests.