Privacy Policy
Last Updated: December 13, 2025
At Outrank ("we," "our," or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.
1. Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Name
- Password (encrypted)
- Account creation date
Client Data
When you add clients to analyze, we collect:
- Client name
- Website URL
- Core services/keywords
- Target location and audience (optional)
Analysis Data
When we run analyses, we collect and store:
- Keyword research data
- SERP competitor information
- Search volume and difficulty metrics
- Content opportunities and briefs
Payment Information
When you make a purchase, payment processing is handled by Stripe. We do not store your credit card information. We only receive:
- Transaction ID
- Purchase amount
- Purchase date
- Last 4 digits of card (for reference only)
Usage Information
We automatically collect certain information when you use our service:
- IP address
- Browser type and version
- Pages visited and features used
- Time and date of visits
- Device information
2. How We Use Your Information
We use the information we collect to:
- Provide our services: Run SEO analyses, generate content briefs, and deliver results
- Process payments: Handle billing and transactions for analysis runs
- Maintain and improve: Monitor performance, fix bugs, and enhance features
- Communicate: Send account updates, analysis completion notifications, and support responses
- Comply with legal obligations: Meet regulatory requirements and respond to lawful requests
- Prevent fraud: Detect and prevent unauthorized access or abuse
3. How We Share Your Information
We do not sell your personal information. We may share your information with:
Service Providers
- Supabase: Database and authentication services
- Stripe: Payment processing
- DataForSEO: Keyword and SERP data
- Anthropic (Claude AI): Content analysis and brief generation
- Vercel: Hosting and infrastructure
Legal Requirements
We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.
Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.
4. Data Security
We implement industry-standard security measures to protect your information:
- SSL/TLS encryption for data in transit
- Database encryption for data at rest
- Password hashing with bcrypt
- Regular security audits
- Access controls and authentication
- Automatic security updates
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
5. Data Retention
We retain your information for as long as your account is active or as needed to provide services. Specifically:
- Account data: Until you delete your account
- Client and analysis data: Until you delete the client or request deletion
- Transaction records: For 7 years (tax and legal compliance)
- Usage logs: For 90 days
After deletion, we may retain certain information in backups for up to 30 days.
6. Your Rights and Choices
You have the following rights regarding your information:
Access and Portability
You can access and export all your data from your account dashboard. Contact us at river@downwindcreative.com for a complete data export.
Correction
You can update your account information and client data at any time from your dashboard.
Deletion
You can delete clients, analyses, and briefs individually. To delete your entire account and all associated data, contact us at river@downwindcreative.com.
Marketing Communications
You can unsubscribe from marketing emails by clicking "Unsubscribe" in any email or updating your preferences in account settings.
Do Not Track
We honor Do Not Track (DNT) browser settings and will not track your activity for advertising purposes.
7. Cookies and Tracking
We use essential cookies and similar technologies to:
- Authentication: Keep you logged in
- Preferences: Remember your theme and settings
- Security: Prevent fraud and abuse
- Analytics: Understand how our service is used (anonymized)
You can disable cookies in your browser settings, but some features may not work properly.
8. Third-Party Links
Our service may contain links to third-party websites (e.g., competitor sites in analysis results). We are not responsible for the privacy practices of these websites. We encourage you to review their privacy policies.
9. Children's Privacy
Our service is not intended for children under 13. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately at river@downwindcreative.com.
10. International Users
Our service is hosted in the United States. If you access our service from outside the U.S., your information will be transferred to, stored, and processed in the U.S.
By using our service, you consent to this transfer. We comply with applicable data protection laws, including GDPR for EU users.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our website. Your continued use of the service after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Downwind Creative LLC
Email: river@downwindcreative.com
Response time: Within 48 hours