Rank Your Local

Privacy policy

This policy explains what personal data Rank Your Local processes, for what purposes and under what conditions. This English version is provided for convenience; the French version prevails.

Last updated: 8 July 2026

1. Data controller

The controller of the personal data collected through the Rank Your Local service is Kévin Geiger (trading as Dot Perfect), whose registered office is at 5 rue François Blanchard, 76150 Maromme, France.

For any question about personal data protection, write to support@rankyourlocal.com.

2. Data processed

  • Account data: email, identifier and name associated with the Google account you use to sign in.
  • Profile and subscription data: display name, plan subscribed, Stripe customer and subscription identifiers, billing status.
  • Onboarding and usage data: sign-up progress, tracked keywords, account preferences.
  • Google Business Profile data: connected listing(s), access tokens, reviews, analytics and listing content used through the application.
  • Referral data: referral code linked to a registration, where applicable.
  • Correspondence data: messages sent to support and files voluntarily provided.
  • Technical and security data: technical logs required for authentication and to prevent fraudulent use.

3. Purposes and legal bases

  • Create and administer your account, authenticate you through Google and secure access to the service: performance of the contract and legitimate interest in security.
  • Provide the platform features, including managing your Google Business Profile listing: performance of the contract.
  • Manage subscriptions, payments, invoices and renewals through Stripe: performance of the contract and legal accounting and tax obligations.
  • Manage support and the customer relationship: performance of the contract and legitimate interest in monitoring service quality.
  • Run the referral programme: performance of the contract and legitimate interest in commercial management.
  • Prevent abuse, defend our rights and trace incidents: legitimate interest and, where applicable, legal obligation.

4. Recipients and processors

Data is accessible, within the limits of their remit, to authorized staff responsible for operating the platform, customer support, billing and security. It is also processed by our technical subprocessors, in particular:

  • Supabase for application hosting, authentication and the database.
  • Vercel for hosting the website and the application.
  • Stripe for managing payments, subscriptions and invoices.
  • Google for connecting to and operating your Google Business Profile listing.
  • Resend for sending transactional emails (referrals, account notifications).

5. Transfers outside the European Union

Some of our providers, in particular Vercel and Google, may process data from countries outside the European Economic Area (notably the United States). In that case we ensure appropriate safeguards are in place, in particular through the European Commission's standard contractual clauses or any other mechanism recognized as adequate.

6. Retention periods

  • Account and service data: for the duration of the contractual relationship, then for as long as necessary to manage disputes and applicable obligations.
  • Billing data and accounting records: for the applicable statutory retention period, which may be up to 10 years.
  • Referral data not converted into a customer relationship: no later than 3 years from the last meaningful contact.
  • Technical logs and security data: for the period strictly necessary for security purposes, in principle up to 12 months.
  • Requests to exercise rights and complaints: for the time needed to handle the request, then archived as evidence where applicable.

7. Your rights

Under applicable regulations you have rights of access, rectification, erasure, restriction, objection and portability over your data.

To exercise your rights, write to support@rankyourlocal.com. We may ask for proof of identity where this is necessary to secure the request.

If, after contacting us, you consider that your rights are not respected, you may lodge a complaint with the CNIL, the French data protection authority.

8. Security

We implement appropriate technical and organizational measures to preserve the confidentiality, integrity and availability of data. Despite these efforts, no system offers absolute security, and each user remains responsible for the confidentiality of their Google account.

9. Changes to this policy

This policy may change to reflect developments in the service, our providers or the regulatory framework. The last-updated date shown at the top of the page identifies the applicable version.