Crecerank Privacy Policy

Last updated: July 1, 2026

At Ranker Studio, we value your privacy and take the protection of your personal data very seriously. This policy explains how we collect, use, share, and protect information when you use CreceRank (crecerank.com and app.crecerank.com).

Data Controller: Ranker Studio
Contact: hola@rankerstudio.com

Information We Collect

In order for you to use our GEO monitoring tool, we need to process certain data:

Account and Registration Data

• Name, email address, and, when applicable, billing information.
• If you sign in with Google, we receive your name, email, and profile picture from Google (openid, email, and profile scopes) solely to authenticate you and create or link your account in CreceRank.

Platform Usage Data

• Information about how you interact with the app (pages visited, actions on the dashboard, preferences).
• IP addresses, browser type, device, and technical logs necessary for security and diagnostics.

Monitoring Settings

• Keywords, domains, competitors, and other parameters you input for the system to perform tracking in generative response engines and AI assistants.

Google Analytics 4 Data (optional integration) If you voluntarily connect your Google Analytics 4 (GA4) account from the dashboard, CreceRank requests read-only access to the scope https://www.googleapis.com/auth/analytics.readonly.

With that authorization, we can query, on your behalf and only for the GA4 property you choose:

• Aggregated traffic metrics (for example, sessions and page views).
• Session sources (for example, to identify traffic coming from AI assistants).
• Lists of GA4 accounts and properties that your Google user already has access to, so you can select which one to link.

We do not access personally identifiable information of your website visitors through GA4 beyond what Google exposes in aggregated reports according to your Analytics settings. We do not modify your GA4 settings or write data to your property.

To keep the connection active, we securely store an OAuth refresh token associated with your brand in CreceRank. You can disconnect the integration at any time from the dashboard or by revoking access in your Google account (see the section “Your rights and data control”).

Use of Information

Your data is used exclusively to:

1. Give you access, operate, and provide support on the platform.
2. Process payments and manage your subscription.
3. Perform GEO analysis, visibility monitoring in AI, and dashboard functions that you request.
4. Display traffic metrics on the dashboard when you connect GA4 (including analysis of sessions attributed to AI sources).
5. Send you operational service communications or updates from Ranker Studio (you can unsubscribe from commercial communications at any time).
6. Improve the accuracy, security, and stability of the product.

We do not sell or rent your personal information or the analytics data we consult on your behalf.

Share, transfer, and disclose Google user data

This section applies to all information we obtain from Google APIs when you log in with Google or connect Google Analytics 4 (GA4), including: name, email, profile picture, OAuth tokens (access token and refresh token), GA4 account/property listings, and aggregated metrics queried through the Google Analytics Data API.

With whom we do not share Google data

We do not sell, rent, lease, or disclose Google user data to advertisers, data brokers, advertising networks, or third parties for their own marketing or advertising purposes.

Data obtained from Google is not used to train general AI models or to create profiles for purposes other than those described in this policy.

With whom data may be shared or transferred (limited cases)

Only under the following circumstances, and always under our instructions and confidentiality agreements:

• Infrastructure providers (e.g. Render, PostgreSQL database hosted on Render): process data stored or transmitted by our platform, including encrypted OAuth tokens and technical logs. Purpose: host and operate CreceRank; act as data processors and do not use Google data for their own purposes.

• Competent authorities: only as strictly required by a court order, valid legal request, or regulatory obligation. Purpose: compliance with the law.

• With your explicit consent: the data necessary for the specific function you authorize. Purpose: only for that specific function you agree to separately.

We do not transfer Google user data to payment processors (Polar), transactional email services (Resend), or other providers that do not need that data to provide the service. These third parties receive only the billing or contact information strictly necessary for payments or operational communications, without access to OAuth tokens or GA4 metrics.

International Transfers

Our infrastructure providers may process data on servers outside of Uruguay (for example, in the United States). In those cases, we require contractual and technical safeguards in accordance with applicable regulations.

Limited Use (Google API Services User Data Policy)

The use of data obtained from Google APIs complies with the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements:

• Google data is used solely for the functions of CreceRank that you see in the app (authentication, GA4 dashboard).
• It is not sold or used for third-party advertising.
• It is not transferred to third parties except in the limited cases described above (contracted infrastructure, legal obligation, or explicit consent).

Also consult Google’s Privacy Policy: https://policies.google.com/privacy

Third-party services and Google APIs

CreceRank uses external providers to operate the service. These providers process data only according to our instructions and their own policies:

• Google (OAuth / Sign-In): sign in with your Google account
• Google Analytics Data API (GA4): reading aggregated metrics when you connect GA4
• Render / PostgreSQL: application hosting and data storage (incl. encrypted OAuth tokens)
• Polar: subscription billing (without access to Google data)
• Resend: sending transactional notifications via email (without access to Google data)

For details on how we share or transfer the data obtained from Google, see the section «Share, transfer, and disclose Google user data» above.

Legal basis and storage

We operate under Law No. 18.331 on Personal Data Protection and «Habeas Data» Action of the Eastern Republic of Uruguay.

Your data is stored on secure servers with industry-standard encryption. GA4 access tokens are stored encrypted and only while you keep the integration active.

We retain your information while you have an active account or as necessary to fulfill legal obligations, resolve disputes, or enforce our agreements. You can request the deletion of your account and associated data (see below).

Your rights and data control

You have the right to access, rectify, delete, or limit the processing of your personal data, and to object to certain uses, to the extent permitted by applicable law.

To exercise these rights, write to us at hola@rankerstudio.com.

Revoke access to Google and GA4

You can revoke the permissions that CreceRank has over your Google account at any time:

1. Visit https://myaccount.google.com/permissions
2. Select CreceRank (or the name of the registered OAuth app in Google Cloud)
3. Choose «Remove access»

You can also disconnect GA4 from the CreceRank dashboard. Upon revoking access, we remove or invalidate the associated tokens in our systems within a reasonable timeframe.

Security and protection of sensitive data

We apply technical and organizational measures to protect your information, with special emphasis on the sensitive data described below.

Sensitive data we protect

• GA4 OAuth tokens (refresh token) — High-risk access credential. Measures: symmetric encryption (Fernet) before persisting in the database; storage only while the integration is active; deletion or invalidation upon disconnecting GA4 or revoking permissions in Google.

• OAuth access tokens (access token) — Short-lived credential. Measures: used in memory during the API query session; not stored persistently.

• Google profile data (name, email, photo) — Personal data. Measures: transmission exclusively via HTTPS/TLS; access restricted to authorized Ranker Studio personnel with operational necessity.

• GA4 metrics queried — Aggregated analytics data. Measures: transmission via HTTPS/TLS; access limited to your account and the linked brand; read-only scope (analytics.readonly); no data is modified in your GA4 property.

• Account and billing data — Personal / financial data. Measures: encryption in transit; hashed passwords (when email login applies); payment processing delegated to Polar (PCI-compliant).

Implemented protection mechanisms

1. Encryption in transit: All communication between your browser, our API, and Google services uses HTTPS/TLS.
2. Encryption at rest for OAuth credentials: GA4 refresh tokens are encrypted with a key derived from our application secret before being stored in PostgreSQL.
3. Principle of least privilege: The GA4 integration only requests the read scope (https://www.googleapis.com/auth/analytics.readonly). Google sign-in uses only openid, email, and profile.
4. Access control: GA4 features and associated tokens are linked to your account and brand; only authorized users can view the metrics of their property.
5. Revocation and deletion: You can revoke access at https://myaccount.google.com/permissions or disconnect GA4 from the dashboard; in both cases, we invalidate the tokens in our systems.
6. Secure infrastructure: Servers and databases hosted on Render with industry security standards, environment isolation, and managed backups.
7. Logging and monitoring: We maintain technical logs to detect anomalous access and diagnose security incidents.
8. Limited internal access: Only Ranker Studio personnel with a legitimate need can access production systems, under confidentiality obligations.

No system is 100% infallible. If we detect a security incident that significantly affects you, we will inform you in accordance with applicable regulations and take corrective measures.

Minors

CreceRank is aimed at professionals and companies. We do not intentionally collect data from individuals under 18 years old. If you believe a minor has provided us with data, please contact us to have it removed.

Chrome Extension: Crecerank + Reddit Assistant

The extension Crecerank + Reddit Assistant is part of the products of CreceRank / Ranker Studio. This section specifically applies to that extension.

What data does the extension use

• Claude API key (Anthropic): you enter it. It is stored only in your browser (chrome.storage.local). We do not send it to CreceRank or Ranker Studio servers.
• URL and content of the Reddit thread you are viewing or paste into the extension: it is read from Reddit to generate responses.
• Extension preferences (model, tools to mention, mention style, and extra instructions): are stored only in your browser.

Who it is shared with

• Reddit: to read the public thread you are analyzing.
• Anthropic (Claude API): to generate and rewrite comments. The handling of that data is governed by Anthropic’s privacy policy.
• CreceRank / Ranker Studio: the extension does not send your API key, threads, or comments to crecerank.com or app.crecerank.com.

Chrome Permissions

• storage — to store your API key and preferences in the browser.
• tabs — to detect the URL of the active Reddit thread.
• sidePanel — to show the assistant’s side panel.
• Access to *.reddit.com and api.anthropic.com — to read public threads and call the Claude API.

Retention and deletion

The extension’s data is stored only in your browser. You can delete it by uninstalling the extension or clearing the extension’s storage in Chrome.

Changes to this policy

We may update this policy to reflect changes in the product or legal requirements. We will post the current version at https://crecerank.com/politicas-de-privacidad/ with the date of «Last updated» at the beginning of the document.

Contact

Ranker Studio — CreceRank
Email: hola@rankerstudio.com
Web: https://crecerank.com