Privacy Policy

Last updated: 13 October 2026. This policy explains what Rankomodo (“we”) collects through Recalytics at recalytics.com, why, and the choices you have.

1. What we collect

When a website owner (“you”) connects a Google account, and only after you approve it on Google's consent screen, we receive:

• your Google account's e-mail address and a Google account identifier, to show which account is connected;
• Google Search Console data (scope webmasters.readonly): search queries, pages, clicks, impressions, average position, country/device splits, index and sitemap status of the sites you can access;
• Google Analytics 4 data (scope analytics.readonly): sessions, users, traffic sources, landing pages, events and conversions of the properties you can access;
• an OAuth refresh token, which lets us read the data above again next month without asking you to sign in.

We ask only for read-only scopes. We do not read Gmail, Drive, Calendar, contacts or any other Google service, and we cannot change anything in your Search Console or Analytics.

2. How we use it

We use Google user data only to produce the SEO performance reports you asked for, shown to you and to the agency that serves you. Specifically we compute totals, trends and comparisons, and write the report's narrative and recommendations. We do not use it for advertising, we do not sell it, we do not build user profiles, and humans at Rankomodo read it only when needed to prepare your report, to give you support, or to follow the law.

Aggregated metrics may be sent to an AI language-model provider only to help write the narrative of your report. Such providers act as our processors for that single purpose. We do not use Google user data to develop, improve or train generalized AI or machine-learning models, and we do not allow our providers to.

3. Limited Use

Rankomodo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Who else sees it

• The SEO agency that prepares your report, because the report is the product;
• our infrastructure provider (Cloudflare) and, for the narrative only, the AI provider described above;
• authorities, when the law requires it.

We do not sell or rent your data.

5. Storage, security and retention

The refresh token is encrypted (AES-GCM) before it is stored, and access tokens are short-lived. Data is stored with Cloudflare. Finished reports (which contain figures, not your credentials) are kept in your private portal until you or your agency ask for deletion. When you disconnect, we revoke the token at Google and delete it from our systems at once.

6. Your choices

• Revoke access at any time at myaccount.google.com/permissions;
• ask us to disconnect your account, or to delete your reports and any stored data;
• ask what we hold about you.

7. Children

The service is for businesses and is not directed at children.

8. Changes

If this policy changes materially we will update this page and its date.

9. Contact

Use the contact of the agency that sent you the connect link.

Home · Pricing · Privacy Policy · Terms of Service · Bahasa Indonesia