This Privacy Policy explains how AI RankSEO ("we", "us") collects, uses and protects the limited personal data you provide when buying digital products through ai-rankseo.com.
1. Who we are
AI RankSEO is an independent seller of digital products. For any privacy question, contact us at info@ai-rankseo.com.
2. What we collect
- Order data: your email address and an order number. That is all we need to deliver your purchase and provide support.
- Payment data: payments are processed by PayPal. We never see or store your card or bank details — PayPal handles that under its own privacy policy.
- Technical metadata: IP address, browser user-agent and a timestamp — stored only for security (rate limiting, fraud detection).
- Cookies: an essential session cookie (PHPSESSID) for CSRF protection. See our Cookie Policy.
3. How we use it
- To deliver your digital product and its download link.
- To reply to support requests about your order.
- To prevent spam, fraud and abuse.
- To comply with legal and tax obligations.
We do not sell your data, share it with marketing partners, use it for retargeting ads, or include it in any third-party profile.
4. Legal basis (GDPR Art. 6)
- Contract performance for processing and delivering your order.
- Legitimate interest for security logs and answering support requests.
- Consent for any optional communication (revocable any time).
- Legal obligation for tax/accounting records.
5. Retention
- Order records (email + order number): automatically deleted 90 days after the order, unless a longer period is required by tax law.
- Security logs: 30 days.
6. Your rights
Under GDPR you have the right to: access, rectification, erasure, restriction, data portability, and to object to processing. Email info@ai-rankseo.com to exercise any of these. We reply within 30 days.
You also have the right to complain to your local data protection authority.
7. Data location & processors
Order data is stored on servers located in the European Union. We use PayPal to process payments and Telegram (Cloud API, encrypted in transit) to receive order notifications. No transfers to third countries occur without GDPR-compliant safeguards.
8. Security
HTTPS everywhere (HSTS preload), CSRF protection on every form, two-tier rate limiting, content-security headers and bot detection. Order data is stored in private directories with file-level access controls.
9. Changes
We'll post any policy changes on this page with an updated "Last updated" date. Material changes will be highlighted at the top.