Privacy Policy

Last updated: April 17, 2026

Overview

RankPilot ("we", "us", "our") provides local SEO services including blog publishing and Google Business Profile management for small businesses. This policy explains how we collect, use, and protect your information.

Information We Collect

Business name, contact email, and website URL provided during sign-up or onboarding
Google Business Profile location data (when you grant us manager access)
Google Search Console access (when you add us as a verified owner)
Payment information processed securely through Stripe — we do not store card numbers
Website content access credentials (WordPress API keys) used solely to publish blog posts

How We Use Your Information

To publish SEO blog content to your website on your behalf
To post updates to your Google Business Profile
To monitor your search rankings and report on progress
To send service-related emails (welcome, billing, reports)

We do not sell your information to third parties.

Google API Data

RankPilot uses Google OAuth to access Google Business Profile on your behalf. We store only the OAuth tokens required to post on your behalf. We do not access, store, or share any Google account data beyond what is necessary to publish GBP posts. Access can be revoked at any time by removing RankPilot from your Google Business Profile managers.

Data Storage

Your data is stored securely in Supabase (hosted on AWS). Access is restricted to authorized RankPilot systems and personnel only.

Third-Party Services

We use the following third-party services:

Stripe — payment processing
Google APIs — Business Profile and Search Console access
Resend — transactional email delivery
Supabase — data storage
Vercel — application hosting

Your Rights

You may request deletion of your data at any time by emailing chad@chadraylee.com. We will remove your information within 30 days.

Contact

For any privacy-related questions, contact:
Chad Lee — chad@chadraylee.com
RankPilot, tryrankpilot.com