Rankfield
How it worksWhat it readsPlansBlog
Sign inFree audit

Rankfield — Privacy Policy

Last updated: 2 November 2026.

Rankfield ("Rankfield", "we", "us") runs rankfield.io. You describe your business, optionally give us your website and social handles, and we return a ranked list of video ideas with the evidence behind each one. Rankfield is operated by our team. For anything in this policy, including an access or deletion request, write to hello@rankfield.io.

This policy says what personal data we collect, why, who helps us handle it, how long we keep it and what you can do about it. It stays short on purpose. We update it when we start collecting a new kind of data or using a new kind of provider.


1. What we collect, and why

  • Your account. Your email address, and your Google account identifier if you sign in with Google. Used to sign you in, to keep your audits and to contact you about them.
  • What you tell us. The answers you give in the intake form and the questions around it: your business, goals, what you can film, the competitors you name (as account handles), and any notes you add. If you use the microphone, your browser turns speech into text and we receive only the text, never audio.
  • Public information we read. Your website, your public social accounts and posts, the public accounts of competitors you name, and other public accounts comparable to yours that we find. We read public posts, videos, captions and comments to produce your analysis. We do not keep these as a collection. We keep what we derive from them: transcripts of your own videos, short summaries, counts, labels for format and hook, themes in our own words, and links and handles of the accounts involved. We do not build profiles of the people who appear in those posts.
  • A one-time search of your niche. During an audit we run one search of public videos on the platforms you use, by keywords and hashtags drawn from your brief and your own captions. We keep only counts from it (how many videos, typical views, formats and lengths). We keep no creator names, handles, links, captions or videos, and we do not repeat the search over time.
  • The audit itself. The ideas, evidence and notes we produce for you, the choices you make on them (such as marking an idea as filmed) and the industry you say you are in.
  • Payment. Paid plans are bought through LemonSqueezy, which is the merchant of record. It takes your card details; we never see or store them. We receive your plan, its status and dates.
  • Emails we send. Your sign-in code, notices about your audits and account, and news or tips only if you ask for them. We keep a record of which emails we sent.
  • Product analytics. We use Mixpanel to see how people use the site: pages and steps viewed, buttons pressed, how long a step took, and session replays, which mask what you type. We use no advertising trackers.
  • Technical data. Our host receives your IP address, browser details and request times, and we use limits per account and per day to prevent abuse.
  • Where you came from. The link or page that brought you to us (such as campaign tags), kept to see which channels work.

We do not ask for special-category data. Please do not enter it in free-text fields. We never ask for the passwords of your social accounts.


2. Who helps us handle it

We use these providers. Each receives only what it needs for its job.

Provider For
Supabase Database and sign-in
Vercel Website hosting
Oracle Cloud, GitHub Running audits
Google (sign-in; Gemini) Signing in; watching and transcribing public videos
OpenAI, Anthropic Writing and checking the analysis. They receive your answers and the public material above
Scrape Creators Reading public social accounts and posts
Resend Sending email
LemonSqueezy Payments
Calendly Booking a call with our team
Mixpanel Product analytics and session replay

We do not sell your personal data, and we do not use it to train our own models. One customer's data does not appear in another customer's audit. Our team can read an audit to support you or fix a problem; each such read is logged. We may disclose data where the law requires it.


3. Where it is held

Our database and hosting are in the United Kingdom, and our own job server is in Sweden. The AI, email, analytics and payment providers above operate mainly in the United States. Where the law requires it, we put an appropriate transfer mechanism in place with them.


4. How long we keep it

  • Your audits and account are kept while your account is open. When you delete your account we delete them within 30 days.
  • An example audit we prepared for you before you signed up is deleted 30 days after we made it.
  • Raw posts, videos, comments and provider responses are not kept once a run has finished. The derived material described in section 1 is kept with the audit.
  • Support-read logs are kept for 12 months.
  • Analytics and payment records are kept as long as the provider's settings and our legal and tax duties require.

5. Your choices and rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our use of your personal data, to receive a copy of it and to withdraw consent.

  • Delete your account: Account, then Your data, then "Delete account and data". Your account is locked straight away; if you change your mind, email us within 30 days.
  • Anything else: email hello@rankfield.io from the address you signed in with. We aim to answer within 30 days.
  • Marketing email: switch it off in Account, or use the link in any email.
  • You can complain to your local data-protection authority.

If other people still use a workspace you own, we will ask you to hand it over first, and if it has a running paid plan, to cancel it, so you are not billed after your account is gone.


6. Cookies and similar storage

We use cookies and browser storage to keep you signed in, to remember your chosen brand and theme, to remember where you first came from, and for Mixpanel analytics. We do not use advertising cookies.


7. Children

Rankfield is a tool for businesses and is not directed to children. If you believe a child has given us personal data, contact us and we will delete it.


8. Security

Access to your data is limited to you, the members of your workspace and our team, and is protected by row-level access rules in our database. Secrets are held in environment configuration. No system is perfectly secure, so we cannot guarantee absolute security.


9. Changes

We update this policy when we start collecting a new kind of data or using a new kind of provider. The date at the top is the current version.


10. Contact

Questions, or an access or deletion request: hello@rankfield.io.

RankfieldBlogResourcesPrivacyTermsRefundsContact