Privacy Policy

1. Who we are

AltoRank (“we”, “us”) operates https://altorank.co. The data controller is SUPALABS SRL (VAT 04596950248), registered office Via Adige 52, 36057 Arcugnano (VI), Italy, a company incorporated in Italy and therefore subject to the GDPR as a matter of establishment, not only of market. Reachable at [email protected]. For data-processing agreements (DPAs), contact us at the same address.

2. Data we collect

• Account data: name, email, company, and billing details you provide on signup.
• Content & client data: the workspaces, keywords, and content you create, and credentials you connect (e.g. CMS integrations), processed to provide the service.
• Usage data: log data, device/browser information, and product analytics to operate and improve the service.

3. Legal bases (GDPR Art. 6)

We process personal data to perform our contract with you (providing the service), on the basis of legitimate interests (security, product improvement), to comply with legal obligations, and, where required, with your consent (e.g. non-essential cookies).

4. Sharing & sub-processors

We share data with vetted sub-processors that help us run the service (e.g. hosting, payments, analytics, email). A current list is available on request at [email protected]. We do not sell personal data.

5. International transfers

Where data is transferred outside the EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses. The primary database runs in Ireland (eu-west-1), inside the EEA. Application servers currently run in the United States, so some processing happens outside the EEA under the safeguards above. Pinning servers to an EU region requires a paid hosting plan; we will update this section, and only then, once the header confirms it.

6. Retention

We keep personal data for as long as your account is active and as required to meet legal, accounting, or reporting obligations, then delete or anonymise it.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, and port your data, to object to processing, and to lodge a complaint with your supervisory authority. To exercise these, contact [email protected].

8. Cookies

We use essential cookies to run the service and, with consent, analytics cookies to understand usage. You can control non-essential cookies via your browser or our cookie settings.

9. Google Search Console and Google Analytics data

If you connect a workspace to Google, AltoRank requests two read-only scopes: webmasters.readonly for Search Console and analytics.readonly for Analytics. We use them to read the clicks, impressions, average positions, pageviews and sessions for the sites you choose, so the dashboard and reports can show how your published articles perform and so the content plan starts from what the site already ranks for rather than from an estimate. We never request write access, and there is no scope that would let us change or publish anything in your Google account.

We store the resulting metrics against your workspace, plus an OAuth refresh token encrypted at rest (AES-256-GCM). We never see or store your Google password. This data is not sold, is not shared with third parties beyond the hosting sub-processor that runs our database, is not used for advertising, and is not used to train models. You can disconnect at any time from Integrations, which removes the stored token, or revoke access directly at myaccount.google.com/permissions; deleting a workspace deletes its metrics with it.

AltoRank’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

10. Contact

Questions about this policy or your data: [email protected].