This version is being reviewed by a legal advisor. Changes will be announced on this page.
Rankomodo is a service by Simplicode (“we”), based in Indonesia. This policy explains what data the service handles, why, who else processes it, and what you can ask of us. Write to privacy@rankomodo.com for anything in it.
This policy applies to the website and to customer accounts.
What we collect
| Data | Why | Kept for |
|---|---|---|
| Account data (name, email, password hash or Google sign-in ID) | To run your account and send service email | While the account exists |
| Websites you add (URL, crawl results of public pages, detected logo, favicon and name) | To audit the site and build your task list | While the project exists |
| Google Search Console and Google Analytics data (read-only, see below) | To rank tasks by real traffic and to report results | While the connection exists; raw rows up to 16 months |
| Bing Webmaster data (read-only) | Same as above, for Bing | Same as above |
| WordPress connector data (site URL, connector key, the previous value of each field we change) | To apply approved changes and to roll them back | While the connector is installed, plus 90 days |
| Telegram chat ID of approvers | To send change sets for approval | Until you remove the approver |
| Billing data (plan, invoices, payment status) | To bill you and meet tax and accounting rules | As long as the law requires |
| Technical logs (IP address, user agent, request time) | Security and troubleshooting | 30 days |
Free-trial data is deleted 30 days after the trial ends unless you subscribe.
We do not collect card numbers. Card payments go to Paddle; QRIS and virtual-account payments go to Pakasir.
Google user data
Rankomodo asks for read-only access to Google Search Console and, if you choose, Google Analytics. We use that data only to show your SEO tasks, rank them, and report results to you and the people you invite. We do not sell it, use it for advertising, or use it to train AI models. Search queries from Search Console are not sent to an AI provider unless you turn that on for a project.
Rankomodo’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect Google at any time in the app or at myaccount.google.com/permissions. Access tokens are stored encrypted and deleted when you disconnect.
Cookies
The website uses Google Analytics 4 to count visits and see which pages help. It is loaded through Cloudflare Zaraz, so the hits are sent from Cloudflare’s network, visitor IP addresses are hidden from Google, and no script from a third party runs in your browser. This sets first-party analytics cookies (for example _ga). The website sets no advertising cookies. It picks the language and currency from the country of your IP address, as reported by Cloudflare; the address itself is not stored. When you switch language with a link on the site, a lang cookie remembers your choice for one year. The app uses one session cookie (HttpOnly, needed to stay signed in).
Who else processes data
| Provider | Role | Location |
|---|---|---|
| Google (Analytics 4, via Cloudflare Zaraz) | Website visit statistics | United States |
| Cloudflare | DNS, CDN and security for rankomodo.com | Global network |
| OVHcloud | Server that runs the app and the database | Data center region named in the app |
| Paddle | Reseller and payment processor for card payments in USD | United Kingdom and United States |
| Pakasir | Payment processor for QRIS and virtual account in IDR | Indonesia |
| kirim.id | Transactional email | Indonesia |
| Apify | Public search-result data for keyword checks (no personal data sent) | European Union |
| Telegram | Delivers approval messages to the approvers you add | Global |
Before we use an AI provider to draft fixes, we name it here together with the region where it processes data.
Your rights
Under Indonesia’s Personal Data Protection Law (UU PDP) and, where it applies, the EU GDPR, you can ask to access, correct, delete or export your data, to withdraw consent, and to object to processing. Write to privacy@rankomodo.com from the email on your account. Some billing records must be kept for tax reasons even after you delete your account.
Security
See the security page for how data is protected and how to report a vulnerability.
Changes
We will announce material changes by email to account owners at least 14 days before they take effect, and update the date on this page.