Privacy Policy

1. Data Controller

The data controller is NUTRIGEN SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with headquarters in Wrocław, ul. Tadeusza Kościuszki 25/5, 50-011 Wrocław, Poland, Tax ID (NIP): 8971881125, REGON: 386589960, KRS: 0000851334, email: [email protected]

2. Data We Collect

• Account Information: Name, email address, password (hashed), company name
• Google OAuth Data: Google account email, profile information, Google Search Console access tokens
• Search Console Data: Website URLs, search queries, clicks, impressions, CTR, positions from your Google Search Console properties
• Billing Information: Processed by Lemon Squeezy (payment processor) - we do not store credit card details
• Usage Data: IP address, browser type, device information, pages visited, features used
• Cookies & Tracking: Session cookies, authentication tokens, analytics cookies (Google Analytics)

3. How We Use Your Data

• Service Provision: To provide RankVault services, sync Search Console data, generate reports
• Authentication: To verify your identity and secure your account
• Communication: To send service updates, security alerts, and respond to inquiries
• Billing: To process payments via Lemon Squeezy and manage subscriptions
• Analytics: To improve our services, understand usage patterns, and fix bugs
• Marketing: To send promotional emails (with your consent - you can opt out anytime)

4. Data Sharing & Third Parties

We share your data only with trusted service providers:

• Google: For OAuth authentication and Search Console API access
• Lemon Squeezy: Payment processing and subscription management
• Cloud Hosting: Secure servers for data storage (encrypted at rest and in transit)
• Email Service: For transactional and marketing emails

5. Cookies & Tracking Technologies

We use cookies for:

• Essential Cookies: Required for authentication and core functionality
• Analytics Cookies: Google Analytics for usage statistics (can be disabled)
• Preference Cookies: To remember your settings (language, dark mode)

6. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Export your data in CSV/JSON format
• Restriction: Limit how we process your data
• Objection: Object to marketing communications
• Withdraw Consent: Revoke consent for data processing at any time

To exercise your rights, contact us at [email protected]

7. Data Security

• Encryption: SSL/TLS for data in transit, AES-256 for data at rest
• Access Control: Role-based permissions, two-factor authentication (2FA)
• Regular Audits: Security assessments and vulnerability testing
• Secure Infrastructure: Firewalls, intrusion detection, regular backups

8. Data Retention

• Active Accounts: Data retained while account is active
• Inactive Accounts: 30 days after cancellation (then permanently deleted)
• Legal Obligations: Some data retained for tax/legal purposes (up to 7 years)

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or dashboard notification.

10. Contact Us

If you have questions about this Privacy Policy, contact us at [email protected] or write to: NUTRIGEN Sp. z o.o., ul. Tadeusza Kościuszki 25/5, 50-011 Wrocław, Poland.