We collect your email, phone number, website and keyword — the four things you type into the form. We use them to send your report and to follow up about it. We do not sell them, rent them, or add you to a marketing list you did not ask for. Email us and we will delete everything.
1. Who we are
This site is operated by RankSurge. For anything in this policy, contact [email protected].
2. What we collect
| Data | Where it comes from | Why we have it |
|---|---|---|
| Email address | The check form | To send your result, your report, and your receipt |
| Phone number | The check form | To reach you about your order |
| Website address | The check form | It is the subject of the audit |
| Keyword | The check form | To check where that site ranks |
| Page URL and timestamp | Automatically on submit | To know which page a request came from |
| Payment reference and amount | The payment processor | To match a payment to an order and to issue refunds |
We never see or store your card details. Card numbers, CVV and bank credentials are entered on the payment processor's own systems and are never transmitted to us. We receive only a payment id, the amount, and whether it succeeded.
We do not run analytics, advertising pixels, or third-party trackers on this site.
3. Why we are allowed to hold it
- To perform our contract with you — we cannot deliver a report without an email address and a website to analyse.
- Your consent — you gave us these details by submitting the form, and you can withdraw that consent at any time.
- Legal obligation — tax and accounting rules require us to keep records of sales.
4. Who else touches your data
| Who | What they get | Why |
|---|---|---|
| Google (Sheets, Apps Script, Gmail) | Everything you submit | Where our records are stored and where our email is sent from |
| Razorpay, or the payment provider shown at checkout | Your email, phone and payment details | To take the payment and issue your receipt |
| A search-data provider | Your website and keyword only — never your email or phone | To look up live ranking positions, when that feature is enabled |
| YouTube | Nothing, unless you press play on the video | The video is embedded in privacy-enhanced mode; YouTube may set storage once you start playback |
That is the complete list. We do not share your data with anyone else, and we do not sell it under any circumstances.
5. Cookies
This site sets no advertising or analytics cookies. The embedded video uses YouTube's privacy-enhanced mode, which does not store anything until you press play. Our staff-only admin page stores a sign-in token in the administrator's own browser; it is never used for visitors.
6. How long we keep it
- Enquiries that never became orders: deleted after 12 months.
- Orders and their records: kept as long as tax and accounting law requires, then deleted.
- Anything you ask us to delete: removed within 30 days, except records we are legally required to retain.
7. Your rights
Wherever you live, we will honour these:
- Ask what we hold about you, and get a copy.
- Have anything inaccurate corrected.
- Have your data deleted.
- Withdraw consent and stop hearing from us.
- Object to how we are using it.
Email [email protected] from the address you signed up with. We will reply within 30 days, and we will not ask you why.
If you are in India, the Digital Personal Data Protection Act 2023 gives you these rights and you may complain to the Data Protection Board. In the UK or EU, the UK GDPR and GDPR apply and you may complain to your national supervisory authority. Please raise it with us first — we would rather fix it directly.
8. Security
Records are held in Google Workspace, protected by account access controls and two-factor authentication. Payment credentials and API secrets are stored server-side and are never present in the pages your browser loads. Data in transit is encrypted with HTTPS.
No system is perfectly secure. If a breach ever affects your data, we will tell you and the relevant authority without undue delay.
9. Children
This is a service for businesses. We do not knowingly collect data from anyone under 18. If you believe a child has submitted details, tell us and we will delete them.
10. International transfers
Our providers are global and may process your data outside your country, including in the United States. They operate under their own data-protection commitments and standard contractual clauses.
11. Changes
If we change this policy we will update the date at the top. Material changes affecting existing customers will be emailed.
12. Contact
[email protected] — see our contact page for postal address and phone.