RANKit Suite Privacy Policy

1. Introduction

Polymath Partners LLC ("Polymath Partners," "we," "us," or "our") operates RANKit Suite, an internal marketing analytics and content optimization platform accessible at rankit.polymath-partners.com (the "Platform"). This Privacy Policy explains how we collect, use, store, and protect information in connection with your use of the Platform. RANKit Suite is currently an internal tool used by Polymath Partners team members and selected testers. This policy governs all data processed through the Platform.

2. Information We Collect

2.1 Information You Provide

Account information: name and email address provided through Google OAuth authentication. Client profile data: business names, website URLs, social media handles, brand voice descriptions, target audience details, and related marketing information you enter when registering a client. Content submitted for analysis: URLs, draft text, social media post copy, and screenshots uploaded to the Platform for processing.

2.2 Information Collected Automatically

Usage data: which features you use, analyses run, and exports generated. Authentication tokens: Google OAuth tokens used to access connected services including Google Analytics, Google Search Console, Google Drive, and YouTube Analytics. Cached analytics data: GA4 metrics, GSC search performance data, and YouTube analytics data pulled from connected client accounts and stored temporarily in our database.

2.3 Third-Party Data Sources

When you connect a client's Google Analytics, Search Console, or YouTube account, we retrieve performance data from those services on your behalf. This data is processed to generate insights and reports and is stored in our Supabase database subject to the retention limits described in Section 5.

3. How We Use Your Information

• To operate and deliver the Platform's features including content analysis, social planning, and analytics dashboards
• To generate AI-powered insight cards and content recommendations using Gemini (Google) and Claude (Anthropic) language models
• To save exports and reports to Google Drive folders you have authorized
• To maintain client profiles and analytics history within the Platform
• To improve Platform functionality based on usage patterns

4. AI Processing

RANKit Suite uses two AI providers to process content and analytics data: Gemini (Google AI): Used for content analysis, social post generation, and analytics insights. Content you submit and analytics data are sent to Google's Gemini API for processing. Claude (Anthropic): Used for advanced analytics insight generation. Analytics data is sent to Anthropic's API for processing. By using the Platform, you consent to your submitted content and analytics data being processed by these AI providers. We do not use your data to train these models. Both providers process data subject to their respective privacy policies and data processing agreements.

5. Data Retention

• Analytics cache data (GA4, GSC, YouTube): retained on a rolling 3-month window, automatically deleted and replaced on each monthly refresh
• Client profile data: retained for as long as the client record exists in the Platform
• Insight cards and report history: retained indefinitely to support historical reporting
• Authentication tokens: retained and refreshed as needed; deleted when a client connection is removed
• Exported files: saved to your authorized Google Drive; we do not retain copies beyond the Drive folder

6. Data Sharing

We do not sell your data or client data to third parties. We share data only as follows: AI providers (Google Gemini and Anthropic Claude) solely to generate analysis and insights. Google services for authentication, data access, and Drive exports using your authorized credentials. Supabase as our database provider for storing client profiles, analytics cache, insight cards, and report history. Cloudflare as our hosting and infrastructure provider for traffic routing and authentication.

7. Security

We implement reasonable technical and organizational measures to protect data processed through the Platform, including encrypted connections (HTTPS), access controls through Cloudflare Zero Trust, and secure credential storage. API keys and OAuth tokens are stored as environment variables and never exposed in the application codebase. No security system is impenetrable. You are responsible for maintaining the security of your Google account used to access the Platform.

8. Your Rights

• Request deletion of your client profile data by contacting us
• Disconnect connected Google services at any time through your Google account settings at myaccount.google.com
• Request access to data we hold about you. To exercise any of these rights, contact us at rankit@polymath-partners.com

9. Third-Party Services

The Platform relies on the following third-party providers. Your use of connected features may be subject to their terms:

• Google (OAuth, Analytics, Search Console, Drive, YouTube): policies.google.com/privacy
• Anthropic (Claude AI): anthropic.com/privacy
• Supabase (database): supabase.com/privacy
• Cloudflare (hosting and auth): cloudflare.com/privacypolicy

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on the Platform and revise the Last Updated date. For material changes we will provide notice by email or through the Platform. Continued use after changes take effect constitutes acceptance.

11. Contact