Privacy policy

This policy explains what personal data Ranxii processes, why, and your rights. We collect as little as possible.

Controller

Ichii GmbH, Kollwitzstraße 76, 10435 Berlin, Germany, represented by its managing director Kunichi Kisaki. Contact: support@ranxii.com.

What we process

• Account data: your email address and, if you use Google sign-in, your name and Google account identifier. Purpose: providing your account (Art. 6(1)(b) GDPR).
• Workspace content: agency name, logo, website and colour; client websites, brand and competitor names, buyer questions; AI answers collected for you, and reports. Purpose: providing the service (Art. 6(1)(b)).
• Billing data: handled by Stripe. We store only Stripe customer and subscription identifiers, plan and status. Card details never reach our servers (Art. 6(1)(b), 6(1)(c)).
• Free website checks without an account: the website address you enter and the result. To prevent abuse, Vercel’s bot protection checks the request, and we store a one-way, keyed hash of your network address that changes every day; we do not store IP addresses. Scan results are deleted after 14 days (Art. 6(1)(f), legitimate interest in preventing abuse).
• Product statistics: counts of steps such as “scan completed” or “client created”, linked at most to a workspace, never to a person, device or IP address (Art. 6(1)(f)).
• Server logs: our hosting provider processes technical request data (including IP address) to deliver and secure the service, retained for a short period (Art. 6(1)(f)).

Cookies

We only use storage that is strictly necessary to provide the service: session cookies that keep you signed in, a cookie that remembers your chosen language, and a security token set by Vercel’s bot protection when you use the free website check. Stripe’s hosted checkout and billing pages run on Stripe’s own domain and set Stripe’s own necessary cookies there. We use no advertising or analytics cookies, so no consent banner is needed.

AI engines

To monitor visibility, Ranxii sends buyer questions (and, when you add a client, publicly available content from that client’s website) to OpenAI, Google (Gemini) and Perplexity through Vercel’s AI Gateway. We do not send your account data to these providers. Please don’t enter personal data into prompts.

Processors and recipients

• Supabase (database, authentication, file storage) — data stored in the EU (Frankfurt).
• Vercel (hosting, application functions run in the EU (Frankfurt), bot protection for the free check, AI Gateway).
• Stripe (payments, invoices).
• Resend (sign-in and summary emails).
• OpenAI, Google, Perplexity (answering tracked questions; no account data).

Where processors are located outside the EU/EEA, transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

Retention and deletion

Workspace data is kept while your account exists. You can export all data and delete your workspace at any time under Account & data; deletion removes clients, stored answers, reports, share links, your logo, your Stripe customer record and your login. Invoices are retained as required by tax law.

Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection, and to lodge a complaint with a supervisory authority. Contact us at support@ranxii.com.