Privacy Policy

This Privacy Policy describes how Spring Digital Commerce LLC ("we", "us", or "GetRanked.io") collects, uses, and shares information about you when you use our website and services.

1. Information We Collect

Information you provide

• Account information (name, email address, password)
• Billing information (processed by our payment provider)
• Website and platform credentials you connect (WordPress API keys, Shopify tokens)
• Google account access you grant when you connect a Gmail mailbox for outreach — see Google Account Data (Gmail)
• Brand configuration data (website URL, ICP, seed topics)
• Communications you send us

Information collected automatically

• Usage data (pages visited, features used, timestamps)
• Device information (browser type, operating system, IP address)
• Cookies and similar tracking technologies — see our Cookie Policy for details

2. How We Use Your Information

• To provide and maintain our services
• To publish content to your connected platforms on your behalf
• To send outreach emails from your connected Gmail mailbox, and to detect replies and delivery failures to those emails
• To process payments and manage your subscription
• To communicate with you about your account and our services
• To improve and develop new features
• To comply with legal obligations

3. Google Account Data (Gmail)

If you use GetRanked's link outreach, you can connect your own Google account so that outreach emails are sent from your mailbox, under your name. We never send mail on your behalf from an address of our own.

What we ask for, and why

• Send email on your behalf (gmail.send) — to send the outreach messages you have written or approved in GetRanked, to the recipients you selected. Nothing is sent until you approve it, and you can stop a campaign at any moment.
• Read your email (gmail.readonly) — to detect replies and delivery failures to those messages, so that a reply shows up in GetRanked and a sequence stops when someone answers or opts out.

What we do with it

We read only the messages that belong to conversations started by an email you sent through GetRanked, matched on the message's own thread identifier. We do not read, index, copy, or store the rest of your mailbox. Of a matched reply we store the sender, the date, the message text, and a classification (for example: interested, not interested, out of office, unsubscribe request), so that you can read the answer in GetRanked and so that we stop writing to people who asked us to stop.

To classify a reply we send its text to our AI provider (Anthropic, through OpenRouter) for the sole purpose of producing that classification. The provider does not use it to train models. We do not use Gmail data for advertising, we do not sell it, we do not transfer it to anyone else, and we do not use it to train generalised AI or machine-learning models.

How your access is stored

Connecting your mailbox gives us an access token, not your password. That token is encrypted at rest in a dedicated secrets vault, is never visible in the application, and is used only by the server components that send and read the messages described above. Disconnecting the mailbox in GetRanked revokes the token at Google and deletes it on our side immediately; you can also revoke it yourself at any time via your Google account.

Limited Use

GetRanked's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal data. Platform credentials (API keys, passwords) are encrypted at rest and in transit. We never store your platform credentials in plain text.

5. Data Sharing

We do not sell your personal data. We may share information with:

• Service providers who assist in operating our platform (hosting, payment processing, analytics)
• Your connected platforms (WordPress, Shopify) to publish content on your behalf
• Our AI provider (Anthropic, via OpenRouter), to generate content and to classify outreach replies. Data sent to the provider is not used to train models.
• Law enforcement when required by law

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. If you are in the European Economic Area or United Kingdom, you have these rights under the GDPR; if you are a California resident, you have rights under the CCPA/CPRA, including the right to know, delete, and opt out of the "sale" or "sharing" of personal information. We do not sell your personal data. You can also disconnect your platform integrations at any time through your account settings. To exercise any right, contact us using the details below.

Where we process personal data on behalf of business customers, that processing is also governed by our Data Processing Addendum.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

8. Contact Us

If you have questions about this Privacy Policy, contact us at: