Legal
Privacy Policy
Last updated: April 7, 2026
1. Introduction
Rank Lush ("we," "our," or "us") operates ranklush.com and provides a white-label AI blog automation platform (the "Service"). This Privacy Policy explains how we collect, use, share, and protect information about you when you use our Service.
By using Rank Lush, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
Account information
When you sign up, we collect your email address, name, and any other information you provide during registration.
Workspace and content data
We store the content you create, drafts, blog posts, site settings, and configuration you provide — including your domain, brand identity, and SEO preferences.
Website crawl data
To power topic generation and voice learning, we crawl URLs from your connected website. We store the resulting text and metadata to improve your content output.
Google Search Console data
If you connect Google Search Console, we access your GSC performance data (clicks, impressions, keywords, page URLs) under the permissions you grant. This data is used solely to improve content recommendations for your workspace.
Usage and log data
We collect information about how you interact with the Service — pages visited, features used, job statuses, and error events — to monitor reliability and improve the product.
3. How We Use Your Information
- Provide, operate, and maintain the Service
- Generate AI-written blog drafts tailored to your brand voice
- Suggest topics based on your site content and GSC data
- Send transactional emails (draft ready, publish confirmation)
- Respond to support requests
- Monitor and improve platform performance and reliability
- Comply with legal obligations
We do not sell your personal data or use it to train AI models sold to third parties.
4. AI-Generated Content
Rank Lush uses Google Gemini to generate blog drafts. Content you provide — including your website text, brand settings, and topic preferences — is sent to Google's API to generate output. Google's data handling for their API is governed by their own terms and privacy policies. We do not use your content to train our own models.
5. Data Sharing
We share data with third parties only as necessary to operate the Service:
- Google (Gemini API, Search Console) — content generation and GSC access
- Vercel — hosting and serverless infrastructure
We may disclose information if required by law, court order, or to protect the rights and safety of Rank Lush or others.
6. Data Retention
We retain your account and workspace data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., billing records).
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data ("right to be forgotten")
- Withdraw consent for data processing where consent is the legal basis
- Data portability — receive a copy of your data in a machine-readable format
To exercise any of these rights, contact us at privacy@ranklush.com.
8. Cookies
We use two first-party cookies:
- ranklush_session — stores your login session. Set when you sign in, deleted when you sign out. Strictly necessary.
- ranklush_visitor — a randomly generated anonymous ID used to count unique article views on your published blog. Contains no personal information.
We do not use third-party advertising or tracking cookies. You can clear or block cookies through your browser settings, though disabling the session cookie will prevent you from signing in.
9. Security
We take reasonable technical and organizational measures to protect your data, including encrypted connections (TLS), access controls, and regular security reviews. No method of transmission over the internet is 100% secure — we cannot guarantee absolute security.
10. Children's Privacy
The Service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, contact us and we will delete it promptly.
11. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes by emailing your registered address or posting a notice in the app. Continued use of the Service after changes take effect constitutes your acceptance of the revised policy.