Privacy Policy — Ranky
Last updated: 2026-10-23
1. Who we are
The database owner and controller is Shai Shotashvili, Exempt Dealer (Osek Patur) No. 322713082, Etzel 8, Bat Yam, Israel, operating Ranky (askranky.com). Privacy contact and data protection officer: Shai Shotashvili, shaysho1111@gmail.com.
You are not legally required to provide personal data, but without an email address and business details we cannot provide the Service.
2. What we collect
| Data | Source | Purpose |
|---|---|---|
| Email address | You | Sign-in links, reports, billing notices, support |
| Business name, website, category, city, competitor names | You / the Service | Running scans and reports |
| Scan questions, AI answers, cited sources, scores | Generated by the Service | Reports, dashboard, trend history |
| Billing: name or email, SUMIT customer ID, payment token reference, standing-order ID, receipt records | You / SUMIT | Billing, receipts, tax records |
| Email preferences and consent records (what you agreed to, when, from which form, in which language) | You | Sending only the emails you agreed to |
| Waitlist email (before launch) | You | Telling you when the Service opens |
| IP address and browser data (in server and CDN logs), rate-limit counters, bot-check result | Automatically | Security, abuse prevention, free-scan limits |
| Usage counters (checks per month), service events | Automatically | Plan caps, cost control, support |
We do not collect full card numbers (they are entered only on SUMIT's hosted page), and we do not intentionally collect sensitive data. Please do not enter personal data of other people in business fields.
3. Why we use it
To perform our contract with you (run scans, deliver reports, bill), to comply with law (tax and bookkeeping), for legitimate interests (security, fraud prevention, improving the product), and with your consent (optional product news). We may publish aggregated, non-identifying statistics. We do not sell personal data, and we do not make automated decisions with legal effect about you.
4. Who receives data (service providers)
| Provider | Role | Location |
|---|---|---|
| Render | Application hosting | Frankfurt, Germany (EU) |
| Neon | Database (PostgreSQL), hosted on Amazon Web Services | USA (AWS us-east-2, Ohio) |
| SUMIT (and its card acquirer) | Payments and receipts | Israel |
| Resend | Email delivery | USA (company); sending infrastructure in the EU (Ireland) |
| Cloudflare | DNS, CDN, bot protection (Turnstile) | USA / global |
| OpenAI, Google (Gemini), Perplexity | Receive the scan questions, which contain only a business category and a city. Not your email, name, website or billing data | USA |
| Google (Fonts) | Serves web fonts; receives your IP address and browser details when a page loads | USA / global |
We may also disclose data where required by law or to protect our rights.
5. International transfers
Your data is held and processed outside Israel. The Ranky application runs on Render in Frankfurt, Germany. Our database (Neon, PostgreSQL) runs on Amazon Web Services in the United States (us-east-2, Ohio), so account, business, scan and billing-reference data are stored in the US. Email delivery (Resend), our CDN and bot protection (Cloudflare) and the AI providers that receive scan questions (OpenAI, Google, Perplexity) are US companies or operate from the US. The AI providers receive only a business category and a city, not your email, name or website. Apart from payment data held by SUMIT in Israel, your data is therefore held in Germany and the United States, not only in the EU.
These transfers are subject to the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001. We use the processors listed above to provide the service. They process data on our behalf under their own terms and privacy policies.
6. Retention
Account and scan data: while your account is active and up to 24 months after closure. Billing and receipt records: for the period required by Israeli tax law. Server and CDN request logs are kept by the hosting providers for a limited period set by their plans (generally days to a few weeks). You may ask us to delete your account earlier, subject to legal retention duties.
7. Security
Access through secret tokens and one-time sign-in links, HTTPS, rate limiting, bot protection, and limited access to production data. No system is 100% secure; we will notify affected users and authorities of serious security incidents as required by law.
8. Your rights
Under the Israeli Privacy Protection Law, 5741-1981 (and, where applicable, GDPR or US state laws such as CCPA), you may ask to access, correct or delete your data, object to direct marketing, and (where applicable) receive your data in portable form. Email shaysho1111@gmail.com from the address on your account; we respond within 30 days. You may also complain to the Israeli Privacy Protection Authority.
9. Emails and marketing
Service emails (sign-in links, reports, billing notices) are sent as part of the Service. Weekly reports are part of paid plans and carry an unsubscribe link. Product news and tips are sent only if you tick the optional box on the scan form (it is unticked by default), are labelled as advertising ("פרסומת" in Hebrew), and include a one-click unsubscribe link. You can withdraw consent at any time (Communications Law, s.30A).
10. Cookies and similar technologies
We use only functional storage: a language-preference cookie and a currency-preference cookie (set when you switch language or currency), and browser session storage to carry your scan or dashboard session. Cloudflare Turnstile may set its own security cookies. We do not use analytics or advertising cookies.
11. Children
The Service is not intended for under-18s.
12. US residents
We do not sell or "share" personal information for cross-context behavioural advertising. California and other US residents may exercise their privacy rights by emailing shaysho1111@gmail.com.
13. Changes
Material changes will be notified by email or on the site before they take effect.