Legal

Privacy Policy

Last updated: April 2026

1. Data Controller

In compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), we inform you that the data controller is:

2. Data We Collect

We collect the following personal data:

  • Registration data: name, email address and, if you sign up with Google, the associated profile name.
  • Usage data: URLs analyzed, queries made, monthly analysis count and plan type.
  • Payment data: managed entirely by Stripe. iRankly does not store credit card details or banking information.
  • Browsing data: IP address, browser type, pages visited and session duration (via cookies and Google Analytics).

3. Purpose and Legal Basis

PurposeLegal basis
Manage your account and service accessContract performance (Art. 6.1.b GDPR)
Process payments and subscriptionsContract performance (Art. 6.1.b GDPR)
Send service communicationsLegitimate interest (Art. 6.1.f GDPR)
Web analytics and service improvementConsent (Art. 6.1.a GDPR)
Comply with legal obligationsLegal obligation (Art. 6.1.c GDPR)

4. Third-Party Processors

To provide the service we use the following providers, with whom we have signed the corresponding data processing agreements:

  • Supabase — Authentication and database (hosted on AWS Europe infrastructure).
  • Stripe — Payment processing. See their policy at stripe.com/privacy.
  • Google Analytics — Web analytics. Only activated with your explicit consent.
  • Google Search Console — Search performance monitoring tool (does not process user data).
  • Vercel — Web application hosting and distribution (European infrastructure).

5. Data Retention

We retain your data as long as you maintain an active account on iRankly. If you request deletion, we will remove your data within a maximum of 30 days, except for data we must retain by legal obligation (e.g. billing data, retained for 5 years under Spanish tax law).

6. Your Rights

You may exercise the following rights at any time by emailing lluismayans83@gmail.com:

  • Access — find out what data we hold about you.
  • Rectification — correct inaccurate data.
  • Erasure — delete your data ("right to be forgotten").
  • Portability — receive your data in a structured format.
  • Objection — object to processing based on legitimate interest.
  • Restriction — request suspension of processing in certain cases.

If you believe processing is not GDPR-compliant, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).

7. International Transfers

Some of our providers (Supabase, Vercel, Stripe) may process data on servers outside the European Economic Area. In all cases, these transfers are carried out under the appropriate safeguards provided by the GDPR (Standard Contractual Clauses or European Commission adequacy decisions).

8. Cookies

We use first-party and third-party cookies. See our Cookie Policy for more information and to manage your preferences.

9. Changes to This Policy

We may update this policy occasionally. We will notify you of significant changes by email or via a notice on the platform. The current version will always be available on this page.