Privacy Policy

Who operates Winrank

Winrank is operated by SAKSHAM KESHRI LLP, an Indian limited liability partnership (LLPIN: ACL-3683). Our registered office is at W/O Baleshwar Prasad, H. No. 35, Gali No. 6A, Bhawani Enclv, Bhondsi (168) Badshahpur, Gurgaon, Traffic Police Station I, Hero Honda Chowk, Sadar Bazar, Gurgaon - 122001, Haryana, India. Contact us at support@winrank.ai.

Information we collect

We collect the account and business information you submit, such as your name, email address, website, company details, content preferences, and material you create in Winrank. We also collect basic technical and service logs needed to operate, secure, and troubleshoot the service.

Country detection

We use your IP address to estimate your country and suggest a phone country code and regional pricing. The country lookup runs on our server; we do not send your IP address to MaxMind for this lookup. You can change the suggested phone country code. This product includes GeoLite Data created by MaxMind, available from MaxMind.

Google Search Console data

If you choose to connect Google Search Console, Winrank requests read-only access to Search Console data for sites that your Google account can access. We use that access only to list eligible properties and show SEO performance inside your workspace, including clicks, impressions, click-through rate, average position, queries, pages, countries, and devices.

Winrank does not modify your Search Console account or website through this connection. OAuth access and refresh tokens are encrypted at rest. We do not sell Google user data, use it for advertising, or share it with third parties except service providers that help us securely operate Winrank or where disclosure is required by law.

Winrank's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Instagram connections and publishing

If the Instagram publishing feature is available to you and you choose to connect an Instagram Business or Creator account, we receive the account identifier, username and account information needed to identify that connection, the permissions you grant, access tokens and their expiry information. We also process the media and captions you choose to publish and the resulting post identifiers, links, processing status and error information.

We use this information to connect the account you authorise, submit the posts you request, show publishing results, keep the authorised connection working and resolve publishing failures. Connecting an account does not by itself enable automatic posting. Automatic posting requires your separate instruction, such as enabling automatic Instagram sharing for new articles. You can withdraw that instruction or disconnect the account.

Winrank sends the selected media and caption to Meta to publish to the authorised account. Posts are visible according to Instagram's account and post settings. Meta processes information under its own terms and privacy policy. This publishing connection does not request permission to manage direct messages, comments or advertisements.

We do not sell or license Instagram Platform Data, use it for advertising audiences, or use it to train AI models. Credentials and information retrieved from the Instagram connection are not inputs to our AI content-generation providers. We use customer-supplied website and article content to prepare social content; the AI processing of that content is described below. Before making the Instagram connection available, we will put safeguards in place to keep its credentials on the server, encrypted at rest and excluded from browser analytics, session recordings and application logs.

When you disconnect or revoke the connection, we stop starting new publications through it and delete the stored Instagram access tokens. A publication already sent to Meta may still finish. We promptly delete associated Instagram Platform Data when you request deletion, close the relevant account, or it is no longer needed for the authorised service, unless applicable law requires retention. Disconnecting Winrank does not remove posts already published on Instagram.

Service providers and AI processing

We use service providers to operate hosting, communications, content and image generation, SEO research, analytics and payments. When you request AI-generated content, relevant website information, prompts and article material may be processed by the AI providers used to deliver that feature. We share information with providers only as needed for the requested service and applicable legal obligations. Access to information is limited to the purposes described in this policy.

Analytics, cookies and advertising measurement

Where enabled, we use PostHog for product analytics and session replay to understand how Winrank is used and diagnose problems. This can process page views, interactions, account or workspace identifiers, technical browser information and recordings of page content and form interactions. Password inputs are masked. Before enabling the Instagram feature, we will exclude its credentials and authorisation responses from recordings.

Where enabled, we use Meta Pixel and Conversions API to measure advertising and events such as registration, trials, checkout and purchases. Depending on the event, Meta can receive event and purchase details, IP address, browser information, advertising cookie identifiers, campaign attribution and hashed email or account identifiers for event matching. Hashing is not anonymisation. Instagram publishing tokens and data retrieved through the Instagram connection are not used for this advertising measurement.

Browser settings can limit cookies and tracking, which may affect some features. We will provide consent controls where required by applicable law. You can contact support@winrank.ai about your analytics and advertising choices.

How we use information

We use information to provide and improve Winrank, authenticate users, generate requested SEO and content results, display performance reports, publish content when you instruct us to, prevent abuse, and communicate about the service.

Billing information

Subscription checkout and recurring billing are processed by the payment provider you choose: Stripe or Razorpay. That provider receives the billing and payment information you enter during checkout. Winrank stores provider, customer, subscription, payment or invoice, status, and billing-period identifiers needed to provide account access, but does not receive or store complete card numbers, bank credentials, or security codes.

Retention and deletion

We retain information while your account is active and as reasonably necessary to provide the service, meet legal obligations, resolve disputes, and protect the service. You can disconnect Google Search Console from the Search performance page, which removes the stored Google tokens from Winrank and requests revocation from Google. You can also revoke access from your Google Account permissions.

To request account or data deletion, email support@winrank.ai. We will verify the request and delete eligible information from active systems within a reasonable period, subject to legal and security retention requirements.

For step-by-step requests covering Instagram connection data or your Winrank account, see our Data deletion instructions. Requests are handled promptly after proportionate verification of your authority to request the deletion. We explain any information that must be retained under applicable law. Deleting data held by Winrank does not delete content already published to a third-party service.

Security and your choices

We use reasonable technical and organisational safeguards to protect information. No system is completely secure, so keep your password confidential and contact us if you suspect unauthorised access. You may decline to connect Search Console and continue using other Winrank features.

Contact

Questions about this policy or Winrank's data practices can be sent to support@winrank.ai.