Privacy policy & cookies
This policy describes how ranksource, a simplified joint-stock company (SASU) registered in France (SIREN 100 614 403 (RCS Toulouse)), with its registered office at 36 rue Henri-Claude Lauth, 31400 Toulouse, France ("ranksource," "we," "our"), collects, uses, retains, and protects personal data when you visit ranksource.com or use our platform and services.
ranksource is committed to protecting your privacy in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR"), applicable French data protection law, and other relevant legislation.
By accessing our website and services, you acknowledge that you have read and understood this policy.
1. Data controller
Entity: ranksource (SASU) - registered in France under SIREN 100 614 403
Address: 36 rue Henri-Claude Lauth, 31400 Toulouse, France
Email: [email protected]
Phone: +33 1 89 62 83 84
Data Protection Contact: Marc DE ZORDO · [email protected]
2. Personal data collected
2.1 Data you provide directly
- Account creation: full name, email address, company name, country, preferred language
- Publisher registration: website domain name(s), Google Search Console or Google Analytics data, WordPress credentials (encrypted), bank details (bank account / PayPal email)
- Advertiser registration: company information, billing address, payment method (processed via Stripe or PayPal)
- Campaign and order data: campaign name, objectives, target keywords, URLs, brief content, anchor text
- Communications: messages sent via the platform, support requests, feedback
2.2 Data collected automatically
- Technical data: IP address, browser type and version, operating system, device type, screen resolution
- Browsing data: pages visited, time spent, click paths, referral source, session duration
- Geolocation: approximate location inferred from IP address (country/city level only)
- Cookies and similar technologies: see section 8 below
2.3 Data from third-party sources
- Google Search Console / Google Analytics: traffic statistics for publisher verification
- DataForSEO: SEO metrics and publisher data enrichment
- Payment providers (Stripe, PayPal): transaction confirmation data
3. Purposes and legal bases for processing
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Account creation and management | Name, email, company, country | Performance of contract (Art. 6.1.b) |
| Order processing and fulfillment | Campaign data, payment, content | Performance of contract (Art. 6.1.b) |
| Publisher verification and onboarding | Domain, GSC/GA4 data, traffic | Performance of contract (Art. 6.1.b) |
| Payment processing and invoicing | Billing details, transactions | Legal obligation (Art. 6.1.c) |
| Publication tracking and guarantees | Published URLs, publication dates | Legitimate interest (Art. 6.1.f) |
| AI content generation | Brief data, objectives, keywords | Performance of contract (Art. 6.1.b) |
| Audience measurement and site improvement | Browsing, IP, device data | Consent (Art. 6.1.a) |
| Marketing and advertising (pixels, retargeting) | Browsing, cookies | Consent (Art. 6.1.a) |
| Newsletters and promotional communications | Email address, preferences | Consent (Art. 6.1.a) |
| Fraud prevention and security | IP, behavior, connection data | Legitimate interest (Art. 6.1.f) |
| Compliance with legal obligations | All data required by law | Legal obligation (Art. 6.1.c) |
| Outreach to Publishers not yet registered | Public business email, domain name, SEO metadata collected through third-party tools | Legitimate interest (art. 6.1.f), prospective B2B relationship, subject to the rights set out in section 6 |
4. Data sharing and sub-processors
We may share your personal data with the following categories of third-party providers, who process data on our behalf and according to our instructions:
| Provider | Purpose | Data shared | Location |
|---|---|---|---|
| Stripe | Payment processing (advertisers) | Billing, transactions | United States (EU SCCs) |
| PayPal | Payment processing (advertisers & publishers) | Billing, email, transactions | United States (EU SCCs) |
| OpenAI | AI content generation | Brief, keywords, brand info | United States (EU SCCs) |
| Anthropic (Claude) | AI content generation | Brief, keywords, brand info | United States (EU SCCs) |
| Google (Gemini) | Media catalog processing and enrichment | Publisher domain data, content analysis | United States (EU SCCs) |
| Ideogram | AI image generation | Image prompts from brief | United States (EU SCCs) |
| Google (Search Console / GA4) | Publisher traffic verification, analytics | Domain data, traffic, browsing | United States (EU SCCs) |
| DataForSEO | Publisher SEO enrichment | Domain names, SEO metrics | United States (EU SCCs) |
| Amazon SES (AWS) | Transactional emails and newsletters | Email, name, preferences | United States (EU SCC) |
| Meta (Facebook/Instagram) | Advertising pixel and retargeting | Browsing via cookies | United States (EU SCCs) |
| Advertising pixel and retargeting | Browsing via cookies | United States (EU SCCs) | |
| Google Ads | Advertising and conversion tracking | Browsing via cookies | United States (EU SCCs) |
| DYNAMIX NETWORK | Website and platform hosting | All platform data | France (Auriol) |
For transfers to countries outside the European Economic Area (EEA), we rely on Standard Contractual Clauses (SCCs) issued by the European Commission or other adequate safeguards required under the GDPR. You may request a copy of these safeguards by contacting us at [email protected].
We do not sell your personal data to third parties.
5. Data retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law:
| Data category | Retention period | Justification |
|---|---|---|
| Active account data | Duration of account | Performance of contract |
| Inactive account data | 3 years after last login | B2B prospecting recommendation |
| Invoices and accounting records | 10 years | Legal obligation (French Commercial Code, Art. L123-22) |
| Connection logs (IP, timestamps) | 1 year | Legal obligation (LCEN, Art. 6-II - French law on the digital economy) |
| Cookies and tracking data | 13 months maximum | French data protection authority CNIL guidelines |
| Contractual documents and orders | 5 years after end of contract | Civil limitation period |
| Newsletter consent records | 3 years after consent withdrawal | Proof of consent (accountability) |
| Publisher prospection data (pre-registration) | Until registration, objection (art. 21 GDPR) or deletion upon request | Legitimate interest, minimum duration required for commercial qualification |
At the end of the applicable retention period, data is securely deleted or anonymized.
6. Your rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access (Art. 15): obtain confirmation that your data is being processed and request a copy.
- Right to rectification (Art. 16): request correction of inaccurate or incomplete data.
- Right to erasure (Art. 17): request deletion of your data, subject to legal retention obligations.
- Right to restriction of processing (Art. 18): request that processing be restricted in certain circumstances.
- Right to data portability (Art. 20): receive your data in a structured, commonly used format.
- Right to object (Art. 21): object to processing based on legitimate interest or for direct marketing purposes.
- Right to withdraw consent (Art. 7): withdraw your consent at any time for processing based on consent, without affecting the lawfulness of prior processing.
To exercise these rights, contact us: [email protected]
We will respond within 30 days. If we are unable to comply, we will explain why.
You also have the right to lodge a complaint with the French data protection authority CNIL: https://www.cnil.fr
7. Data security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (TLS/SSL) and sensitive data at rest
- Secure storage of credentials (encrypted WordPress application passwords)
- Role-based access controls and permissions
- Regular security audits and vulnerability testing
- Hosting on servers located in France (DYNAMIX NETWORK, Auriol)
Despite our efforts, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
8. Cookies and tracking technologies
8.1 What are cookies?
Cookies are small text files stored on your device when you visit a website. They allow us to improve your experience by remembering your preferences, analyzing site usage, and enabling targeted advertising.
8.2 Types of cookies used
| Category | Purpose | Examples | Consent required |
|---|---|---|---|
| Strictly necessary | Essential for operation (authentication, security, session management) | Session cookies, CSRF tokens, authentication tokens | No |
| Analytics | Measure traffic and usage to improve the platform | Google Analytics (GA4) | Yes |
| Marketing / Advertising | Track visitors across sites to display relevant ads and measure campaign effectiveness | Meta Pixel, LinkedIn Insight Tag, Google Ads | Yes |
| Functional / Preferences | Remember user preferences (language, region, display settings) | Language preference, UI settings | Yes |
8.3 Cookie consent
On your first visit to ranksource.com, a consent banner allows you to accept or decline non-essential cookies. You can update your preferences at any time from the footer.
Strictly necessary cookies cannot be disabled as they are essential to the functioning of the site.
8.4 Managing cookies in your browser
You can also control cookies through your browser settings. Disabling certain cookies may affect site functionality:
- Google Chrome: chrome://settings/cookies
- Mozilla Firefox: about:preferences#privacy
- Safari: Preferences > Privacy
- Microsoft Edge: edge://settings/privacy
8.5 Cookie retention period
Cookies are retained for a maximum of 13 months from the date they are set, in line with French data protection authority CNIL guidelines. After that period, your consent is requested again.
9. Artificial intelligence processing
ranksource uses artificial intelligence services (OpenAI, Anthropic Claude, Google Gemini, and Ideogram) to generate editorial content and visuals, and to enrich publisher data in our catalog. When you use our content generation features:
- Your brief data (brand name, product, keywords, target audience) is transmitted to AI providers for processing.
- This data is used solely to generate content for your orders.
- We do not use your data to train AI models.
- AI-generated content is licensed for publication purposes in accordance with the rights and responsibilities set out in our Terms of Use.
We ensure that our AI providers offer appropriate safeguards for the processing of personal data, including compliance with EU transfer requirements.
10. Minors
Our services are intended exclusively for professional (B2B) use. You must be at least 18 years old to create an account and use our platform. We do not knowingly collect personal data from individuals under 18. If we discover that we have collected data from a minor, we will delete it promptly.
11. Changes to this policy
We may update this policy to reflect changes in our practices, technologies, or legal requirements. When changes are material, we will notify you via a prominent notice on the site or by email. The "Last updated" date at the top of this page indicates the most recent revision.
Your continued use of our services after any update constitutes acceptance of the revised policy.
12. Contact
For any questions or requests relating to this policy or the processing of your personal data, please contact us:
Email: [email protected]
Phone: +33 1 89 62 83 84
Address: ranksource · 36 rue Henri-Claude Lauth, 31400 Toulouse, France
Data Protection Contact: Marc DE ZORDO · [email protected]
You may also lodge a complaint with the French data protection authority CNIL:
Website: https://www.cnil.fr
Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France