Privacy & Cookie Policy
This Privacy & Cookie Policy describes how ranksource, a Simplified Joint-Stock Company (SAS) registered in France (Trade Register Toulouse 100 614 403), with its registered office at 36 rue Henri-Claude Lauth, 31400 Toulouse, France ("ranksource", "we", "us", or "our"), collects, uses, stores, and protects personal data when you visit ranksource.com or use our platform and services.
ranksource is committed to protecting your privacy in compliance with Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR"), applicable French data protection legislation, and other relevant data protection laws.
By accessing or using our website and services, you acknowledge that you have read and understood this policy.
1. Data Controller
Entity: ranksource (SAS)
Address: 36 rue Henri-Claude Lauth, 31400 Toulouse, France
Email: [email protected]
Phone: +33 1 89 62 83 84
Data Protection Officer (DPO): Marc DE ZORDO — [email protected]
2. Personal Data We Collect
2.1 Data you provide directly
- Account registration: full name, email address, company name, country, preferred language
- Publisher onboarding: website domain(s), Google Search Console or Google Analytics data, WordPress credentials (encrypted), payment details (bank account / PayPal email)
- Advertiser onboarding: company details, billing address, payment method (processed via Stripe or PayPal)
- Campaign and order data: campaign name, objectives, target keywords, URLs, brief content, anchor text
- Communications: messages sent through the platform, support requests, feedback
2.2 Data collected automatically
- Technical data: IP address, browser type and version, operating system, device type, screen resolution
- Navigation data: pages visited, time spent on pages, click patterns, referral source, session duration
- Geolocation data: approximate location derived from IP address (country/city level only)
- Cookies and similar technologies: see Section 8 below
2.3 Data from third-party sources
- Google Search Console / Google Analytics: website traffic metrics for publisher verification
- DataForSEO: SEO metrics and publisher data enrichment
- Payment processors (Stripe, PayPal): transaction confirmation data
3. Purposes and Legal Bases for Processing
| Purpose | Data Used | Legal Basis (GDPR) |
|---|---|---|
| Account creation and management | Name, email, company, country | Performance of contract (Art. 6(1)(b)) |
| Order processing and delivery | Campaign data, payment details, content | Performance of contract (Art. 6(1)(b)) |
| Publisher verification and onboarding | Domain, GSC/GA4 data, traffic metrics | Performance of contract (Art. 6(1)(b)) |
| Payment processing and invoicing | Billing details, transaction records | Legal obligation (Art. 6(1)(c)) |
| Publication monitoring and guarantees | Published URLs, publication dates | Legitimate interest (Art. 6(1)(f)) |
| AI content generation (articles, visuals) | Brief data, campaign objectives, keywords | Performance of contract (Art. 6(1)(b)) |
| Website analytics and improvement | Navigation data, IP, device data | Consent (Art. 6(1)(a)) |
| Marketing and advertising (pixels, retargeting) | Navigation data, cookies | Consent (Art. 6(1)(a)) |
| Newsletters and promotional communications | Email address, preferences | Consent (Art. 6(1)(a)) |
| Fraud prevention and platform security | IP address, usage patterns, login data | Legitimate interest (Art. 6(1)(f)) |
| Compliance with legal obligations | All relevant data as required by law | Legal obligation (Art. 6(1)(c)) |
4. Data Sharing and Third-Party Processors
We may share your personal data with the following categories of third-party service providers, who process data on our behalf and under our instructions:
| Provider | Purpose | Data Shared | Location |
|---|---|---|---|
| Stripe | Payment processing (advertisers) | Billing info, transaction data | USA (EU SCCs) |
| PayPal | Payment processing (advertisers & publishers) | Billing info, email, transaction data | USA (EU SCCs) |
| OpenAI | AI content generation | Campaign brief, keywords, brand info | USA (EU SCCs) |
| Anthropic (Claude) | AI content generation | Campaign brief, keywords, brand info | USA (EU SCCs) |
| Google (Gemini) | Data processing and media catalog enrichment | Publisher domain data, content analysis | USA (EU SCCs) |
| Ideogram | AI visual generation | Image prompts derived from campaign briefs | USA (EU SCCs) |
| Google (Search Console / GA4) | Publisher traffic verification, website analytics | Domain data, traffic metrics, navigation data | USA (EU SCCs) |
| DataForSEO | SEO data enrichment for publishers | Domain names, SEO metrics | USA (EU SCCs) |
| Brevo | Transactional emails and newsletters | Email address, name, preferences | EU (France) |
| Meta (Facebook/Instagram) | Advertising pixel and retargeting | Navigation data via cookies | USA (EU SCCs) |
| Advertising pixel and retargeting | Navigation data via cookies | USA (EU SCCs) | |
| Google Ads | Advertising and conversion tracking | Navigation data via cookies | USA (EU SCCs) |
| Hetzner Online GmbH | Website and platform hosting | All platform data | Germany (Nuremberg) |
For transfers to countries outside the European Economic Area (EEA), we rely on the European Commission's Standard Contractual Clauses (SCCs) or other adequate safeguards as required by the GDPR. You may request a copy of these safeguards by contacting us at [email protected].
We do not sell your personal data to any third party.
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law:
| Data Category | Retention Period | Justification |
|---|---|---|
| Active account data | Duration of the account | Contract performance |
| Inactive account data | 3 years after last login | Regulatory recommendation for B2B prospecting data |
| Invoicing and accounting records | 10 years | Legal obligation (French Commercial Code, Art. L123-22) |
| Connection logs (IP, timestamps) | 1 year | Legal obligation (French digital economy law, Art. 6-II) |
| Cookies and tracking data | 13 months maximum | Regulatory guidelines |
| Contractual documents and orders | 5 years after end of contract | Statute of limitations (French civil law) |
| Newsletter consent records | 3 years after withdrawal of consent | Proof of consent (accountability) |
After the applicable retention period, data is securely deleted or anonymized.
6. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access (Art. 15): Obtain confirmation of whether your data is being processed and request a copy.
- Right to rectification (Art. 16): Request correction of inaccurate or incomplete data.
- Right to erasure (Art. 17): Request deletion of your data, subject to legal retention obligations.
- Right to restrict processing (Art. 18): Request limitation of processing in certain circumstances.
- Right to data portability (Art. 20): Receive your data in a structured, commonly used format.
- Right to object (Art. 21): Object to processing based on legitimate interest or for direct marketing purposes.
- Right to withdraw consent (Art. 7): Withdraw consent at any time for processing based on consent, without affecting prior processing.
To exercise any of these rights, contact us at: [email protected]
We will respond to your request within 30 days. If we cannot fulfill your request, we will explain why.
You also have the right to lodge a complaint with the French data protection authority (CNIL): https://www.cnil.fr
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (TLS/SSL) and sensitive data at rest
- Secure storage of credentials (WordPress application passwords are encrypted)
- Access controls and role-based permissions
- Regular security audits and vulnerability assessments
- Hosting on servers located in Germany (Hetzner Online GmbH, Nuremberg datacenter)
While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
8. Cookies and Tracking Technologies
8.1 What are cookies?
Cookies are small text files stored on your device when you visit a website. They help us provide you with a better experience by remembering your preferences, analyzing site usage, and enabling targeted advertising.
8.2 Types of cookies we use
| Category | Purpose | Examples | Consent Required |
|---|---|---|---|
| Strictly Necessary | Essential for the website to function (authentication, security, session management) | Session cookies, CSRF tokens, authentication tokens | No |
| Analytics | Measure website traffic and usage patterns to improve the platform | Google Analytics (GA4) | Yes |
| Marketing / Advertising | Track visitors across websites to display relevant ads and measure campaign effectiveness | Meta Pixel, LinkedIn Insight Tag, Google Ads conversion tracking | Yes |
| Functional / Preferences | Remember user preferences (language, region, display settings) | Language preference, UI settings | Yes |
8.3 Cookie consent
When you first visit ranksource.com, a cookie consent banner will be displayed, allowing you to accept or refuse non-essential cookies. You can modify your preferences at any time through the cookie settings accessible from the footer of every page.
Strictly necessary cookies cannot be disabled as they are essential for the website to function.
8.4 How to manage cookies
In addition to our consent banner, you can control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the website. For more information on managing cookies in your browser:
- Google Chrome: chrome://settings/cookies
- Mozilla Firefox: about:preferences#privacy
- Safari: Preferences > Privacy
- Microsoft Edge: edge://settings/privacy
8.5 Cookie retention
Cookies are retained for a maximum of 13 months from the date they are set, in accordance with applicable regulatory guidelines. After this period, your consent will be requested again.
9. AI-Powered Processing
ranksource uses artificial intelligence services (OpenAI, Anthropic Claude, Google Gemini, and Ideogram) to generate editorial content, visual assets, and to enrich publisher data within our catalog. When you use our content generation features:
- Your campaign brief data (brand name, product, keywords, target audience) is transmitted to AI service providers for processing.
- This data is used solely for the purpose of generating content for your orders.
- We do not use your data to train AI models.
- AI-generated content is licensed for publication purposes in accordance with the rights and responsibilities defined in our Terms & Conditions.
We ensure that our AI service providers offer appropriate safeguards for the processing of personal data, including compliance with EU data transfer requirements.
10. Minors
Our services are intended exclusively for business use (B2B). You must be at least 18 years old to create an account and use our platform. We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.
11. Changes to This Policy
We may update this Privacy & Cookie Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will notify you by posting a prominent notice on our website or by sending you an email. The "Last updated" date at the top of this policy indicates when the latest changes were made.
Your continued use of our services after any changes constitutes your acceptance of the updated policy.
12. Contact
For any questions or requests regarding this Privacy & Cookie Policy or the processing of your personal data, please contact us:
Email: [email protected]
Phone: +33 1 89 62 83 84
Address: ranksource — 36 rue Henri-Claude Lauth, 31400 Toulouse, France
DPO: Marc DE ZORDO — [email protected]
You may also lodge a complaint with the French data protection authority (CNIL):
Website: https://www.cnil.fr
Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France