Privacy policy

Template for the operator: replace the [bracketed] details with your company information and have a lawyer review this text for the countries you serve before launch.

This policy explains what AmbiRank (“we”, operated by SkyLine LLC) collects, why, and the choices you have. Contact: [email protected].

What we collect

• Account data: name, email address, a salted hash of your password (we never store the password), your time zone and notification choices.
• Workspace data you add: websites and apps you register, keywords, drafts, notes and settings.
• Data we measure for you: results of crawling websites you have verified, public store listing data, and, only if you connect them, Google Search Console, Google Play and App Store Connect data.
• Credentials you provide: OAuth refresh tokens, WordPress application passwords and store API keys. They are encrypted at rest and never displayed again.
• Technical data: a session cookie (essential, HTTP-only), IP address and user agent in security and audit logs, and records of emails we send.

What we do not do

• We do not sell your data or use it to train models for other customers.
• We never ask for, receive or store your Google or Apple password.
• We use no advertising cookies, and no analytics or tracking cookies unless you accept visitor analytics (see below).

Security and analytics services

• Bot protection: the sign-up, log-in, password reset, contact and free audit forms may use Cloudflare Turnstile to tell people from bots. Cloudflare receives your IP address and technical browser signals for this check only.
• Error reports: when something breaks, a technical report (the error, the page address, the browser type) may be sent to our error-tracking provider, Sentry. Passwords, tokens, cookies, email addresses and page content are removed first.
• Visitor analytics (only with your consent): if you press Accept on the analytics notice, [Microsoft Clarity / PostHog] records how you use our pages (pages viewed, clicks, scrolling, anonymised session recordings) to help us improve them. If you choose No thanks, nothing is loaded. You can change your choice by clearing this site’s data in your browser.

Why we use it

To provide the service you asked for (audits, reports, drafts, scheduled checks), to keep it secure, to send the emails you opted into and service messages, and to meet legal obligations.

AI processing

When you use AI features, the text needed for that task (for example a page excerpt or a listing draft) is sent to the AI provider configured by the operator: [provider name]. Content from websites and stores is treated as data, never as instructions. AI output is a draft for you to review.

Sharing

With processors that run the service: hosting [provider], email delivery [provider], payment processing [provider], AI provider [provider], and, when switched on, Cloudflare (bot protection), Sentry (error reports) and [Microsoft Clarity / PostHog] (analytics, only with consent), under agreements that restrict their use of the data. And with authorities when the law requires.

Retention

Account and workspace data is kept while your account exists. Short-lived data is removed automatically (expired sessions and tokens, old job records, email bodies after 90 days, detailed crawl pages after 30 days beyond your five most recent audits). Backups are kept for [period].

Your rights

You can export your data and delete your account from Settings. Deleting the account removes your workspace data from the live database; encrypted backups expire on their normal schedule. You may also have rights to access, correct, restrict or object, and to complain to your data-protection authority. Write to us to exercise them.

Security

Passwords are hashed with Argon2id, secrets are encrypted with AES-256-GCM, sessions and reset tokens are stored as hashes, all traffic uses HTTPS, tenant data is isolated on the server, and administrative actions are logged. No system is perfectly secure; tell us at once if you notice a problem.

Changes

We will post updates here and, for material changes, tell account holders by email. Last updated: [date].