Privacy Policy
Last updated: 4 November 2026
This policy explains what personal data AIToRank collects, why, and what rights you have. The data controller is Anthony PERINOT EI, 25 Chemin du Colombier, 06110 Le Cannet, France (contact@aitorank.com). We apply the EU General Data Protection Regulation (GDPR).
1. What we collect
| Data | Why | Legal basis |
|---|---|---|
| Name, e-mail address and profile picture from your sign-in method (e-mail link, Google or GitHub) | Create and identify your account, send you sign-in links | Performance of the contract |
| Your website address and what we read on its public pages (description, colours, fonts, logo) | Style your blog and write articles that fit your business | Performance of the contract |
| Your business profile, topics, articles, feedback on them, settings and blog domain | Write, review, schedule and publish your articles | Performance of the contract |
| Sessions: IP address, browser and device type, sign-in time | Keep you signed in and protect accounts | Performance of the contract and legitimate interest (security) |
| Usage of the AI models and image generator (date, type of task, size, errors) | Run the service, control costs and fix problems | Legitimate interest |
| Subscription and billing details (handled by Stripe; we receive the plan, status and country, never your full card number) | Bill subscriptions, meet accounting and tax obligations | Performance of the contract and legal obligation |
Readers of your blog. Blogs we host for our customers do not use cookies, third-party analytics or ads. Page views are counted only when the blog's owner has confirmed their legal details and turned the statistics on; the owner then publishes its own privacy policy, which applies to its visitors. Where it is turned on, we count page views the same anonymous way as our own website statistics below (the page, the referring site, the country and the type of device, with an identifier that changes every day; no IP address stored, no cookie, no profile). Like any web server, our hosting and network providers process the IP address of each request to deliver the page and protect the service against abuse.
Website statistics. To know how many people visit aitorank.com and where they come from, each page view of our public website records the page, the referring site or campaign tag (for example ?ref=…), the country and the type of device. Visitors are counted with an anonymous identifier computed from the IP address and browser with a key that changes every day, so the same person cannot be recognised from one day to the next; the IP address itself is not stored and no cookie is used. These records are deleted after 13 months. Legal basis: legitimate interest (measuring the audience of our website).
We do not sell your data and do not show ads.
2. Cookies
We only use cookies that are strictly necessary for the Service: your session cookie and the security cookies used during sign-in. There are no analytics or advertising cookies (the website statistics above use none), so no consent banner is needed. Blogs on your domain never receive these cookies.
3. Who processes your data
| Provider | Role | Location |
|---|---|---|
| Railway Corp. | Hosting of the application and database | Servers in the European Union (Amsterdam, Netherlands); US company |
| Cloudflare, Inc. | Network, security and HTTPS certificates for aitorank.com and your blog domain | Global network; US company |
| Anthropic, PBC | AI model that analyses your website and writes topics and articles (it receives your website content and business profile, not your account details) | United States |
| Higgsfield | Generates the cover images of articles (it receives an image description only) | Outside the EU |
| Resend | Sends sign-in and service e-mails | United States |
| Google, GitHub | Sign-in, only if you choose them | Under their own privacy policies |
| Stripe | Payments for subscriptions | EU and US |
When a provider is based outside the EU, transfers are covered by the European Commission's standard contractual clauses or the EU-US Data Privacy Framework. Our AI providers do not use your content to train their models under the terms of their commercial API.
4. How long we keep data
- Account, website profile, topics and articles: until you delete them or your account.
- When a subscription ends, your blog stops being published and your domain is disconnected; your articles stay in your account so you can export them, until you delete your account.
- Sessions: until they expire or you sign out.
- AI assistants you connect (Claude, ChatGPT…): the assistant's name, your consent and its access tokens, until you disconnect it or delete your account. Daily usage counters (articles and covers asked by you or your assistant): 90 days at most.
- Usage records of the AI models: deleted with the blog they belong to.
- Billing records: 10 years, as required by French accounting law.
5. Your rights
You can access, correct, export or delete your data, object to or restrict its processing, and withdraw any consent. You can export your articles as Markdown from your dashboard at any time, and delete your account and all its data yourself from the Subscription page (Delete my account): this also cancels your subscription. For anything else, write to contact@aitorank.com. We answer within one month. You can also lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or your local authority.
6. Security
Connections are encrypted (HTTPS), session cookies are limited to aitorank.com and access to your blog's settings requires your account. No system is perfectly secure: if a breach affecting your data occurs, we will notify you and the authorities as required by law.
7. Changes
We will post any update here and notify you in the Service of material changes. See also our Terms of Service.