Privacy Policy

RankFlow SEO ("RankFlow", "we", "us", or "our") is a trade name of V-technology LLC, a Wyoming limited liability company, with its principal office at 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, United States. We provide SEO consulting and execution services to businesses.

This Privacy Policy explains what personal data we collect when you visit the rankflowseo.online website (the "Site"), contact us, subscribe to one of our plans, or otherwise engage our services; how we use that data; who we share it with; and the rights you have. It applies where we act as a "controller" — that is, where we decide why and how the data is processed. When we process data on behalf of a client (for example, analytics data from a client's own website), we act as a "processor" and that processing is governed by our Data Processing Addendum.

Information you give us directly. When you submit a form on our Site, request a free audit, or correspond with us by email, you provide information such as your name, work email address, company name, website URL, monthly traffic range, and the contents of your message. When you become a client, we additionally collect billing details (name, company, billing address, and email), subscription and contract details, and the names and contact details of the individuals on your team who work with us.

Payment information. When you subscribe online, you enter your card or other payment details on a checkout page hosted by Stripe. Full card numbers are collected and stored by Stripe and never reach our servers. Stripe shares limited information with us, such as your name, email address, billing address, the brand and last four digits of your card, and the status of your payments and subscription.

Information collected automatically. When you visit the Site, our hosting provider receives standard log data: IP address, browser type and version, operating system, referring URL, pages requested, and timestamps. We use this data only to operate and secure the Site. We do not use analytics or advertising trackers on the Site.

Information from third parties. If you connect a third-party platform to our services (for example, Google Search Console, Google Analytics, or your CMS), we receive the data those platforms expose. We process this data only for the purposes set out in our engagement with you.

Cookies and similar technologies. The Site uses only the strictly necessary cookies and local-storage entries described in our Cookie Notice.

We use the information we collect to: (a) respond to inquiries, send the free audits and information you request, and schedule meetings; (b) provide, maintain, and improve our services and the Site; (c) process payments, manage subscriptions and invoices, and manage our client relationships; (d) send service-related messages such as onboarding information, billing notices, and security alerts; (e) send marketing emails about our services where you have opted in or otherwise have a relationship with us, with an unsubscribe link in every message; (f) detect, prevent, and address fraud, abuse, and security incidents; and (g) comply with our legal obligations, including tax and accounting requirements.

Lawful bases (EU/UK/EEA residents). Where the GDPR or UK GDPR applies, we rely on the following lawful bases: performance of a contract (to provide the services you request); our legitimate interests (to operate and improve our business, market our services to existing or prospective business customers in a way that respects your rights, and secure our Site); your consent (where required, for example for certain marketing); and compliance with a legal obligation.

We share personal data only as described below. We do not sell personal data, and we do not share personal data with third parties for their own cross-context behavioral advertising.

With service providers. We use a small number of vetted vendors to operate our business. Each is bound by terms that restrict their use of personal data to providing services to us. Our current subprocessors are: Vercel Inc. (United States) for website and application hosting; Neon Inc. (United States) for database hosting; Stripe, Inc. (United States) for payment processing and billing; and Resend, Inc. (United States) for transactional email.

With your authorization. We share data with third parties when you direct us to do so — for example, when we bring a freelance specialist onto your engagement and you ask us to grant them access to your tools.

For legal reasons. We may disclose personal data if we believe in good faith that disclosure is necessary to comply with a legal obligation, enforce our Terms of Service, protect the rights, property, or safety of RankFlow, our clients, or others, or in connection with an investigation of fraud or security issues.

Business transfers. If we are involved in a merger, acquisition, financing, or sale of all or part of our business, personal data may be transferred as part of that transaction. We will notify you (for example, by a notice on the Site) before any such transfer becomes effective.

We retain personal data only as long as needed for the purposes described in this policy, then delete or anonymize it. Specifically: inquiry and audit-request data is retained for up to 24 months after our last interaction; client records (contracts, invoices, payment and subscription records, deliverables) are retained for the duration of the engagement and for seven years thereafter for tax, audit, and dispute-resolution purposes; marketing-list data is retained until you unsubscribe or after 24 months of no engagement, whichever comes first; and server logs are kept by our hosting provider for a limited period under its standard retention settings.

Where law requires a longer retention period (for example, tax law), we retain the data for that period.

Depending on where you live, you may have the following rights with respect to your personal data: to access the personal data we hold about you; to correct inaccurate or incomplete data; to delete your data, subject to limited exceptions; to restrict or object to certain processing, including direct marketing; to data portability; and to withdraw consent at any time, where processing is based on consent.

If you live in a US state with a comprehensive consumer privacy law, you may have rights to know, correct, delete, and obtain a copy of your personal data, and to opt out of "sale" or "sharing" and of targeted advertising. We do not sell or share personal data in the meaning of these laws.

If you live in the EU, UK, or EEA, in addition to the rights above, you may lodge a complaint with your local supervisory authority. You can also contact us directly and we will work with you to resolve any concern.

To exercise any right, email hello@rankflowseo.online. We will verify your request (typically by confirming your control of the email address on file) and respond within the time period required by applicable law — generally 30 days under the GDPR and 45 days under US state laws, with one extension where permitted. You may use an authorized agent to submit a request on your behalf where law permits.

Marketing emails. You can unsubscribe from marketing emails at any time using the link at the bottom of any such email. We will continue to send essential service messages (for example, billing or security notices) while you remain our client.

We are a US company. Our personnel and our service providers may access, store, and process personal data in the United States and in other countries. If you access our Site or services from outside the United States, you understand that your personal data may be transferred to and processed in those countries.

Where personal data is transferred from the European Economic Area, the United Kingdom, or Switzerland to a country that has not received an adequacy decision, we rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, supplemented by additional safeguards where required.

We use technical and organizational measures appropriate to the size of our business to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, and access. These include encryption in transit (TLS) for the Site and our providers, access to personal data limited to the people who need it to deliver our services, unique accounts with two-factor authentication on our service accounts where available, and reputable infrastructure providers that maintain their own security programs.

No system is fully secure. If you become aware of a security issue, please report it to hello@rankflowseo.online.

Our Site and services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. When we do, we will post the new version on this page and update the "last updated" date at the top. Material changes — for example, changes to the categories of data we collect or the purposes for which we use it — will be communicated to active clients by email and, where required, we will obtain your consent before the change takes effect.

If you have questions about this Privacy Policy or how we handle your personal data, contact us at hello@rankflowseo.online or by mail at V-technology LLC (RankFlow SEO), 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, United States.