Legal
Privacy Policy
Last updated: March 2025
1. Who We Are
RankJet.io is a link marketplace operated under the RankJet brand. In this policy, "RankJet", "we", "us", and "our" refer to the platform and its operators.
RankJet acts as the data controller for personal data collected through the Platform. For questions about this policy or your data, contact us at privacy@rankjet.io.
2. What Data We Collect
We collect the following categories of personal data:
Account data: Name, email address, company name (optional), and password (hashed — we never store plaintext passwords). Collected when you register.
Transaction data: Order details, payment amounts, wallet transactions, and payout records. Required to process transactions and provide receipts.
Content data: URLs, anchor texts, content files, and briefs submitted as part of placing or fulfilling orders.
Communication data: Messages sent between buyers and publishers via our messaging system, and support requests submitted through contact forms.
Usage data: IP address, browser type, pages visited, and session duration. Collected automatically via server logs and analytics.
3. Why We Collect It (Legal Basis)
We process your data on the following legal bases under GDPR Article 6:
- Contract performance (Art. 6(1)(b)): Account data and transaction data are necessary to provide our services and process payments.
- Legal obligation (Art. 6(1)(c)): We retain certain financial records as required by Dutch tax and accounting law.
- Legitimate interests (Art. 6(1)(f)): Usage data is processed to maintain platform security, prevent fraud, and improve our service.
- Consent (Art. 6(1)(a)): Marketing communications (if any) are sent only with your explicit opt-in.
4. How Long We Keep Your Data
Account data: Retained for as long as your account is active. Deleted within 30 days of account deletion request, unless retention is required by law.
Transaction data: Retained for 7 years to comply with Dutch financial record-keeping obligations.
Usage data: Server logs are retained for 90 days. Aggregated analytics data may be retained indefinitely.
Support messages: Retained for 2 years after resolution.
5. Who We Share Your Data With
We do not sell your personal data. We share it only with the following third parties:
- Stripe: Payment processing. Your payment data goes directly to Stripe and is subject to Stripe's privacy policy. RankJet does not store card details.
- Supabase: Database infrastructure hosted in the EU (Frankfurt). Your data is stored here.
- Vercel: Platform hosting. Edge compute is processed in their global network. Vercel is GDPR-compliant.
- Resend: Transactional email delivery (order confirmations, notifications). Email content may pass through their servers.
All third-party processors are covered by data processing agreements (DPAs) and operate in compliance with GDPR where required.
We may also disclose data to competent authorities if required by law or to protect the rights, property, or safety of RankJet, its users, or the public.
6. International Transfers
RankJet is primarily operated from within the EU. Where data is transferred outside the EEA (for example, via Vercel's edge network), such transfers are covered by Standard Contractual Clauses or equivalent safeguards.
7. Your Rights
Under GDPR, you have the following rights regarding your personal data:
- Right to access — request a copy of the data we hold about you
- Right to rectification — correct inaccurate data
- Right to erasure — request deletion of your data ("right to be forgotten")
- Right to restriction — limit how we process your data
- Right to data portability — receive your data in a portable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — for any processing based on your consent
To exercise any of these rights, email privacy@rankjet.io. We respond within 30 days. If you're not satisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
8. Security
We use industry-standard security measures including encrypted connections (TLS), hashed passwords, and access controls. No system is 100% secure. If you suspect a security issue, contact us immediately at security@rankjet.io.
9. Cookies
We use cookies for authentication and analytics. See our Cookie Policy for details.
10. Changes to This Policy
We may update this policy. Material changes will be communicated by email or notice on the Platform. The "last updated" date above reflects the most recent revision.