Trust, Security & Privacy

• Email and password sign-in, with Google sign-in available.
• Optional two-factor authentication (TOTP authenticator app) per account.
• Sessions are protected with short-lived access tokens and refresh rotation.
• Password reset is performed via a signed, time-limited email link.

• Customer data (profiles, businesses, SEO snapshots, invoices, expenses) is stored in our managed Postgres database and protected by row-level security so users only see data they own or have been granted access to.
• Data is encrypted in transit (TLS) and at rest by our hosting provider.
• Service-role and administrative credentials are held server-side only and never shipped to the browser.

TradeRank relies on the following categories of subprocessors:

• Application hosting and database (managed cloud platform).
• Email delivery for transactional and authentication messages.
• Payments (Stripe) — used only when you subscribe or buy add-ons.
• Optional Google Search Console and Google Business Profile connections — only the accounts you explicitly connect, and only the scopes shown at consent.

We use strictly necessary cookies to keep you signed in and product analytics to understand feature usage. We do not sell personal data.

You can remove your business data from inside the app. To request full account deletion, contact us using the link below and we will remove your account and associated personal data, subject to legal retention requirements (e.g. invoicing records).

If you believe you have found a vulnerability or have a privacy question, please reach out via our contact page. Please do not include passwords or sensitive personal data in your message.