Privacy Policy

1. Who we are

RankTalon is a website auditing and social publishing service operated by DROSALA in the United Kingdom. For privacy questions or data requests, use the operator contact page and mention “RankTalon”.

2. Information we process

• Website addresses you submit, publicly available page content, and the SEO audit results generated from that content.
• Facebook Page identifiers and names, Page permissions, and the professional Instagram account identifiers, usernames, names, and profile images linked to those Pages.
• Google Business Profile account and location information that you authorise RankTalon to access.
• OAuth access and refresh tokens required to maintain authorised integrations. Tokens are encrypted before storage and are not exposed to the browser.
• Drafts, scheduled publishing details, connection status, and limited technical logs needed to operate and protect the service.

RankTalon does not ask for or store your Facebook, Instagram, or Google password.

3. How we use the information

We use the information only to:

• produce website audits and recommendations requested by you;
• show the business accounts and locations you are authorised to manage;
• prepare, schedule, publish, update, or delete content when you instruct the service to do so;
• maintain security, prevent abuse, diagnose errors, and comply with legal obligations.

4. Legal bases

We process data where necessary to provide the service you request, based on your consent when you connect a third-party account, for our legitimate interest in keeping the service secure and reliable, and where needed to comply with law. You can withdraw an integration authorisation at any time by disconnecting it.

5. Sharing and third-party services

We do not sell personal data. Information may be processed by Meta, Google, our hosting and database providers, and other processors strictly required to operate RankTalon. Optional AI analysis is used only when enabled by the operator. Each provider processes data under its own terms and privacy obligations.

6. Storage, security, and retention

Integration tokens are encrypted at rest and used only by the server. We retain connection data while an integration remains active. Disconnecting Meta removes the stored Meta OAuth connection, Facebook Page tokens, and linked Instagram account metadata from the active database. Audit reports and publishing records may be retained for service history unless you request their deletion. Necessary security logs and backups are removed or anonymised according to operational retention schedules, normally within 30 days after a verified deletion request.

7. Your rights

Depending on your location, you may have rights to access, correct, export, restrict, object to, or delete your personal data, and to complain to a data protection authority. We may need to verify your identity and authority over a connected business asset before fulfilling a request.

8. Deleting your data

Follow our User Data Deletion instructions. You can also remove RankTalon from Facebook’s “Apps and Websites” settings.

9. Changes to this policy

We may update this policy as RankTalon develops. The date at the top of this page identifies the current version.