Privacy Policy

1. Who we are

RankTalon is a website auditing and social publishing service operated by DROSALA LTD, a company registered with Companies House in the United Kingdom under company number 17415220. DROSALA LTD's business address is 21 East Street, Canterbury, England, CT1 1ED.

For the purposes of applicable data protection law, DROSALA LTD is the controller of personal data processed through RankTalon. For privacy questions or data requests, email contact@ranktalon.com and mention “RankTalon”.

2. Information we process

• Website addresses you submit, publicly available page content, and the SEO audit results generated from that content.
• Facebook Page identifiers and names, Page permissions, and the professional Instagram account identifiers, usernames, names, and profile images linked to those Pages.
• Google Business Profile account and location information that you authorise RankTalon to access.
• TikTok profile information and videos you approve for direct publishing or choose to upload to your TikTok inbox as drafts.
• OAuth access and refresh tokens required to maintain authorised integrations. Tokens are encrypted before storage and are not exposed to the browser.
• Drafts, scheduled publishing details, connection status, and limited technical logs needed to operate and protect the service.
• Names, email addresses, company details, optional telephone numbers and websites, enquiry categories, reply preferences, and message content submitted through RankTalon contact forms.
• A one-way hash derived from connection information for contact-form rate limiting, together with provider delivery identifiers and limited outcome logs. RankTalon does not store the full enquiry in its application database.

RankTalon does not ask for or store your Facebook, Instagram, Google, or TikTok password.

3. How we use the information

We use the information only to:

• produce website audits and recommendations requested by you;
• show the business accounts and locations you are authorised to manage;
• prepare, schedule, publish, update, or delete supported content when you instruct the service to do so; approved calendar Reels can be published directly to TikTok, while manual TikTok draft uploads remain unpublished until you finish them in TikTok;
• route, investigate, and reply to customer support and business enquiries;
• maintain security, prevent abuse, diagnose errors, and comply with legal obligations.

4. Legal bases

We process data where necessary to provide the service you request, based on your consent when you connect a third-party account, for our legitimate interest in keeping the service secure and reliable, and where needed to comply with law. You can withdraw an integration authorisation at any time by disconnecting it. Contact details are processed to take steps at your request, perform or support a customer relationship, and for our legitimate interests in responding to enquiries and preventing misuse of the contact service.

5. Sharing and third-party services

We do not sell personal data. To operate RankTalon, information may be processed by the following service providers: Meta Platforms, Inc. for Facebook and Instagram; TikTok Pte. Ltd. for TikTok account connections and draft video uploads; Google LLC for Google sign-in and Google Business Profile services; Replit for hosting, application infrastructure, and database services; and OpenAI for optional AI analysis and content generation when enabled by the operator. Other processors may be used where strictly required to operate and protect RankTalon. Resend is used as the outbound email provider for messages submitted through the RankTalon contact forms.

Some of these providers may process personal data outside the United Kingdom, including in the United States. Where required, DROSALA LTD relies on appropriate safeguards for those transfers, including the contractual safeguards provided by the relevant providers and applicable Standard Contractual Clauses or other lawful transfer mechanisms. Each provider processes data under its own terms and privacy obligations.

6. Storage, security, and retention

Integration tokens are encrypted at rest and used only by the server. We retain connection data while an integration remains active. Disconnecting Meta or TikTok removes the relevant stored OAuth connection and provider metadata from the active database. Audit reports and publishing records may be retained for service history unless you request their deletion. Necessary security logs and backups are removed or anonymised according to documented operational retention processes.

Contact enquiries are retained in the receiving mailbox and the outbound email provider only while needed to respond to the request, maintain an active customer relationship, handle a dispute, or meet a legal obligation. They are then deleted according to DROSALA LTD's documented retention process. Contact forms do not add senders to a marketing list.

7. Your rights

Depending on your location, you may have rights to access, correct, export, restrict, object to, or delete your personal data. You may complain to the UK Information Commissioner's Office (ICO). We may need to verify your identity and authority over a connected business asset before fulfilling a request.

8. Deleting your data

Follow our User Data Deletion instructions. You can also remove RankTalon through Facebook's or TikTok's connected-app controls. To request removal of a contact enquiry or provider copy, email contact@ranktalon.com and include the public contact reference where available. We may need to verify your identity before completing the request.

9. Changes to this policy

We may update this policy as RankTalon develops. The date at the top of this page identifies the current version.