Privacy Policy

A. Information Collected Through Forms

• Name & Work Email: Captured when requesting a growth audit, strategy call, or sending a contact message.
• Phone / WhatsApp Number: Provided to coordinate meetings and discuss growth requirements.
• Company, Brand & Website: Brand name, business name, and store website URL.
• Marketplace & Revenue Range: Primary sales channels (Amazon, Flipkart, Meesho, Blinkit, Zepto, Swiggy Instamart, Shopify) and monthly revenue brackets.
• Audit Preferences: Preferred audit format (30-minute strategy call, PDF teardown, or video) and specific operational challenges.
• Honeypot Validation: Hidden spam verification field (website_url_hp) to block automated submissions without tracking users.

B. AI Growth Planner Inputs

Store metrics entered into the AI Growth Planner (revenue, order volume, sessions, ad spend, margins, return rates, and primary goals) are processed ephemerally in memory by our AI inference provider. These business metrics are never stored in our database, never linked to personal identities, and never permanently retained.

C. Growth Assistant Chatbot

Chat messages sent to our Growth Assistant are processed in real time to generate answers and source citations. Sessions utilize a temporary browser session identifier. If you choose to request a consultation via chat, your contact details are captured into our lead workflow with your consent.

D. What We Never Ask For

• Passwords or Authentication Credentials: We never request seller central passwords, master credentials, OTPs, or login keys.
• Payment Card & Banking Information: We do not collect payment card numbers, CVVs, UPI PINs, or net banking credentials.
• Sensitive Personal Data: We do not collect government IDs (Aadhaar, PAN), biometric data, or health records.

Legitimate Processing Purposes

• Responding to Enquiries: Delivering requested growth audit reports, answering questions, and scheduling discovery calls.
• Service Scoping: Evaluating channel fit, assessing catalog health, and preparing customized managed service proposals.
• Client Onboarding: Preparing written commercial contracts and establishing client communication channels.
• Technical Reliability: Diagnosing form transmission errors and monitoring page uptime when analytics consent is granted.

No Commercial Sale of Data

We do not sell, rent, monetize, or trade your personal or business data to third-party brokers, advertisers, or marketing agencies.

Grounds for Processing

• Affirmative Consent: You grant explicit consent via form checkboxes prior to submission, agreeing to direct communication regarding your enquiry.
• Certain Legitimate Uses: Fulfilling requests voluntarily initiated by you, such as preparing an audit or providing guidance.
• Contractual Necessity: Steps required to prepare, negotiate, and execute formal written service agreements.
• Legal Obligations: Compliance with applicable statutory requirements under Indian law.

Verified Technical Infrastructure Partners

• Primary Storage & Hosting: Stored on infrastructure we operate, hosted with Amazon Web Services in India (Mumbai region), with atomic file writes and append-only audit logging.
• Transactional Email: Resend Inc. delivers internal email notifications alerting our team of new submissions.
• AI Inference: Processed ephemerally in memory by a third-party AI model provider we configure without persistent storage of your financial metrics.
• Consent-Gated Analytics: Google Analytics 4 (Google LLC) and Microsoft Clarity (Microsoft Corporation) measure aggregated traffic without PII, loaded only after consent.
• Typography CDN: Google Fonts (Google LLC) serves Geist and Geist Mono font stylesheets.
• Direct Messaging: WhatsApp links connect directly to Meta Platforms / WhatsApp under their respective terms.

Storage Keys and Cookies

• rankifytech_cookie_consent (localStorage): Records your analytics consent choice ('accepted', 'declined', or 'unset').
• rankify_growth_assistant_session_id_v2 (sessionStorage): Maintains conversation state in the active browser tab.
• sidebar_state (Cookie): Retains admin console navigation collapse state (7-day duration).
• rankify_admin_leads_v1 (localStorage): In-browser mirror used by administrators to preview leads locally.
• _ga, _gid (Google Analytics): Set only after affirmative consent to measure traffic patterns with IP anonymization.
• _clck, _clsk (Microsoft Clarity): Set only after affirmative consent to diagnose user experience friction.

Managing Cookie Preferences

Analytics cookies remain blocked until you click 'Accept Analytics'. You can reset or update your preferences at any time using the Cookie Settings control in the footer or the button below.

Statutory Rights

• Right to Access: Request a summary of your personal data processed by us and our processing activities.
• Right to Correction: Request correction of inaccurate, incomplete, or outdated data.
• Right to Erasure: Request deletion of your personal data when no longer required for its original purpose.
• Right to Withdraw Consent: Revoke previously granted consent at any time without impacting prior lawful processing.
• Right of Grievance Redressal: Lodge a grievance regarding data handling with our Grievance Officer.
• Right to Nominate: Nominate an individual to exercise your data rights in the event of incapacity.

Exercising Your Rights

To exercise any of these rights, email info@rankifytech.com with the subject line "DPDPA Data Rights Request". We verify identity before processing and strive to acknowledge requests within 48 hours and resolve them within 30 days.

Technical Controls

• Encrypted Transit: All site traffic and form submissions use modern TLS 1.2+ encryption (HTTPS).
• Access Restrictions: Access to internal lead records is restricted to authenticated operators with role-based permissions.
• Rate Limiting & Honeypots: Automated controls mitigate automated form spam and credential stuffing.
• No Invasive Ad Pixels: We do not embed third-party ad networks or data broker trackers.

Security Limitations

While we apply disciplined engineering safeguards, no internet transmission or cloud storage system is 100% impenetrable. We do not make unprovable claims of absolute immunity. In the event of a security incident impacting your rights, we will notify affected individuals and authorities in accordance with applicable Indian law.