Privacy policy
What Rankyfy Agencies collects from buyers, reviewers and agencies, why, how long it is kept, and how to see, correct or delete it.
This policy explains what personal data Rankyfy Agencies collects, why, how long it is kept and what your choices are. It is written in plain English and is not legal advice. It applies to agencies.rankyfy.com; the Rankyfy software at rankyfy.com has its own policy. Questions and requests go to the grievance officer through the contact page.
What we collect, and why
- Buyers sending a brief or contacting an agency: name, work email, company, phone if you give it, and the brief itself. We use it to verify that the email is a real business address, to send the brief to the agencies you choose or we match, and to let those agencies reply. Agencies see your details only after the brief passes moderation and, where you asked us to match, only the agencies matched.
- Reviewers: name, role, company, the review, and the verification record (a work-email code, a LinkedIn sign-in, or a call). Your email address is stored as a hash and never published; your name, role and company appear with the review unless you ask for the name to be withheld. We keep the verification record because the law in the US, the UK and India requires review sites to be able to show that reviews come from real customers.
- Fraud checks on reviews: hashed IP address, device characteristics and timing, compared with the agency's own staff and with other reviews. We do not sell or share this data; it exists to keep fake reviews off the site.
- Agencies and their staff: business details, the claim verification (domain email or DNS record), registry checks, and the profile content you submit. Business facts are public by design.
- Visitors: server logs and analytics (pages viewed, referrer, approximate location from IP, browser). We use them to keep the site running, measure which pages help, and detect abuse.
Cookies and analytics
The site sets a session cookie for sign-in and forms, and a preference cookie that remembers dismissed messages. Analytics cookies, where used, measure traffic in aggregate, never for advertising. Outbound links to agencies carry a referral tag that identifies this site, not you. Where a law requires consent for non-essential cookies, the site asks first.
Emails we send
We email buyers about their briefs, reviewers about their reviews, and agencies about their profiles, leads and reviews. Outreach to agencies that have not claimed a profile follows the US CAN-SPAM Act: a truthful sender and subject line, our physical address, and a working one-click unsubscribe honored within ten business days, with no more than two follow-ups. Newsletters go only to people who signed up and can be stopped from any issue.
Sharing
We share a buyer's brief with the agencies it is sent to. Reviewer names, roles and companies are public as part of the review; the verification behind a review is shown to an agency only when it disputes the review, and only as far as needed to decide the dispute. Processors for hosting, email delivery, analytics and payments work under contracts that limit them to our instructions. We do not sell personal data, and we do not share it with any agency connected to Rankyfy or its sales team; access is logged.
Retention
Briefs are kept as long as needed to serve them and for records, then deleted or anonymized. Reviews stay published while the agency is listed and are kept, with their verification record, for as long as the law on fake reviews reasonably requires. Server logs are kept for a short, fixed period. Agencies can export their reviews at any time, with verification receipts, under the continuity pledge.
Your rights and choices
You can ask to see, correct or delete your data, withdraw a review, or object to a use of your data, by writing through the contact page. Requests are acknowledged within 24 hours and answered within the time the applicable law allows. Deleting a review removes it from the site; we may keep a minimal record that it existed and was verified. If you are in a US state with a privacy law, you have the rights that law gives you, including to know, delete and correct, and we do not sell or share data for cross-context advertising. If you are in India, our consent notices and your rights follow the Digital Personal Data Protection Act and its rules, and our grievance officer is the first point of contact. If you are in the UK or the EU, you may also complain to your data protection authority.
Security
Data is stored behind a web application firewall, encrypted in transit, with access limited to staff who need it and logged. Passwords and reviewer emails are hashed. Security releases are applied promptly.
Changes
The site is for businesses and is not directed at children. When this policy changes, the date on the page moves and the change is recorded; material changes are announced before they take effect.