Last Updated: August 14, 2026
RankRoot collects basic user profile information (email address and name) provided during Google OAuth authentication or passwordless email sign-in. When connected, we query read-only Google Search Console data (queries, positions, impressions, clicks) and Google Analytics 4 session metrics solely to power your SEO intelligence reports.
OAuth access tokens and sensitive client credentials are encrypted at rest using AES-256 Web Crypto primitives. We never store raw passwords or sell user data to third parties.
Users have the unconditional right to request full account and backlink project deletion at any time by contacting privacy@rankroot.app or through the account settings dashboard.