Privacy Policy

1. Who we are

IziRanker ("we") operates a SaaS content generation platform (SEO, GEO, AEO) and web page analysis, accessible at iziranker.com. This policy explains what data we collect, why, and how to exercise your rights.

2. Data we collect

• Account: email address, password (hashed), associated organization(s) and role.
• Generated content: keywords, texts, images and settings entered in the Copywriting tools, as well as the content produced by AI from them.
• Shopify connection: when you connect a store, we store its domain name (your-store.myshopify.com), the authorizations (scopes) granted, and an encrypted OAuth access token (AES-256-GCM) allowing us to publish, on your behalf, the content you explicitly choose to publish.
• Billing: managed by Stripe; we never store your card details.

3. Why we use it

To provide the requested service: generate your content, analyze it, publish it to the platforms you connect (such as Shopify), manage your subscription and contact you when needed. We never sell data and never use it for advertising purposes.

4. Subprocessors and third-party services

Some data passes through the following providers, strictly to operate the service:

• Supabase — database hosting, authentication and file storage.
• Stripe — payment and billing processing.
• Google Gemini — AI text content generation from your inputs.
• Cloudflare Workers AI — generation of the images included in the content.
• Brevo — sending transactional emails (account confirmation, notifications) and, occasionally, informational emails about our offers and promotions.
• Shopify — only for stores you connect yourself, in order to publish the content you select to them.

5. Data retention

Your data is kept for as long as your account is active. If you disconnect a Shopify store, the associated access token is immediately invalidated. If you delete your account, your data is deleted within a reasonable time, subject to legal retention obligations (e.g. billing).

6. Your rights

You can, at any time, request access to, correction, export or deletion of your data, or revoke a Shopify connection from the Integrations page of your account. For any other request, contact us at ziguime6@gmail.com.

7. Security

Shopify access tokens are encrypted at rest (AES-256-GCM). Access to the database is protected by Row Level Security policies, strictly isolating each organization's data.

8. Cookies

We only use technical cookies necessary for authentication (managed by Supabase Auth). No advertising or third-party tracking cookies are used.

9. Changes

This policy may change; the last-updated date at the top of the page reflects the version in effect.