Privacy Notice

Last updated: May 22, 2026

1. Who we are

RankPilot AI is operated by PXP Holdings ("we", "us", "our"). PXP Holdings is the data controller responsible for personal data processed through the RankPilot AI service.

2. Personal data we collect

• Account & contact data: name, email address, login credentials.
• Audit input data: website URLs, business name, target keywords you submit.
• Support data: messages and information you send when contacting us.
• Usage & telemetry: pages viewed, features used, device identifiers, IP address, browser type.
• Transaction data: records of purchases (handled by Paddle — see below).

3. Purposes and legal bases

• Provide the service (delivering audits, account management) — performance of a contract.
• Customer support — performance of a contract / legitimate interests.
• Security & fraud prevention — legitimate interests and legal obligation.
• Product improvement & analytics — legitimate interests.
• Marketing communications (where applicable) — consent, which you can withdraw at any time.

4. Sharing your data

We share personal data only with:

• Service providers / subprocessors — hosting, infrastructure, analytics, and customer support tooling.
• Paddle — our Merchant of Record, which handles payments, subscription management, tax compliance, invoicing, and refunds.
• Professional advisers — legal, accounting, and compliance advisers where necessary.
• Authorities — where required by law or to protect our rights.

5. International transfers

Where personal data is transferred outside the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions issued by the relevant authority.

6. Data retention

We retain personal data only for as long as necessary to provide the service, meet legal and accounting obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymise it.

7. Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict, port, or object to the processing of your personal data, and to withdraw consent at any time. You also have the right to lodge a complaint with your supervisory authority. We aim to respond to verified requests within one month.

8. Security

We implement appropriate technical and organisational measures — including encryption in transit, access controls, and least-privilege practices — to protect personal data against unauthorised access, alteration, disclosure, or destruction.

9. Cookies

We use essential cookies to operate the service and may use analytics cookies to understand how the service is used. You can manage cookie preferences through your browser settings.

10. Contact

For privacy questions or to exercise your rights, contact us at hello@rankpilot.ai.