Legal
Privacy Policy
Last updated: May 8, 2026 · Effective: May 8, 2026
This Privacy Policy describes how Rankmore ("Rankmore", "we", "us", or "our") collects, uses, stores, and shares information when you install or use the Rankmore Shopify application (the "App"), visit rankmore.app (the "Site"), or otherwise interact with our services (collectively, the "Services").
We designed Rankmore to require the smallest possible footprint of merchant data. We do not request access to your customers' personal information, orders, or payment data, and we never sell or rent any data we collect.
1. Who we are and how to contact us
Rankmore is operated by Joe Della Mora, an individual doing business as Rankmore, with a principal place of business at 3211 Cahuenga Blvd W, Los Angeles, CA 90068, USA ("we"). For any privacy-related question, request, or complaint:
- Email: hello@rankmore.app
- Website: https://rankmore.app
2. Information we collect
2.1 From the Shopify merchant (you)
When you install the App, Shopify provides us with the following information about your store via the Shopify OAuth grant you authorize:
- Your store's
shopidentifier (e.g.your-store.myshopify.com) - Store-level metadata: store name, contact email, country, currency, primary domain
- An OAuth access token used by Rankmore to call the Shopify Admin API
From Shopify's APIs, with the scopes you grant, we read and (on your explicit per-change approval) write:
read_products,write_products— to read product titles, descriptions, images, handles, metafields, and to apply the PDP edits you approveread_content,write_content— to read existing blog articles and to publish hub/spoke articles you approve
Rankmore does not request the read_themes, write_themes, read_customers, read_orders, read_checkouts, read_payments, or any other scope that would expose your customers' personal information, transaction data, or your theme files. Homepage discoverability for new articles ships as a theme app extension you add yourself from the theme editor's "Add section" panel — Rankmore never reads or writes theme files.
2.2 Account and billing information
All payments for Rankmore (one-time tier purchases, the Press Release add-on, and the Rankmore Pro subscription) are processed through Shopify Billing. We do not collect or store your credit card number or other payment instrument details. Shopify provides us only with charge identifiers and statuses needed to provision the products you purchased.
2.3 Information you provide directly
If you contact our support team, fill out a form on the Site, sign up for a newsletter, or interact with us through other channels, we collect the information you choose to provide — typically your name, email address, store URL, and the contents of your message.
2.4 Information collected automatically
When you visit the Site or use the App, we (and our service providers) automatically collect:
- Log and usage data: IP address, browser type and version, operating system, referring/exit pages, pages viewed, timestamps, and clickstream within the App
- Device data: approximate device type, screen size, and locale
- Approximate location data: derived from your IP address (city/country level only — we do not collect precise GPS location)
- Cookies and similar technologies: see our Cookie Policy for details
2.5 Information from third parties
We may receive information about you or your store from:
- Shopify — installation events, billing events, GDPR webhooks (see Section 9)
- Analytics and product usage providers — see Section 6
- Public sources — search engine results and AI engine outputs probed for ranking and visibility tracking purposes
3. How we use information
We use the information we collect to:
- Provide, operate, secure, and maintain the App and Site
- Generate AI-powered SEO content (PDP suggestions, hub and spoke articles, press releases) tailored to your products — every output is queued for your explicit approval before any change is applied to your store
- Track keyword positions, AI engine visibility, and other metrics you opted into
- Process transactions through Shopify Billing
- Respond to your support requests and communicate with you about the Services
- Send you transactional emails (e.g. campaign reports, billing receipts) and, if you've opted in, occasional product updates
- Detect, prevent, and address technical issues, fraud, and security incidents
- Comply with our legal obligations and enforce our Terms of Service
- Improve the Services through aggregate, anonymized analysis
4. Legal basis for processing (EU/UK)
If you are located in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR / UK GDPR:
- Contract — to perform the services you requested when you installed Rankmore and accepted our Terms
- Legitimate interests — to operate, improve, secure, and market the Services in ways that are consistent with your reasonable expectations and that do not override your rights
- Consent — for optional cookies, marketing communications, and any processing of special-category data (we do not knowingly process special-category data)
- Legal obligation — to comply with tax, accounting, and other applicable laws
5. Sharing and disclosure
We do not sell your personal information. We share information only as follows:
5.1 Service providers (sub-processors)
We engage trusted third-party providers ("sub-processors") to operate Rankmore. Each is bound by contract to use information only for the purposes we specify and to maintain appropriate security:
| Sub-processor | Purpose | Data category | Region |
|---|---|---|---|
| Shopify Inc. | App distribution, OAuth, billing, store API access | All app data | Canada / Global |
| Anthropic, PBC | Claude AI for content generation | Product/keyword text inputs only | USA |
| OpenAI, L.L.C. | Image generation fallback | Image generation prompts | USA |
| Google LLC (Gemini API) | Hero image generation | Image generation prompts | USA |
| Voyage AI, Inc. | Text embeddings for Smart Linking | Article text excerpts | USA |
| Perplexity AI, Inc. | AI engine visibility probes | Public search queries only | USA |
| DataForSEO LLC | SERP rank tracking, keyword research | Public search queries only | USA |
| EIN Presswire (Everything-PR Newswire LLC) | Press release distribution (add-on only) | Press release content you approved | USA |
| Cloudflare, Inc. | R2 object storage (hero images), CDN | Generated images | USA / Global |
| Neon Inc. | Postgres database hosting | App data at rest | USA |
| Inngest, Inc. | Background workflow execution | Job event payloads | USA |
| Resend | Transactional email delivery | Email address, message contents | USA |
| PostHog Inc. | Product analytics | Pseudonymous usage events | USA / EU |
| HostGator (HEG, LLC) | Marketing site hosting | Site visitor logs | USA |
5.2 Legal and safety
We may disclose information if required by law, subpoena, or other legal process; to enforce our Terms; or to protect the rights, property, or safety of Rankmore, our merchants, or others.
5.3 Business transfers
If Rankmore is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to the receiving party honoring the commitments in this Policy.
6. Cookies and analytics
We use a small number of cookies and similar technologies to operate the Services and understand product usage. See our full Cookie Policy. You can disable non-essential cookies via your browser settings or via our cookie banner where applicable.
7. Data retention
We retain information for as long as needed to provide the Services and comply with our legal obligations:
- Active merchant data — retained for the duration of your installation
- Uninstalled stores — store-scoped data is deleted within 30 days of uninstall, in line with Shopify's GDPR webhook flow (Section 9)
- Billing and tax records — retained for up to 7 years to comply with applicable accounting and tax laws
- Backups — encrypted backups may be retained for up to 30 days after primary deletion
Note: blog articles, PDP edits, and other content that Rankmore helped you generate live in your Shopify store. Uninstalling Rankmore removes our records but does not touch content already published to your storefront.
8. International transfers
Rankmore is operated from Canada. Many of our sub-processors are located in the United States. When we transfer personal information across borders, we rely on appropriate safeguards including the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, and equivalent Canadian and other regional mechanisms.
9. Shopify GDPR webhooks
Shopify requires apps to honor the following mandatory data privacy webhooks. Rankmore complies fully:
customers/data_request— within 30 days of receiving this webhook, we provide any personal information we hold about the identified customer (typically: none, since we do not request customer data)customers/redact— within 30 days, we delete any personal information we hold about the identified customershop/redact— within 30 days of an uninstall, we permanently delete all data associated with the uninstalled shop
10. Your rights
Depending on your location, you may have the following rights regarding the personal information we hold about you:
- Access — request a copy of your personal information
- Rectification — request correction of inaccurate information
- Erasure — request deletion of your personal information ("right to be forgotten")
- Restriction — request that we limit how we use your information
- Portability — request a machine-readable copy of your information
- Objection — object to processing based on legitimate interests
- Withdraw consent — at any time, where processing is based on consent
- Lodge a complaint — with your local data protection authority
To exercise any of these rights, email hello@rankmore.app. We will respond within 30 days.
10.1 California residents (CCPA/CPRA)
California residents have the rights to know, delete, correct, and opt out of "sale" or "sharing" of personal information. Rankmore does not sell or share personal information for cross-context behavioral advertising. To exercise your rights, email hello@rankmore.app.
11. Children's privacy
Rankmore is a B2B service for Shopify merchants. The Services are not directed to and we do not knowingly collect personal information from anyone under 16 years of age. If you believe a minor has provided us with personal information, please contact us and we will promptly delete it.
12. Security
We maintain administrative, technical, and physical safeguards designed to protect personal information. These include encryption in transit (TLS 1.2+), encryption at rest, scoped access tokens, least-privilege internal access, and security incident response procedures. See our Security overview for details.
No system is perfectly secure. If you become aware of a vulnerability, please report it to hello@rankmore.app.
13. Changes to this Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you through the App, by email, or by another reasonable means. Your continued use of the Services after changes become effective constitutes acceptance of the updated Policy.
14. Contact us
Questions, requests, or complaints about this Privacy Policy or our data practices:
- Email: hello@rankmore.app
- Mail: Joe Della Mora, doing business as Rankmore, 3211 Cahuenga Blvd W, Los Angeles, CA 90068, USA
This Privacy Policy is provided as a clear, plain-English description of our practices. It is not legal advice. We recommend reviewing this Policy with your own counsel as it applies to your specific use of the Services.