Privacy Policy

This Privacy Policy explains how Fahad Mobeen, operating AutoRankEngine ("we," "us," or "our"), collects, uses, and protects your information when you use autorankengine.com (the "Service").

1. Information We Collect

Account information: your email address and a securely hashed password when you register.

Site connection information: your WordPress site URL, WordPress username, and WordPress Application Password, which we store encrypted (AES-256) and never display or return in plain text through our interface, logs, or support communications. If you choose to enable search-indexing features, we also store your Google service account credentials (encrypted) and any IndexNow key you generate, in the same manner.

Content and usage data: the keywords, niche information, and site content (categories, tags, post titles) you provide or that we retrieve from your connected WordPress site in order to generate article drafts and keyword suggestions; the articles, revisions, and social media captions generated for your account; and your search ranking history for keywords you choose to track.

Billing information: we do not collect or store your payment card details. All payment information is collected and processed directly by our licensed third-party payment processor, which acts as our Merchant of Record. We receive only your subscription status, plan tier, and billing period dates from our payment processor — never your card number or full payment details.

Technical data: standard server logs (IP address, browser type, request timestamps) for security and debugging purposes.

2. How We Use Your Information

We use your information to: operate and provide the Service, including generating articles, checking search rankings, and publishing content to your connected WordPress site at your direction; communicate with you about your account, billing, and service updates; detect and prevent fraud, abuse, or security incidents; and improve the Service.

We do not sell your personal information to third parties, and we do not use your site content or generated articles to train AI models beyond what is inherent to calling third-party AI providers as described below.

3. Third-Party Services We Use

To provide the Service, we share limited data with:

• AI content-generation providers (currently including Groq and DeepSeek, with a local fallback), which receive the keywords, niche context, and prompts needed to generate your article drafts and social captions.
• DataForSEO, which receives the keywords and target search market (country, language, device) you choose to track, in order to return ranking positions.
• Google's Indexing API and IndexNow, which receive the URLs of your published articles, in order to notify search engines of new or updated content.
• Our payment processor, which receives your email address and billing information necessary to process your subscription.
• Your own WordPress site, which we connect to directly using your stored credentials, solely to publish drafts, retrieve site content for context, and update posts at your explicit direction.

We do not share your data with any other third party except where required by law.

4. Data Retention and Security

We retain your account and site data for as long as your account remains active, and for a reasonable period afterward to comply with legal and billing obligations. Encrypted credentials (WordPress Application Passwords, Google service account keys) are stored using AES-256-GCM encryption and are never returned in decrypted form through any API response, log, or error message. You may request deletion of your account and associated data at any time by contacting us.

5. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal information, or to object to certain processing. To exercise these rights, contact us at the email address below. You can disconnect your WordPress site, revoke stored credentials, or delete your account directly from your account settings at any time.

6. Children's Privacy

The Service is not directed at individuals under 18, and we do not knowingly collect personal information from children.

7. International Data Transfers

As a service operated from Pakistan using infrastructure and third-party providers that may be located in other countries, your information may be processed outside your country of residence. We take reasonable steps to ensure your information receives an adequate level of protection wherever it is processed.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated "Last updated" date.

9. Contact

Questions about this Privacy Policy, or requests to access or delete your data, can be sent to [email protected].