Privacy Policy

1. Data We Collect

We collect the following types of information:

• Registration data: name, email address, and profile photo provided via Google authentication
• Usage data: information about how you interact with the platform, pages visited, features used, and preferences
• Payment data: processed directly by Stripe - we do not store credit card data on our servers
• Technical data: IP address, browser type, operating system, preferred language, and device identifiers

2. How We Use Your Data

We use your information to:

• Provide, maintain, and improve our services
• Process payments and manage your subscription
• Send communications about your account, service updates, and news
• Analyze usage patterns to enhance user experience
• Prevent fraud and ensure platform security
• Comply with legal and regulatory obligations

3. Cookies and Tracking Technologies

We use cookies and similar technologies to keep your session active, remember your language preferences, analyze platform usage, and improve our services. You can configure your browser to refuse cookies, but this may affect service functionality.

4. Data Sharing

We do not sell your personal information. We may share data with:

• Service providers: Stripe (payments), Google Cloud/Firebase (infrastructure), OpenAI (content generation), and Vercel (hosting)
• Legal obligations: when required by law, court order, or legal process
• Rights protection: to protect the rights, property, or safety of RankLayer, its users, or the public

5. Data Security

We implement technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS), secure authentication via Firebase Auth, secure storage on Google Cloud Firestore, and continuous access monitoring. However, no system is 100% secure and we cannot guarantee absolute security.

6. Data Retention

We retain your personal data as long as your account is active or as necessary to provide our services. After account closure, your data will be retained for 30 days to allow reactivation and then permanently deleted. Anonymized data may be retained for analytical purposes.

7. Your Rights

In accordance with the General Data Protection Law (LGPD) and applicable regulations, you have the right to:

• Access your personal data stored by us
• Correct incomplete, inaccurate, or outdated data
• Request deletion of your personal data
• Revoke consent for data processing
• Request portability of your data
• Obtain information about the sharing of your data

To exercise any of these rights, please contact us at:

8. International Data Transfer

Your data may be processed on servers located outside of Brazil, including the United States (Google Cloud, Vercel, OpenAI, Stripe). These transfers are carried out based on adequate safeguards in accordance with the LGPD.

9. Minors

RankLayer is not intended for individuals under 18 years of age. We do not intentionally collect data from minors. If we become aware that we have collected data from a minor, we will take steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email or through the platform. We recommend reviewing this policy regularly.

11. Contact

For questions about this Privacy Policy or the processing of your personal data, please contact us at: