Privacy policy
Last updated: November 4, 2026
1. Data collection
We only collect data necessary for the proper functioning of our services. This data may include your name, email address, and information you voluntarily provide us through our forms.
2. Data usage
Your personal data is used to:
- Respond to your contact requests
- Improve our services
- Send you communications if you have consented
3. Data protection
We implement appropriate security measures to protect your personal data against any unauthorized access, modification, disclosure or destruction.
4. Your rights
In accordance with GDPR, you have the following rights:
- Right of access to your data
- Right to rectification
- Right to erasure
- Right to data portability
- Right to object
5. Google Search Console data
When you connect your Google Search Console account, Pushrank accesses the following data via the Google API:
- Site performance data: impressions, clicks, click-through rate (CTR) and average positions by query and page
- Email address associated with your Google account, used solely to identify the connection
We use Search Console data to measure site performance and produce SEO recommendations. If you authorize an MCP client such as ChatGPT, requested project summaries, recommendations, Search Console snapshots and article performance may be sent to that client for your requested task. OpenAI is then a recipient when you connect ChatGPT; its handling of data is governed by its own policies. We do not sell this data or use it for advertising. Google access tokens are never sent to MCP clients.
Google access tokens are encrypted and retained until you remove the Google connection. Search Console snapshots are retained for up to 90 days. You can revoke an MCP connection in Pushrank settings and disconnect Google to stop future collection. Data already sent to an MCP client is subject to that client's retention and deletion controls.
Use of this data complies with the Google API Services User Data Policy: https://developers.google.com/terms/api-services-user-data-policy
6. ChatGPT and other MCP connections
An authorized MCP connection can access the Pushrank identity, project names and URLs, SEO actions, keywords, articles, editorial context, credit balances, and stored Search Console performance data available to your account. Tool inputs and responses are used to answer your request or perform the action you confirm.
Pushrank sends the requested data to the MCP client you authorize, such as ChatGPT operated by OpenAI. The client provider is a recipient and may process and retain that data under its own privacy policy. Pushrank does not send passwords, Google access tokens, or CMS credentials through MCP tools.
Pushrank keeps the MCP authorization until you revoke it. Access tokens last up to one hour; refresh tokens last up to 30 days and may be rotated while the connection remains active. Project data remains in your Pushrank account until you delete it or request deletion. Search Console snapshots are retained for up to 90 days. A client's copy follows that provider's retention policy.
You can revoke an MCP connection in your Pushrank account settings, disconnect Google Search Console, and exercise your access or deletion rights by contacting us. Revocation stops future MCP access; it does not erase data already sent to a client, which you must manage with that provider.
Cookies and trackers
No non-essential cookie is set before you agree. The trackers we use fall into three categories:
- Necessary: account sign-in and security, customer support (Crisp), and affiliate commission attribution (FirstPromoter). These are required to run the service and honour our contracts.
- Analytics: PostHog and DataFast, to understand how the product is used and which traffic sources bring in customers.
- Advertising: Meta, TikTok and Google Ads, to measure how well our ad campaigns perform.
7. Pushrank Chrome extension
The extension audits the displayed page by reading it in your browser. That content is never sent to Pushrank; it only reaches other sites in the cases described below. Without a Pushrank account, the extension only sends the anonymous measurements described below.
If you connect it to your account, the extension keeps on your computer a read-only access token, valid for 90 days, along with your account email and name. Pushrank keeps the browser used and the last time this token was used. Each time it opens, it sends Pushrank only the hostname of the displayed site (for example www.example.com, without path or parameters) to show that site's Search Console trend. Pushrank does not store this hostname for this purpose.
When connected, the extension also sends this hostname to Pushrank to find out whether the site is an online shop. Pushrank passes it to Trendtrack, its e-commerce data provider, without your email or name, and may keep this hostname with the answer, unlinked from your account. If you open the E-commerce tab, Pushrank may record the hostname you viewed with your account to apply the monthly limit; this history is deleted with your account.
When you run an HTTP status check, the extension queries the sites hosting the page's images or targeted by its links directly, without cookies or referrer; access to those sites is removed as soon as the check ends. The Images tab loads its thumbnails from the sites hosting them.
To fix its errors and learn which features are used, the extension sends anonymous measurements: to GlitchTip, the error tracking tool hosted by Pushrank, the type and message of an extension error, with any web address removed; to PostHog, Pushrank's audience measurement tool, the actions taken in the extension (panel opened, tab viewed, export, status check), with an identifier drawn at random at install time and unlinked from your account. Neither the address, the domain nor the content of audited pages is included. As with any request, these services receive the connection IP address. Uninstalling the extension erases this identifier.
You can sign out from the extension, which erases this data from your computer, or revoke access from Settings › Account › Security. The use of information received by the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
8. Contact
If you have any questions about this privacy policy, you can contact us via our contact form.