Privacy policy
Last updated: September 27, 2026
1. Data collection
We only collect data necessary for the proper functioning of our services. This data may include your name, email address, and information you voluntarily provide us through our forms.
2. Data usage
Your personal data is used to:
- Respond to your contact requests
- Improve our services
- Send you communications if you have consented
3. Data protection
We implement appropriate security measures to protect your personal data against any unauthorized access, modification, disclosure or destruction.
4. Your rights
In accordance with GDPR, you have the following rights:
- Right of access to your data
- Right to rectification
- Right to erasure
- Right to data portability
- Right to object
5. Google Search Console data
When you connect your Google Search Console account, Pushrank accesses the following data via the Google API:
- Site performance data: impressions, clicks, click-through rate (CTR) and average positions by query and page
- Email address associated with your Google account, used solely to identify the connection
We use Search Console data to measure site performance and produce SEO recommendations. If you authorize an MCP client such as ChatGPT, requested project summaries, recommendations, Search Console snapshots and article performance may be sent to that client for your requested task. OpenAI is then a recipient when you connect ChatGPT; its handling of data is governed by its own policies. We do not sell this data or use it for advertising. Google access tokens are never sent to MCP clients.
Google access tokens are encrypted and retained until you remove the Google connection. Search Console snapshots are retained for up to 90 days. You can revoke an MCP connection in Pushrank settings and disconnect Google to stop future collection. Data already sent to an MCP client is subject to that client's retention and deletion controls.
Use of this data complies with the Google API Services User Data Policy: https://developers.google.com/terms/api-services-user-data-policy
6. ChatGPT and other MCP connections
An authorized MCP connection can access the Pushrank identity, project names and URLs, SEO actions, keywords, articles, editorial context, credit balances, and stored Search Console performance data available to your account. Tool inputs and responses are used to answer your request or perform the action you confirm.
Pushrank sends the requested data to the MCP client you authorize, such as ChatGPT operated by OpenAI. The client provider is a recipient and may process and retain that data under its own privacy policy. Pushrank does not send passwords, Google access tokens, or CMS credentials through MCP tools.
Pushrank keeps the MCP authorization until you revoke it. Access tokens last up to one hour; refresh tokens last up to 30 days and may be rotated while the connection remains active. Project data remains in your Pushrank account until you delete it or request deletion. Search Console snapshots are retained for up to 90 days. A client's copy follows that provider's retention policy.
You can revoke an MCP connection in your Pushrank account settings, disconnect Google Search Console, and exercise your access or deletion rights by contacting us. Revocation stops future MCP access; it does not erase data already sent to a client, which you must manage with that provider.
Cookies and trackers
No non-essential cookie is set before you agree. The trackers we use fall into three categories:
- Necessary: account sign-in and security, customer support (Crisp), and affiliate commission attribution (FirstPromoter). These are required to run the service and honour our contracts.
- Analytics: PostHog and DataFast, to understand how the product is used and which traffic sources bring in customers.
- Advertising: Meta, TikTok and Google Ads, to measure how well our ad campaigns perform.
7. Contact
If you have any questions about this privacy policy, you can contact us via our contact form.