Privacy Policy

1. Introduction

Welcome to RankingRider ("we," "our," or "us"). RankingRider is a Wix application developed by Kaestria that uses AI to generate and optimize product SEO content for Wix Stores merchants. We are committed to protecting your personal information and your right to privacy. If you have any questions about this policy, please contact us at contact@rankingrider.com.

2. Information We Collect

When you install and use the RankingRider Wix app, we collect the following data:

• Store identity: Your Wix metaSiteId (a stable, non-personal identifier of your site) and the instanceId of the current installation. No long-lived OAuth tokens are persisted; access tokens are minted on demand from these identifiers via the Wix OAuth Client Credentials flow (1-hour TTL, never written to our database).
• Authenticated user: The site owner identifier and (where available) email address of the Wix dashboard user who installs or opens the app. These are extracted from the signed JWT Wix passes us at every load and are used solely to identify the active store and surface support contact information.
• Product data: Product titles, descriptions, categories and SEO tags that you submit (manually or by selecting from your Wix catalog) for SEO optimization.
• Optimization records: The SEO results generated by the AI (titles, meta descriptions, keywords, scores) keyed to your metaSiteId.
• Plan state: The subscription tier currently active for your store, sent to us by Wix via webhook events. Plan-level data only — see §5 for billing scope.
• Session cookie: A short-lived (15 min) HMAC-signed cookie named wix_session containing the metaSiteId, instanceId and the user identity from the Wix JWT. It is HTTP-only, secure, and used solely to keep you logged in across iframe loads. We do not use any analytics or tracking cookies.

We do not collect personal data about the end customers of your Wix store. We do not store payment card information — billing is handled entirely by Wix (see §5).

3. How We Use Your Information

• To authenticate your Wix store and provide access to the app.
• To generate AI-powered SEO content based on your product data via the Google Gemini API.
• To store and display your optimization history within the app.
• To manage your subscription plan and enforce usage limits.
• To publish optimized SEO fields back to your Wix store upon your explicit request.
• To improve the quality and performance of our service.

4. Data Sharing & Third Parties

We share your data only with the following third-party processors, strictly necessary for operating the app:

• Wix: To access your store's product data and publish optimized content via the Wix Stores Catalog V3 API, and to handle subscription billing on our behalf via the Wix App Subscription System. Governed by the Wix Privacy Policy.
• Google Gemini API (Google LLC): Product data you submit (name, category, description, target market) is sent to Google's Gemini API to generate the SEO output. Use of your data is governed by Google's API Terms of Service and the Google Privacy Policy.
• Supabase (Supabase Inc.): Database storage for plan state and optimization records. Hosted in our chosen region. Governed by the Supabase Privacy Policy.
• EmailJS: Used solely when you submit our contact form, to deliver the message to our support inbox. Governed by the EmailJS Privacy Policy.

We do not sell your data to any third party. We do not use your data for advertising.

5. Data Retention & Deletion

We retain your store data and optimization records for as long as the app is installed on your store. When you uninstall the app, Wix sends a App Removed webhook to our service: upon receipt (typically within seconds, in any case within 24 hours), any cached access token is invalidated, blocking any further access to your store. Your store profile and optimization history are retained for thirty (30) days after uninstall to allow seamless resumption if you re-install during that window. After 30 days, all remaining data is permanently deleted. You may also request immediate deletion at any time by emailing us (see §7).

6. Security

All Wix access tokens are minted on demand from the OAuth Client Credentials flow and are never persisted in our database. All data transmission occurs over HTTPS/TLS. Access to our database is restricted via role-based access control. Webhooks are verified against Wix's published RSA public key.

7. Your Rights (GDPR / EU)

If you are located in the European Economic Area, the United Kingdom, or any jurisdiction with comparable data protection rules, you have the following rights with respect to your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your data. You may also trigger this by uninstalling the app from your Wix Dashboard (see §5).
• Restriction — request that we limit processing of your data while a dispute is being resolved.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing where we rely on legitimate interests.
• Complaint — lodge a complaint with your local data protection authority (in France: CNIL).

To exercise any of these rights, email contact@rankingrider.com. We will respond within thirty (30) days.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this page. Your continued use of the app after changes constitutes your acceptance of the updated policy.

9. Contact Us

For any privacy-related questions or requests, please contact:
Kaestria
Email: contact@rankingrider.com