Privacy Policy

Last updated: May 6, 2026

This Privacy Policy explains how Webblyfy GridRank ("we", "us", "our") collects, uses, shares, and protects information about users of our website and services. By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information we collect

We collect the minimum information needed to provide and improve the Service.

Information you provide

• Account information: email address, password (stored only as a one-way hash), and an optional display name when you create an account.
• Billing information: when you subscribe to a paid plan, billing details (name, address, payment method) are collected and processed by our payment provider, Stripe. We do not store full credit card numbers — only a Stripe customer ID, the card brand, and last four digits for display purposes.
• Audit inputs: business names, URLs, keywords, competitor URLs, geographic coordinates, and city names that you enter to run scans.
• Communications: emails or messages you send us for support.

Information collected automatically

• Usage data: pages visited, features used, scans run, credits consumed, and timestamps.
• Device and connection data: IP address, browser type, operating system, and approximate location derived from IP.
• Audit results: the data returned by third-party search APIs (e.g., position, snippet, competitor URLs) for scans you initiate.

2. How we use your information

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Authenticate you and manage your account;
• Process payments and manage subscriptions through Stripe;
• Run scans you initiate and display results to you;
• Send transactional emails (account confirmation, password resets, billing receipts, scan completion notices);
• Respond to support requests;
• Detect, prevent, and address fraud, abuse, and security incidents;
• Improve the Service through aggregated, de-identified analytics;
• Comply with legal obligations.

We do not sell your personal information.

3. How we share information

We share information only as needed to provide the Service:

Service	Purpose	Data shared
Stripe, Inc.	Payments and subscription billing	Email, billing details, transaction info
SerpAPI	Geo-targeted Google search rank queries	Keyword, latitude/longitude (no personal info)
Google Maps Platform	Place autocomplete and geocoding	Search queries you enter (e.g., business name)
OpenStreetMap / Nominatim	Map tiles and city geocoding	City names you enter, IP for tile delivery
Cloudflare, Inc.	Hosting, database, authentication, edge CDN	All Service traffic (transit and storage)
Resend / email provider	Transactional email delivery	Email address, message content
Google Ads	Advertising and conversion measurement	See "Cookies and tracking" below

We may also disclose information when required by law, to protect our rights, or in connection with a business transaction (e.g., merger, acquisition).

4. Cookies and tracking

We use cookies and similar technologies to authenticate you, remember preferences, and measure how the Service is used.

• Session cookies: authenticate your login. Required for the Service to function.
• Analytics cookies: measure aggregated usage patterns.
• Advertising cookies: see Google Ads section below.

Most browsers allow you to refuse or delete cookies through their settings. Disabling cookies may prevent you from using parts of the Service.

5. Google Ads and advertising

We use Google Ads (formerly Google AdWords) to advertise our Service across Google's network and to measure the effectiveness of those ads. To do this, we install the Google Tag (gtag.js) on every page, which sets cookies provided by Google. These cookies allow Google to:

• Track visits to our website resulting from ad clicks;
• Build remarketing lists so we can show our ads to users who have previously visited;
• Measure conversions (e.g., sign-ups, purchases) on our website;
• Optimize ad delivery using Google's machine-learning models.

You can opt out of personalized Google advertising by visiting Google Ads Settings or by using browser controls such as the "Do Not Track" header. You can also install the Google Analytics opt-out browser add-on.

For more information about how Google uses your data, see Google's Privacy & Terms.

6. Data retention

We retain your account and associated data for as long as your account is active. Audit history (scans, results) is retained while your account is active and for up to 24 months after account deletion to comply with legal and tax obligations. Billing records are retained for the period required by applicable tax law (typically 7 years).

You may request deletion of your account and associated data at any time by emailing support@webblyfy.ca.

7. Security

We use industry-standard practices to protect your information, including:

• HTTPS encryption for all traffic;
• One-way hashing of passwords (bcrypt or equivalent);
• Tokenized payments via Stripe (we never see your card details);
• Access controls and audit logging on our database;
• Regular review of dependencies for known vulnerabilities.

No system is perfectly secure. If you believe your account has been compromised, contact us immediately.

8. Your rights

Depending on where you live, you may have the following rights regarding your personal information:

• Access: request a copy of the data we hold about you.
• Correction: ask us to correct inaccurate data.
• Deletion: request that we delete your data (subject to legal retention requirements).
• Portability: receive your data in a structured, machine-readable format.
• Objection / restriction: object to or restrict certain processing.
• Withdrawal of consent: withdraw consent where processing is based on consent.

If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, GDPR applies. If you are in California, the California Consumer Privacy Act (CCPA) applies. If you are in Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) applies. To exercise any of these rights, contact us at support@webblyfy.ca. We will respond within 30 days.

9. International transfers

Webblyfy GridRank is operated from Canada. The Service uses infrastructure provided by Cloudflare, Inc. (United States), and third-party APIs hosted in various jurisdictions. By using the Service, you consent to the transfer of your information to these jurisdictions, which may have different data-protection laws than your country of residence.

10. Children's privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect information from children. If you believe a child has provided us with information, please contact us so we can remove it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent version. Material changes will be communicated by email or by a notice on the Service before they take effect.

12. Contact

Questions, requests, or concerns? Email us at support@webblyfy.ca.