Privacy notice
This launch draft is structured for an EU service and should be completed with your legal entity, retention periods and vendors before production.
What we collect
We collect account identifiers, contact details, order configuration, support conversations, payment status, promo redemptions and fulfilment activity. Stripe and PayPal process payment card information; RankShift does not store raw card numbers.
Sensitive credentials
Credentials entered into the order vault are encrypted at rest with AES-256-GCM. Access is limited to the customer, assigned booster and authorized administrators. Do not share credentials in ordinary chat.
Why we use data
We use data to create accounts, process and fulfil orders, prevent abuse, provide support, calculate payouts, meet legal obligations and improve the service. Essential account and security cookies are required for these purposes.
Legal bases
Depending on the processing, our legal bases include performance of a contract, legal obligation, legitimate interests in security and service operation, and consent for optional analytics or marketing.
Sharing
Order information is shared only with the assigned booster as needed. Service providers such as hosting, database, email and payment vendors process data under their own agreements. We do not sell personal data.
Retention and rights
Define a written retention schedule before launch. EU users may request access, correction, deletion, restriction, portability or objection, subject to legal limits. Add a privacy contact and supervisory-authority details before production.