Privacy Policy

This Privacy Policy is an integral part of our Terms of Service and should be read together with our Cookie Policy. It explains how AIDRank.com (the "Website", the "Service", "we", "us") handles information about you. By using the Website you agree to it. If you do not, please do not use the Website.

1. Who We Are

AIDRank.com is operated by Dany Maor, a registered sole trader in Israel, business ID 031454259. We are the data controller for the information described on this page. You can reach us at any time at info@aidrank.com.

This policy is written in English and in the masculine form for convenience only, and is intended equally for all users. The headings exist to help you navigate and carry no interpretive weight.

2. What We Collect

What we hold depends entirely on what you do. The four cases below are the complete picture.

a. When you scan a domain without an account

Nothing about you is stored. We keep the domain name and the scores the models returned, and there is no record connecting that scan to you, because we never asked who you were. Your IP address is held briefly in the server's working memory in order to apply the fair use limits described in our Terms. It is never written to our database, it is discarded after 24 hours at the latest, and it disappears entirely whenever the server restarts.

b. When you sign in with Google

Google tells us four things about you and we store all four:

• Your name, as it appears on your Google account
• Your email address
• The link to your Google profile picture
• Your Google account identifier, which is how we recognise you next time

We also record when your account was created and when you last signed in. We do not receive, see or store your Google password, and we have no access to your Google account beyond those four fields.

c. When you use the dashboard

We store which domains you chose to track, the date you added each one, and whether you have hidden it from your list. This is the one thing we hold that says something about your interests, and it is the reason we treat your tracked list as private.

d. When you buy a domain slot

We store the PayPal transaction identifier, the package you bought, the amount, the currency, and the date. That is what lets us give you your slots and what we need to keep for tax purposes.

Analytics, if you allow it. When you turn analytics on, Google Analytics collects information about your visit: the pages you view, roughly when and for how long, an approximate location derived from your IP address, and technical details such as your browser, device type and screen size. It assigns your browser a random identifier so that one person is not counted as ten. This is off by default and nothing is collected until you press the button. Full detail is in section 6.

Server logs. Like every website, our server records ordinary access information: an IP address, a timestamp, the page requested, the browser and operating system reported by your device, and any error that occurred. These logs exist to keep the Service running and secure, they are not linked to your account, and we do not analyse them to learn anything about you.

If you write to us, we keep your message and your email address, for as long as it takes to deal with your question and a reasonable period afterwards. Please do not send us sensitive information you were not asked for.

3. What We Never Collect

This list matters as much as the one above:

• No password. Sign in runs through Google, so there is no password of yours for us to store, lose or leak
• No card details. PayPal handles the entire payment. Card numbers never touch our servers, so we could not store them even if we wanted to
• Nothing from your website. A scan never contacts, crawls, reads or connects to the domain being scanned. Your pages, your traffic and your analytics are invisible to us
• No advertising profiles. We run no ads, no retargeting and no remarketing. Google's advertising features are switched off in our Analytics configuration, and we do not share anything with advertisers because we have none
• No selling. We do not sell, rent or trade your information to anyone, for any price, ever

4. Why We Process It and On What Basis

Where the GDPR applies to you, this is the legal basis for each thing we do:

• Your Google account details. To give you an account and a dashboard, which is the service you asked for. Basis: performance of a contract
• Your tracked domain list. To show you your dashboard and to re-scan those domains on schedule. Basis: performance of a contract
• Your purchase records. To credit your slots and to keep the accounting records the law requires of us. Basis: performance of a contract, and compliance with a legal obligation
• Analytics. To understand which parts of the Website get used. Basis: your consent, given through the cookie banner, and withdrawable at any time on our Cookie Policy page
• Your IP address for fair use limits. To stop automated abuse that would make the Service unusable and cost us money we do not have. Basis: legitimate interest
• Server logs. To keep the Service running, secure and debuggable. Basis: legitimate interest
• Messages you send us. To answer you. Basis: legitimate interest, and your consent in writing to us in the first place

We do not use your information for any purpose beyond these, and we do not make automated decisions that produce legal or similarly significant effects about you.

5. Domain Names and Scores

This section is specific to what we do and is worth reading even if you skip the rest.

An AIDRank score is information about a domain name. It is not information about you, it does not identify you, and it exists independently of any user account. Two different people scanning the same domain see the same number, because the number belongs to the domain and not to whoever asked.

The only thing we send to the AI providers is the domain name itself. We do not send your name, your email, your IP address, your account identifier, or anything else about you. From their side, a scan is an anonymous question about a string of text.

Some domain names contain a personal name or otherwise identify an individual. If a domain identifies you and you want it removed, you can ask, and we will require you to demonstrate control of that domain first, as set out in section 9 of our Terms of Service. That verification step protects domain owners rather than us. Without it, anyone could erase data about a business that is not theirs.

We do not publish scores. There is no public leaderboard, no public directory and no public ranking. We may publish aggregated and anonymised statistics, for example the average AI visibility across a sector, and material of that kind never identifies a specific domain, a specific user or a specific account.

6. Cookies and Analytics

We use one cookie of our own. It is the session cookie that keeps you signed in, it is marked HttpOnly and Secure so that scripts cannot read it and it only travels over an encrypted connection, and it is strictly necessary. Without it you could not stay logged in.

We also use Google Analytics 4, and this one is your choice. It is loaded with Google's Consent Mode set to deny storage by default, which means it writes nothing to your device and sets no cookie until you press "Analytics on" in our banner. If you never press it, or you press "Analytics off", it stays inert. If you turn it off after having it on, we delete its cookies from your browser immediately.

We use Analytics to see which pages get used and which get ignored. We do not use it for advertising, we do not run remarketing, and Google's advertising signals are switched off in our configuration.

Google and PayPal may also set cookies of their own, but only when you actively sign in or open the checkout, and under their own policies.

You can change your mind at any time, on any device, on our Cookie Policy page, which also lists every single cookie by name with its purpose and lifetime.

7. Who Else Sees Your Data

A small number of companies are involved in making this Service work. Here is exactly what each one gets, and nothing goes further than this list:

• Anthropic and OpenAI. They receive the domain name and nothing else. No name, no email, no IP, no account. Asking them about a domain is the entire product
• Google, for sign in. Handles sign in and gives us your name, email and profile picture. It knows you signed in to AIDRank, in the same way it knows about any site you use Google to sign in to
• Google, for analytics. Only if you consented. Receives your page views, an approximate location from your IP, and technical details of your browser and device. Acts as our processor under Google's own terms
• PayPal. Handles the payment and tells us it cleared. It receives your payment details directly. We receive a transaction identifier and an amount
• Experts listed in our directory. If you contact one, they receive your name, your email and your message. They do not receive anything else about you
• Our hosting provider. Runs the server and the database, and therefore technically holds the data at rest, under contract and without any right to use it

Content delivery networks also serve some of the styling, fonts and scripts on this Website, including an accessibility widget. By the nature of how a browser works, they receive your IP address when your device requests those files. This is how nearly every website on the internet is built, and it is not something we use to identify you.

Beyond the above, we will only disclose information where we are legally compelled to by a competent authority or court, where it is necessary to establish or defend a legal claim, or where you have asked us to. If AIDRank is ever sold, merged or reorganised, your data moves to the successor under this same policy, and you will be told.

Each of these companies has its own privacy policy governing what it does with what it receives. We are their customer, not their partner, and we have no control over them.

8. Where Data Is Stored

Your data is stored on our server and in our database, held with our hosting provider. Because the AI providers, Google and PayPal all operate internationally, using this Website necessarily involves data crossing borders, including to the United States. That is inherent to the Service and not a choice we make per user.

Where such a transfer involves personal data of someone in the European Economic Area or the United Kingdom, we rely on the recipient's own compliance framework, including the Standard Contractual Clauses adopted by the European Commission or an equivalent adequacy mechanism. If you want to know where a specific piece of your data sits at a specific moment, write to us and we will tell you.

9. How Long We Keep It

• Your account and tracked list. For as long as your account exists. Delete the account and they go
• Your purchase records. For as long as tax and accounting law requires us to keep them, which in Israel is seven years. We cannot delete these earlier even if you ask, because we are legally required to hold them
• Analytics data. Held by Google under its own retention settings, currently up to 14 months for user level data, and only if you consented in the first place
• Your IP address in the fair use counter. 24 hours at most, in memory only, and gone the moment the server restarts
• Server logs. A short period, and they rotate out automatically
• Messages you send us. Until your question is resolved and a reasonable period afterwards
• Messages sent through the experts directory. Retained to prevent abuse of the directory, until you ask us to delete a specific message
• Domain names and scores. Indefinitely, because they are not personal data and are not connected to any user. See section 5

10. Your Rights

Depending on where you live, you may have some or all of the following rights over the personal data we hold about you. We honour them for everyone, wherever you are, rather than checking your address first:

• Access. Ask what we hold about you and get a copy
• Rectification. Ask us to correct anything wrong or incomplete
• Erasure. Ask us to delete your account and everything attached to it
• Restriction. Ask us to stop processing while a dispute is sorted out
• Portability. Ask for your data in a machine readable format
• Objection. Object to processing we base on legitimate interest
• Withdraw consent. Where we rely on your consent, take it back at any time, without affecting what was lawful before. For analytics this takes one click on our Cookie Policy page
• Complain. Take it to a data protection authority. In Israel that is the Privacy Protection Authority. In the EEA or UK it is your local supervisory authority

To exercise any of these, write to info@aidrank.com from the email address on your account. We may ask for more information to confirm it is really you, because handing your data to someone pretending to be you would be a far worse outcome than a small delay. We will respond within 30 days.

11. Security

The whole Website runs over an encrypted connection. We hold no password of yours and no card details of yours, which removes the two things most worth stealing. Access to the database is restricted, and the session cookie is configured so that scripts cannot read it.

That said, no method of transmission or storage is completely secure, and anyone who tells you otherwise is selling something. We take reasonable precautions, and if a breach affects your personal data we will notify you and the relevant authority as the law requires. If you spot a vulnerability, please write to info@aidrank.com before telling anyone else, and we will thank you for it.

12. Children

The Service is for adults and is not directed at children. You must be at least 18 to use it, as set out in section 2 of our Terms of Service. We do not knowingly collect data about anyone under 18. If you believe a child has given us personal data, write to us and we will delete it.

13. Changes to This Policy

We may update this policy. The current version is always the one on this page and it takes effect when published. Where a change is material we will make reasonable efforts to tell you, by a notice on the Website or by email to your account. The last updated date is at the top of this page and it is worth a glance from time to time.

This policy is governed by the laws of the State of Israel, and section 19 of our Terms of Service applies to any dispute about it. Nothing here limits any right you have under a data protection law that applies to you regardless.

If any part of this policy is found invalid, only that part falls away and the rest stays in force.

14. Contact Us

For anything about your data, to exercise a right under section 10, to request removal of a domain under section 5, or for any other question: