Privacy policy

This is a translation for convenience. In case of differences, the Dutch version prevails.

This privacy policy explains how AgentRank ('we', 'us') collects, uses and protects personal data when you use our website and the AgentRank service (the 'Service'). We handle your data with care in accordance with the General Data Protection Regulation (GDPR).

1. Who is responsible

AgentRank is the controller for the personal data processed through the Service. For privacy questions or to exercise your rights, email leon@jannick.io.

Controller: AgentRank, Veldbeemd 18, 1648 ED De Goorn, the Netherlands. Registered with the Dutch Chamber of Commerce (KvK) under number 42096397 (main establishment, establishment number 000066003598). VAT number NL004399760B58. Contact: leon@jannick.io.

2. What we collect

Scanning requires an account; there are no anonymous scans. We collect:

• Account data — your email address and authentication data when you create an account.
• Scan data — the website URLs you submit and the audit results we generate for them.
• Demo and visibility-check input — the company name, city and industry you enter; this input goes to the language model to run the simulation.
• Agency data — agency name, contact email, logo, brand color, report footer and the client labels an agency enters with scans.
• Reviews — name, role and review text, linked to your account.
• Contact form — name, email address and message.
• Waitlist data — your email address if you sign up for a waitlist.
• Technical data — IP address and basic metadata, used to prevent abuse and enforce usage limits (including scans, demos and the AI-traffic snippet).
• AI traffic — if you install the AgentRank snippet, we store per visit of a recognized AI bot: the bot name, the full user agent, the visited path, the host, a shortened, hashed fingerprint of the IP address (the raw IP address is never stored with the visit) and the site key with which the report was signed.

3. How we use it

• To provide the Service: run audits, the AI-visibility demo and check, store your reports and show your history.
• To measure AI traffic: process visit data from the snippet into traffic statistics for the site owner.
• To secure the Service: detect and limit abuse of the scan and demo endpoints.
• To communicate with you about your account or a feature you signed up for.

The URLs you scan are public web pages. Audit results may be cached briefly to limit cost and load; this cache is not linked to your identity.

4. Legal bases

We process your data to perform the contract we concluded with you (providing the Service), on the basis of our legitimate interest (security and abuse prevention), and with your consent where required (for example marketing email you sign up for).

5. Third parties (processors)

We use a small number of providers to deliver the Service. They process data for us under data processing agreements and only for the purposes above. We do not sell your personal data.

• Base44 — hosting, database, authentication and sending our transactional email (monitoring overviews, contact-form replies, account emails). The app uses the Base44 platform's email service for this.
• Google (Gemini API) — the language model that reads the public pages you submit and drafts the audit. The input of the AI-visibility demo and check (company name, city, industry) also goes to the model. Account data is never sent along.
• Stripe — payment processing and invoicing for Pro and Agency subscriptions. We never see or store your card number.
• HubSpot — only if you consent to marketing email: sending tips and product updates and keeping track of your consent and unsubscribes. Your data is stored in HubSpot's EU data center.

Some of these providers are located in the United States; transfers take place on the basis of the EU–US Data Privacy Framework and/or standard contractual clauses.

5a. How the scanner works

When you scan a site, AgentRank fetches the public homepage, plus robots.txt, sitemap.xml, llms.txt and a handful of well-known agent manifests, with the user agent AgentRank/1.0. It does not log in, does not submit forms, does not bypass access restrictions and does not crawl beyond those public sources. Site owners who do not want to be scanned can block the AgentRank user agent in robots.txt.

The AI-visibility demo and the AI-visibility check are simulations: the answers are generated by a language model and are not live answers from ChatGPT, Perplexity, Gemini or other external AI services.

5b. Agency

For client labels and reports an agency creates on behalf of its clients, the agency is responsible for the processing of its clients' data; AgentRank processes that data solely on behalf of that agency. The agency itself decides which client data (such as client names) it enters into the Service.

5c. Marketing email

After your scan we ask once whether you want to receive tips and product updates by email. That box is never pre-ticked. Only if you tick it yourself do we send your email address, first name, plan, the scanned site, your score, your weakest category and the link to your report to HubSpot, so the emails are about your situation. We record when and with which wording you gave consent.

You can unsubscribe with the link at the bottom of every email, or via leon@jannick.io. We do not track whether you open or click our marketing emails. After you unsubscribe we only keep your unsubscribe, so we don't email you again. If you don't give consent, your data is not sent to HubSpot.

6. Retention periods

We retain account and audit data as long as your account is active. Rate-limit markers, including the IP address used for them, are automatically deleted after 24 hours; scan result caches after 7 days; operational logs (including scan and quota counts) after 30 days. Visit records of the AI-traffic snippet are not automatically purged: they remain linked to your account via your site key as long as you use the snippet. You can request deletion of your account and associated data (including visit records) at any time.

7. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction and portability of your personal data, and the right to object to certain processing. Email leon@jannick.io to exercise any of these rights. You can also file a complaint with your local supervisory authority (in the Netherlands: the Dutch Data Protection Authority, Autoriteit Persoonsgegevens).

8. Changes

We may update this policy from time to time. Important changes are indicated by the 'last updated' date above.