Privacy Policy

GMB Ranking ("we", "us", "our") operates the website https://www.gmbranking.com, the GMB Ranking mobile apps for iOS and Android, and the associated local-SEO tools (together, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information we collect

• Account information — your name, email address, and password when you register.
• Business Profile data — when you connect your Google Business Profile, we access business details you authorize (name, address, categories, reviews, posts, and performance metrics) to display and manage them within the Service.
• Usage data — pages visited, features used, scans and audits run, and basic device/browser information.
• Payment data — processed securely by Stripe. We do not store full card numbers on our servers.
• Mobile app data — if you sign in with Google, we receive your name, email address and profile picture from Google via Firebase Authentication. The app stores your login token on the device using the system keychain (iOS) or encrypted storage (Android).
• Free rank check identifier — before you create an account, the app generates a random id and stores it on the device so the free check can be given once. It is not a device identifier, contains nothing about you or your phone, and is deleted when you uninstall the app.
• Photos — only the images you choose, and only when you attach one to a post. The app has no background access to your photo library or camera, and no photo is read unless you pick it.

The apps contain no advertising, no analytics SDKs and no tracking for advertising purposes. We do not collect your location, contacts, or the contents of your device.

2. Google user data & API Services

When you authorize access to your Google Business Profile, we use Google OAuth and the Google Business Profile API strictly to provide the features you request — reading and updating your profile information, reviews, posts, and insights. GMB Ranking's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, and we do not use it for advertising. You can revoke our access at any time from your Google Account permissions page.

3. How we use information

• To provide, operate, and improve the Service.
• To generate AI-assisted audits, review replies, posts, and keyword suggestions at your request.
• To process subscriptions and send service-related communications.
• To secure the Service and prevent abuse.

4. Sharing

We share data only with service providers that help us run the Service, and only as needed to deliver the features you use:

• Google — Business Profile and Places APIs; Firebase Authentication for "Continue with Google" in the apps.
• Anthropic and OpenAI — AI processing for audits, review replies and posts. Text you ask us to work on is sent to them to generate the result; it is not used to train their models.
• Serper.dev — Google search results used by Citation Tracker to find where your business is listed.
• Stripe — subscription payments.

We do not sell your personal information, and we do not share it with advertisers or data brokers.

5. Deleting your account and data

You can delete your account yourself at any time — in the app under Account → Delete account, or on the website under Delete your account. Deletion is immediate and permanent, and removes your locations, rank scans, audits, citation reports, scheduled posts, saved reports, share links and API tokens.

Two things are kept afterwards: invoices and payment records, retained for 7 years because tax and accounting law requires it; and posts already published to Google, which live on your Google Business Profile rather than our servers — delete those from Google if you want them removed. Routine server logs are overwritten within 30 days.

6. Data retention & security

We retain your data for as long as your account is active. Data is transmitted over HTTPS and access to production systems is restricted. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Children

The Service is intended for businesses and is not directed at children under 13. We do not knowingly collect information from children.

8. Your rights

You can access, update, or delete your account data, revoke Google access, and cancel your subscription at any time. To exercise these rights, email us at the address below.

9. Contact

Questions about this policy? Contact us at hello@gmbranking.com.