Privacy Policy

GenAI Ranker (operated by Saraiya Innovations Private Limited, “we”, “us”) helps brands, agencies and organisations measure and improve how AI-search assistants describe and recommend them. This policy explains what personal data we collect, why, who we share it with, how long we keep it, and the rights you have. It applies to our website, app and connected integrations.

1. Who we are (data controller)

The data controller is Saraiya Innovations Private Limited. For any privacy question, or to exercise a right below, contact hi@genairanker.com. If you are in a region with a supervisory authority, you also have the right to lodge a complaint with it.

2. What we collect

• Account data: your name, email, workspace/agency details and role when you sign up.
• Workspace & brand data: the domains, brands, prompts, competitors, markets and (for verified-record customers) the facts you choose to track or publish.
• Connected sites: for WordPress, Shopify, Magento or custom-site connections, your site/store domain and a connection token. We do not collect your customers’ personal data.
• Billing data: plan, transaction and invoice records. Card details are handled by our payment provider — we never see or store full card numbers.
• Usage & device data: standard logs (IP address, browser, pages, timestamps) used to operate, secure and improve the service.
• Communications: messages you send us (support, sales, email) and their contents.

3. How we use your data, and our legal bases

We use personal data to:

• provide the service — run AI-visibility and accuracy analysis, generate recommendations, reports and corrections, and apply GEO assets (llms.txt, structured data) to your connected sites (performance of a contract);
• operate billing and send service, security and notification emails (contract / legal obligation);
• secure, debug, and improve the product, and prevent abuse (legitimate interests);
• send product or marketing updates where permitted, which you can opt out of at any time (consent / legitimate interests).

4. AI processing

To measure how assistants answer, we send the prompts we track and the answers we capture to AI model providers for analysis, and we generate recommendations and draft corrections the same way. We do not use your private workspace data to train third-party foundation models, and our model providers act as sub-processors under contract. Answers we capture from public AI assistants are stored as your measurement record and evidence trail.

5. Sub-processors we share data with

We never sell your data. We share it only with vetted sub-processors that operate the service under data- protection terms, and only as needed for the purposes above:

We may also disclose data where required by law, to protect our rights, or in connection with a merger or acquisition (with notice where required).

6. Shopify merchants

When you install our Shopify app we receive your store domain and an access token to serve structured data on your storefront. We do not access or store your customers’ personal information. On uninstall, or on a verified data-removal request, we delete your store record. We honor Shopify’s mandatory data-protection webhooks (customer data request, customer redact, shop redact).

7. Cookies & analytics

We use strictly-necessary cookies to keep you signed in and to secure the app, and a minimal set of analytics to understand product usage. We do not use third-party advertising trackers. You can control cookies through your browser settings; blocking necessary cookies may prevent you from signing in.

8. Data retention

We keep your account and workspace data for as long as your account is active. After you close your account or make a verified deletion request, we delete or anonymise your personal data within a reasonable period, except where we must retain certain records to meet legal, tax or accounting obligations (for example, invoices). Operational logs are kept for a limited period for security and debugging.

9. International transfers

We and our sub-processors may process data in countries other than yours, including the United States and the European Union. Where personal data is transferred across borders, we rely on appropriate safeguards such as Standard Contractual Clauses or an equivalent lawful transfer mechanism.

10. Your rights

Depending on where you live, you have rights over your personal data. Under the GDPR these include the right to access, rectify, erase, restrict or object to processing, and to data portability. Under the CCPA/CPRA you have the right to know what we collect, to request deletion, and to opt out of any “sale” or “sharing” — and we do not sell or share your personal information. To exercise any right, email hi@genairanker.com; we will verify your request and respond within the timeframe the law requires. You can also unsubscribe from marketing email at any time via the link in the email.

11. Security

We protect your data with encryption in transit, access controls and tenant isolation. More detail is on our Security page. No system is perfectly secure, but we work to protect your data and will notify you and any regulator as required if a breach affects you.

12. Children

The service is for businesses and organisations and is not directed to children. We do not knowingly collect data from anyone under 16.

13. Changes to this policy

We may update this policy as the product evolves. We will revise the “Last updated” date above and, for material changes, give notice in the app or by email.

14. Contact

Saraiya Innovations Private Limited · hi@genairanker.com · genairanker.com