SAGERANK SAGERANK
Free bolt
SAGERANK LEGAL & COMPLIANCE POLICY

PRIVACY POLICY & DATA GOVERNANCE

Last Updated: June 18, 2026. Effective immediately.

Privacy Policy

PRIVACY POLICY & DATA PROCESSING STATEMENT

Last Updated: June 18, 2026. Effective immediately.

1. Introduction & Controller Identity

Welcome to SageRank. The SageRank platform, web application (app.sagerank.io), and APIs are owned and operated by SageRank Software Solutions FZ-LLC, a Free Zone Limited Liability Company registered in Ras Al Khaimah, United Arab Emirates ("SageRank", "we", "us", or "our").

For the purposes of the General Data Protection Regulation (GDPR), UK GDPR, and applicable global data protection frameworks, the Data Controller is SageRank Software Solutions FZ-LLC. Our Data Protection Officer (DPO) can be reached at privacy@sagerank.io.

2. Scope & Applicable Regulations

This Privacy Policy governs our processing of personal data across global frameworks including GDPR (Regulation EU 2016/679), UK Data Protection Act 2018, California Consumer Privacy Act as amended by the CPRA (Cal. Civ. Code § 1798.100+), UAE Federal Decree-Law No. 45/2021 on Personal Data Protection (PDPL), and India Digital Personal Data Protection Act 2023 (DPDPA).

3. Data We Collect and Process

  • Account Registration Data: Name, work email address, company entity name, hashed passwords (bcrypt), and OAuth profile identifiers.
  • Billing & Transaction Metadata: Payment card tokenizations, transaction IDs, VAT/GSTIN numbers, and billing country (processed securely via Stripe and Paddle).
  • Target Domain & Scan Telemetry: Submitted domain URLs, DNS configurations, indexing signals, server response headers, and verified ownership tokens.
  • Technical Logs: IP addresses, browser user-agents, session tokens, and access timestamps collected for cybersecurity, rate-limiting, and fraud prevention.

4. Sub-Processor Registry

SageRank engages trusted third-party sub-processors under strict Data Processing Agreements (DPAs):

  • Amazon Web Services (AWS): Cloud hosting, database clusters (AES-256 encryption at rest), and automated KMS key management (ISO 27001, SOC 2 Type II).
  • Cloudflare Inc.: Edge DNS, Web Application Firewall (WAF), and DDoS mitigation.
  • Stripe Inc. & Paddle.com: PCI-DSS Level 1 payment processing and Merchant of Record billing.
  • Google LLC: Identity authentication via Google OAuth 2.0.

5. Mandatory Domain Ownership & Data Isolation

Active vulnerability and offensive security probes are strictly restricted to domains verified via DNS TXT tokens (sagerank-verification=TOKEN). Diagnostic reconnaissance dossiers are logically isolated and accessible strictly to the authorized account holder.

6. AI Search Citation Data & Disclaimer

Our optimization engines evaluate public search engine and AI citation visibility signals. These diagnostic scoring calculations do not produce any legal effects or automated decision-making under GDPR Article 22. All scores are informational recommendations.

7. Data Subject Rights (GDPR / CCPA / UAE PDPL)

Users maintain the right to access, rectify, port, or erase their personal data (GDPR Arts. 15–20). Requests submitted to privacy@sagerank.io are processed within thirty (30) days without charge.

8. Contact & Grievance Redressal