Privacy Policy

We collect information in three ways:

• Account information: name, email, organization name, and password hash when you sign up.
• Project data: keywords, target domains, target cities, competitor domains, and any CSV or content you upload.
• Usage and device data: log data, IP address, browser type, pages visited, and cookies used to keep you signed in and to analyze product usage.
• Billing data: handled by Stripe. We do not store full payment card numbers on our servers.

• To operate and maintain the Service, including running daily rank checks and generating reports.
• To send transactional emails (rank alerts, scheduled reports, invoices, password resets).
• To improve product quality, debug issues, and protect against abuse.
• To communicate with you about updates, security notices, and account matters.

We share information only with sub-processors that help us deliver the Service:

• Stripe - payment processing.
• DataForSEO - keyword rank and SERP data collection.
• OpenAI - AI-powered SEO recommendations (we send anonymized ranking signals; we do not send user PII).
• Supabase - managed hosting, database, and authentication.
• Resend - transactional email delivery.

We never sell your personal information.

Morning Rank uses Google accounts in two separate, optional ways. We only request the access listed below, and only when you choose to use that feature.

1. Sign in with Google. If you sign in with Google, we receive your name, email address, and profile picture (scopes: openid, email, profile). We use them only to create and identify your Morning Rank account.

2. Google Search Console and Google Analytics 4 connections. A member of your organization can connect Google from Settings, then Integrations. This lets Morning Rank show your own search performance and website traffic next to your rankings. Access is read-only.

• Search Console (scope: webmasters.readonly): we list the properties your Google account can access. For the property you pick, we import search queries, page URLs, clicks, impressions, click-through rate, and average position by date.
• Google Analytics 4 (scope: analytics.readonly): we list the GA4 properties your account can access. For the property you pick, we import daily totals for sessions, users, pageviews, bounce rate, average session duration, and top landing pages. These are aggregate figures. We do not import information about individual visitors.
• We also read the connected Google account's email address and name so you can see which account is connected.

How we store it. OAuth access and refresh tokens and the imported metrics are stored in our hosted database (Supabase), linked to your organization. Tokens are used only on our servers to fetch your data from Google, and are never sent to your browser.

How we use and share it. Google data is used only to show reports, dashboards, and insights to your organization inside Morning Rank. It is not used for advertising, it is not sold, and it is not shared with third parties except the hosting provider named above, which stores it for us. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting and deletion. You can disconnect Search Console or GA4 at any time from Settings, then Integrations. When you disconnect, we delete the stored OAuth tokens for that connection (and, for Search Console, your property selections). Metrics imported before you disconnect stay in your project so your past reports keep working. They are deleted when you delete the project, or as described under Data Retention. To have them deleted sooner, email legal@morningrank.com. You can also remove Morning Rank's access at any time from your Google Account's third-party connections page.

We use first-party cookies and localStorage to keep you signed in and remember your preferences. We also use Google Analytics 4 and Google Ads conversion measurement, including cookies and similar technologies, to understand site usage and measure advertising performance.

For visitors in the United States and other regions outside Europe, the United Kingdom, and Switzerland, analytics and advertising measurement are on by default. You can opt out at any time through Cookie preferences or Do Not Sell or Share My Personal Information in the footer. We honor Global Privacy Control as an opt-out of advertising measurement and sharing.

For visitors in the European Union, European Economic Area, United Kingdom, and Switzerland, no non-essential analytics or advertising cookies run until you accept them. Essential cookies needed for sign-in and security remain active in every region.

California residents have the right to:

• Know the categories and specific pieces of personal information we collect, use, disclose, and share.
• Request deletion of personal information, subject to legal exceptions.
• Request correction of inaccurate personal information.
• Opt out of the sale or sharing of personal information.
• Limit the use and disclosure of sensitive personal information. We do not collect sensitive personal information to infer characteristics.
• Receive equal service and pricing without discrimination for exercising these rights.

We do not sell personal information for money. Advertising measurement may qualify as sharing under California law. Use Cookie preferences or Do Not Sell or Share My Personal Information in the footer to opt out. To submit a request, email hello@morningrank.com.

If you are in the EU, UK, or California, you have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Export your data in a portable format (CSV export is available in-app).
• Object to or restrict certain processing.
• Withdraw consent at any time.

To exercise any right, email legal@morningrank.com. We respond within 30 days.

We retain your project data for as long as your account is active. If you cancel your subscription, your data is retained for 30 days to allow re-activation or export, then permanently deleted. Backups may persist for up to 90 days before being overwritten.

Questions about this Policy or your data? Contact us at legal@morningrank.com.

MorningRank - operator of Morning Rank.