Privacy Policy

Last Updated: May 10, 2026  · [email protected]

Welcome to 9rank.ai (“we,” “our,” or “us”). We are committed to protecting your privacy. This Privacy Policy describes how we collect, use, and disclose information when you use our website, AI-powered tools, APIs, and all associated services — including 9Rank SEO, RAG9, and Kernel9. It applies to users worldwide.

By using our services, you consent to the data practices described in this policy.

1. Information We Collect

1.1 Personal Data

We collect personally identifiable information you provide during registration or when contacting us: name, email address, company name, and phone number. If you sign in via third-party OAuth (e.g., Google), we receive your basic profile data subject to that platform's privacy settings.

1.2 Usage & Technical Data

Our servers automatically record your IP address, browser type, operating system, geographic location, and pages visited. We collect behavioral data on how you interact with the platform to improve service quality and optimize marketing campaigns.

1.3 User Content & AI Analysis Data

When using SEO, RAG9, or Chat tools, you submit data such as URLs, keywords, and business content. This content is stored to deliver historical reporting and service continuity. We do not use your personally identifiable content to train public AI models. Any service-improvement data is strictly anonymized and aggregated.

1.4 Kernel9 & Visitor Interaction Data

If you deploy a Kernel9 widget, 9rank.ai processes conversation data between your website visitors and the AI or human agents on your behalf. You are the data controller for your customers' data; 9rank.ai is the data processor. This relationship is governed by our Data Processing Agreement (DPA).

2. How We Use Your Information

• To authenticate your identity and deliver platform features across all products.
• To process payments via our payment processor (Stripe).
• To send administrative notices, service updates, and support communications.
• To operate the RAG9 knowledge base and Kernel9 services on your behalf.
• Marketing & Advertising: To serve targeted advertisements, remarketing campaigns, and promotional emails (subject to your consent preferences under applicable law).
• To detect and prevent fraud and unauthorized access.
• To improve our AI models using only anonymized, aggregated data.

3. Disclosure of Your Information

We do not sell your personal information to data brokers. We may share your data only in these limited contexts:

• Service Providers: We engage cloud infrastructure providers and our payment processor (Stripe), all contractually bound to process data only on our instructions and to maintain appropriate security measures.
• AI Model Providers: Queries processed through our AI tools may be transmitted to AI infrastructure partners (Anthropic, OpenAI, Google) per their API terms. We transmit only the minimum data necessary.
• Advertising Partners: Anonymized or pseudonymized identifiers (e.g., cookie IDs) may be shared with advertising networks for remarketing purposes.
• Legal Obligations: We may disclose data when required by law, court order, or to protect the rights and safety of 9rank.ai and its users.

4. Marketing, Advertising, & Cookies

We use Cookies, Web Beacons, and Pixels to analyze traffic, personalize content, and serve relevant ads. By using our website, you acknowledge this usage. For full details, read our Cookie Policy. You may opt-out via your browser settings, our Cookie Preferences banner, or by sending a Global Privacy Control (GPC) signal.

5. Your Global Privacy Rights

• USA (CCPA/CPRA, VCDPA, CPA): Right to know, delete, and opt-out of sale/sharing of personal data. We honor GPC signals.
• EU & UK (GDPR / UK GDPR / PECR): Rights of access, rectification, erasure, restriction, portability, and objection. Non-essential cookies require explicit consent.
• Canada (PIPEDA & CASL): Right to access and correct personal information. Marketing communications require implied or express consent with opt-out available at any time.
• Singapore (PDPA): Right to access, correct, and withdraw consent for data use.
• UAE (PDPL): Rights to access, port, and restrict data use, especially for direct marketing.
• Vietnam (PDPD — Decree 13/2023/ND-CP): Rights to access, correct, delete, and withdraw consent.

6. International Data Transfers

Our infrastructure is primarily hosted in the United States with globally distributed edge nodes. Data transfers from the EEA or UK rely on Standard Contractual Clauses (SCCs) or other legally recognized safeguards.

7. Data Retention & Security

We retain personal data while your account is active and as required by law. Upon account deletion request, personal data is removed within 90 days (subject to legal hold exceptions). We use TLS 1.2+ for data in transit and AES-256 encryption for data at rest.

8. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect data from children. If you believe a child's data has been collected, contact [email protected] for immediate deletion.

9. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified by updating the “Last Updated” date and, where required, through direct user notification.

10. Contact Us

To exercise privacy rights or ask about our data practices:
[email protected]