Last updated
In short
- RankShark is run by Dalga L.L.C (Dubai, U.A.E.), which is responsible for your data.
- We collect what we need to run your account, workspace and purchases, plus security logs. We never see your full card details.
- Analytics and advertising tags are optional where the law says so, and never load on the log-in and sign-up pages.
- We do not sell your data. We share it only with the providers that help run RankShark, or when the law requires.
- Ask for a copy, a correction or deletion at any time: [email protected].
This summary is for convenience; the numbered sections below are what apply.
1 Who we are
RankShark is operated by Dalga L.L.C, registered in Dubai, U.A.E. under registration number 1216813 (“we”, “us”). We decide how the personal data described here is used. This policy covers the website at rankshark.io, the panel at panel.rankshark.io, the RankShark API and MCP server, and the store checkout for RankShark plans.
2 What we collect and why
Your account
When you create an account we collect your email address, your password (stored only as a one-way hash) and, if you give it, your name. We use them to create and secure your account, sign you in and send you messages about the service, such as receipts, renewal notices and security alerts.
Purchases
When you buy a plan we receive your name, email address, billing address and country, and the details of the transaction (plan, amount, currency and date). Payments are handled by PayProGlobal, Inc., our merchant of record, and on some checkouts by Stripe or PayPal. We never see or store your full card number, its security code or its expiry date. Enhance plans can be bought on our store at dalga.dev, which is run by us under this policy.
Your workspace
The panel stores what you put into it: campaigns, journeys, keywords, business details, rank scans, reports, white-label settings and API keys. We use it only to run the service for you, as the Terms of Service describe. Where it includes personal data about others, such as your clients, you are responsible for having a lawful basis to share it with us.
Technical and usage data
When you use the panel, the API or the MCP server we log your IP address, browser and operating system, the time of each action and the actions taken. We use these logs for security, fraud and abuse prevention, enforcing plan allowances and fixing problems.
Waitlists
If you join a waitlist we keep your email address, the agency name if you give it, the page you joined from and the country your connection came from, and use them only to tell you when the product opens. To stop abuse of the form we keep a short-lived, one-way hash of your IP address.
Free audit
For a free audit we keep the keyword, the business you choose, where you placed the grid and the country your connection comes from. When you ask for the report we keep your email address, and your name if you give it, to send you the report link; we send other emails only if you tick the box. To allow one audit per visitor every 30 days we set a cookie and keep your IP address only in a scrambled form.
Emails you send us
When you write to us we keep the message and your address so we can reply and keep a record of the conversation.
3 Analytics and advertising
On rankshark.io we use Google Tag Manager and Google Analytics to see which pages help visitors, and advertising tags to measure our ads. If you visit from the EEA, the UK or Switzerland, none of them stores anything on your device until you choose in the cookie notice; elsewhere they run unless you turn them off under “Cookie settings” in the footer.
With advertising consent we keep the campaign parameters of your visit (such as utm_source or gclid) for the rest of the browser session and add them to the checkout link, so we know which ad led to an order.
The log-in, sign-up and password pages load no analytics or advertising tags. Our Cookie Policy lists what is stored on your device and lets you change your choice.
4 Legal bases
Where the law requires one, we rely on: the contract with you to provide your account, workspace and purchases; our legitimate interests in keeping the service secure, preventing fraud and improving it; your consent for analytics and advertising cookies where consent is required, and for waitlist emails; and legal obligations for tax and accounting records.
6 Data we receive from others
Our payment providers send us your billing details, country, the payment method type and a fraud-risk assessment of the payment, so we can deliver the plan, keep records the law requires and prevent fraud. They never send us your full card details. You can read each provider’s privacy policy on the checkout page before you pay.
7 How long we keep it
- Account data: while the account exists. You can ask us to close it at any time.
- Workspace content: while your subscription is active. After it ends we may delete the workspace and its content; export what you need before then.
- Billing and tax records: as long as the law requires, usually several years, even after the account is closed.
- Security and usage logs: only as long as needed for security, abuse handling and fixing problems.
- Waitlist entries: until the product opens and we have told you, or until you ask us to remove you.
8 Your rights
Depending on where you live, you can ask us to:
- give you a copy of the personal data we hold about you, in a portable format;
- correct data that is wrong or incomplete;
- delete your data, unless we must keep it for legal, billing or security reasons;
- restrict or object to how we use it, including for marketing at any time; and
- withdraw consent you gave, without affecting what we did before.
Write to [email protected] from the address on your account. We may need to confirm it is you, and we answer within 30 days. Closing your account ends the service, so you lose access to the workspace and its content. You can also complain to the data protection authority where you live.
9 How we protect it
Every connection to rankshark.io, the panel, the API and the MCP server is encrypted with TLS. Passwords are stored only as one-way hashes, API keys can be revoked from the panel at any time, and access to personal data is limited to the people who need it to run and support the service. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.
10 Children
RankShark is a business service for people aged 18 and over. We do not knowingly collect data from children.
11 Changes to this policy
We may update this policy. The date at the top shows the latest version, and we tell account holders about material changes by email or in the panel before they take effect.
12 Contact
Questions about this policy or your data: [email protected]. Dalga L.L.C, registration number 1216813, Dubai, U.A.E.