Privacy Policy

1 What we collect

We collect only what the service needs to work. That falls into three groups:

• Account data: name, email, country, company, and a hashed password
• Transaction data: orders, invoices, payouts and the payment reference returned by our processor
• Technical data: IP address, browser type and pages visited, used for security and aggregate analytics

2 What we do not collect

We never see or store full card numbers. Card payments are handled entirely by our payment processor, and we receive only a token and the last four digits.

We do not buy personal data from third parties, and we do not build advertising profiles.

3 Why we process it

To create and secure your account, to fulfil orders, to issue invoices and payouts, to prevent fraud, and to meet our legal and accounting obligations.

Where we rely on legitimate interests, such as fraud prevention and service security, we balance that against your rights and keep processing proportionate.

4 Cookies

We use a session cookie to keep you signed in and a preference cookie to remember dismissed notices. Both are strictly necessary and cannot be disabled without breaking the service.

Analytics cookies, where used, are set only with your consent and can be withdrawn at any time.

5 Who we share with

Only the processors required to run the service: our hosting provider, database provider, payment processor, transactional email provider, and error-monitoring service.

Publishers see the order details necessary to fulfil a placement. They do not see your billing information, and they do not see your identity before accepting an order.

We do not sell personal data.

6 How long we keep it

Account data is kept while your account is open and for 30 days after deletion. Transaction records are retained for seven years to satisfy accounting and tax requirements. Technical logs are retained for 90 days.

7 Your rights

You can request a copy of your data, ask us to correct it, ask us to delete it, or object to certain processing. Most of this is available directly in your account settings.

For anything not covered there, email info@ranknova.net. We respond within 30 days.

8 Security

Data is encrypted in transit and at rest. Passwords are hashed with a modern memory-hard algorithm. Access to production data is limited to staff who need it and is logged.

If a breach affects your personal data, we notify affected users and the relevant supervisory authority without undue delay.