Data Processing Agreement

Last updated: August 29, 2026

This DPA forms part of the Terms of Service for customers subject to GDPR/UK GDPR. Rank Sphere acts as processor for personal data contained in your connected sites and analytics; you act as controller.

Processing details

Subject matter: website audit, content, and ranking services. Duration: the subscription term. Nature: hosting, analysis, and publishing of site data. Data subjects: your site visitors and staff. Categories: contact details and usage data appearing on or submitted through your sites.

Subprocessors

Supabase, Vercel, Stripe, Anthropic, Google, Resend, Sentry, PostHog, Upstash, Cloudflare. We will notify you of changes with 30 days to object.

Security and deletion

Data is encrypted in transit and at rest; credentials and OAuth tokens are encrypted at the application layer. On termination we delete customer data within 30 days, export available on request.

To execute a signed copy, email support@ranksphereai.com.