Privacy Policy

1. Introduction

GenRank publishes an index of how AI models recommend brands. Reading it requires no account. Signing in is optional and lets you bookmark pages, comment and propose questions. We collect very little personal information. This policy explains what we do collect, why, who processes it, and the choices you have.

2. What we collect

Visitors to the site

• Server logs. Our hosting provider records the IP address, browser type, pages requested, referrer and time of each request, as every website does.
• Usage analytics. We use Google Tag Manager and Google Analytics to understand which pages are read and from which countries and device types. This data is aggregated and we do not use it to identify you.
• Preferences. Your language choice is stored in a cookie and your light or dark theme in your browser’s local storage. Neither is sent to a third party.

API applicants and key holders

If you apply for API access we collect your name, email address, organisation and intended use, with a one-way hash of your IP address to prevent abuse, and keep them to assess the application and to administer access if it is granted. Every request made with an issued key is recorded with what it asked for: the endpoint, its parameters and any data sent with it (for example a brand name, a website address, a description or an AI answer to check), together with the key, the time and a hash of the IP address that changes daily. We use these records to apply rate limits, prevent abuse, run and improve the API, and find categories and questions the index does not yet cover. They never enter a score or a ranking.

People who write to us

If you use the contact form or email us about a correction, a licence, a data question or your personal information, we keep the message, your email address and, if you give them, your name and the page concerned, with a one-way hash of your IP address to prevent abuse, to handle the request. Correction requests also form part of the corrections record described in the Governance Policy.

People who sign in

Signing in uses Google. We store the email address, name and profile picture that Google provides, the username you choose, the pages you bookmark, the comments you write with their status and the decision model’s verdict on each, and the reports you make, and the questions you propose with their status, the decision model’s verdict and the review outcome, and the proposals you support. Your username, your published comments and your published proposals are public; who supports a proposal is not shown, only how many. Your email address, name and picture are not shown to other people, and your bookmarks are visible only to you. GenRank staff and authorised operators sign in the same way.

What we do not collect

We do not use advertising identifiers, do not build profiles of visitors, and do not sell personal information.

3. People named in the index

Some categories rank public figures by name alongside brands, products and organisations. Those names come from the published answers of AI models, concern individuals in their public or professional capacity, and are processed in the public interest of transparency about what AI systems say. If you are named in the index and believe an entry is inaccurate, duplicated or misattributed, contact us; corrections follow the Governance Policy.

4. How we use information

• Operate, secure and debug the site and the API
• Run accounts, bookmarks, comments and question proposals, and check each comment and proposal against the Terms of Service before it is published
• Measure readership and improve the index
• Apply rate limits and prevent abuse
• Improve the API and find categories and questions the index does not yet cover, from API request records
• Respond to correspondence and keep a record of corrections
• Comply with legal obligations

5. Cookies and local storage

• Essential. A language cookie, and authentication cookies for people who sign in.
• Preference. The theme setting, kept in local storage.
• Analytics. Cookies set by Google Analytics through Google Tag Manager. You can block them in your browser; the site works without them.

6. Who processes data

We do not sell personal information. It is processed by:

• Vercel, which hosts the site and serves the API
• Supabase, which hosts the database
• Google, for analytics and for sign-in
• Resend, which delivers the emails our forms send to our inbox
• AI providers (OpenAI, Google, and models reached through OpenRouter), which compute API results such as matches, classifications and mention checks from the text a key holder sends
• A decision model reached through OpenRouter, which reads each username when it is chosen or changed, and each comment with the page it is on and the commenter’s username, to decide whether the username can be used and the comment published; and each question proposal with the proposer’s username, to decide whether it can be published, whether it contains a brand name and whether its answers would name things

When we poll AI models for the index, the providers and API gateways receive only the curated ranking questions. An adopted proposal is asked in the wording GenRank sets, and who proposed it is not part of the request. No visitor or account data is ever included in a polling request. We disclose information when required by law or to protect the rights and safety of GenRank and others.

7. Retention

Server logs are kept for a limited period by our hosting provider. API request records, including what was asked and any data sent, are kept for 12 months. Analytics data is retained in aggregate. Correspondence about corrections is kept for as long as the correction is part of the published record. Account data, bookmarks, comments, question proposals, support and reports are kept while the account exists; you can delete a comment or a proposal at any time, and deleting your account deletes all of them. A question already adopted for measurement stays as a GenRank question, apart from the record of who proposed it.

8. Security

The site is served over HTTPS, database access is restricted by role, and operator access is limited to what each role requires. No system is perfectly secure, and we cannot guarantee that unauthorised access will never occur.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete or restrict the processing of your personal information, to object to processing, and to lodge a complaint with a supervisory authority. To exercise any of these rights, use the contact form or write to hello@genrank.com. We respond within the time required by applicable law. If you have an account, you can also delete your comments, your question proposals and the account itself from your page.

10. International transfers

Our providers operate in the United States and other countries. Where the law requires it, transfers rely on recognised safeguards such as standard contractual clauses.

11. Children

The site is not directed at children under 14, accounts are for people aged 14 or over, and we do not knowingly collect personal information from children under 14. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy. Changes are posted on this page with a new “Last updated” date.

13. Contact

Privacy questions and requests: the contact form or hello@genrank.com.