Privacy Policy

1. Introduction

GenRank publishes a read-only index of how AI models recommend brands. Reading it requires no account, and we collect very little personal information. This policy explains what we do collect, why, who processes it, and the choices you have.

2. What we collect

Visitors to the site

• Server logs. Our hosting provider records the IP address, browser type, pages requested, referrer and time of each request, as every website does.
• Usage analytics. We use Google Tag Manager and Google Analytics to understand which pages are read and from which countries and device types. This data is aggregated and we do not use it to identify you.
• Preferences.Your language choice is stored in a cookie and your light or dark theme in your browser’s local storage. Neither is sent to a third party.

API applicants and key holders

If you apply for API access we collect your name, email address, organisation and intended use, and keep them to assess the application and to administer access if it is granted. Requests made with an issued key are logged (key, endpoint, time) for rate limiting and abuse prevention.

People who write to us

If you email us about a correction, a licence or a data question, we keep the correspondence to handle the request. Correction requests also form part of the corrections record described in the Governance Policy.

GenRank staff and authorised operators

Sign-in is reserved for staff and operators. They authenticate with Google, and we store the email address, name and profile picture that Google provides, together with an optional username. This does not apply to the general public.

What we do not collect

We have no public accounts, comments, votes or submissions. We do not use advertising identifiers, do not build profiles of visitors, and do not sell personal information.

3. People named in the index

Some categories rank public figures by name alongside brands, products and organisations. Those names come from the published answers of AI models, concern individuals in their public or professional capacity, and are processed in the public interest of transparency about what AI systems say. If you are named in the index and believe an entry is inaccurate, duplicated or misattributed, contact us; corrections follow the Governance Policy.

4. How we use information

• Operate, secure and debug the site and the API
• Measure readership and improve the index
• Apply rate limits and prevent abuse
• Respond to correspondence and keep a record of corrections
• Comply with legal obligations

5. Cookies and local storage

• Essential. A language cookie, and authentication cookies for signed-in operators only.
• Preference. The theme setting, kept in local storage.
• Analytics. Cookies set by Google Analytics through Google Tag Manager. You can block them in your browser; the site works without them.

6. Who processes data

We do not sell personal information. It is processed by:

• Vercel, which hosts the site and serves the API
• Supabase, which hosts the database
• Google, for analytics and for operator sign-in

The AI providers and API gateways we poll receive only the curated ranking questions. No visitor data is ever included in those requests. We disclose information when required by law or to protect the rights and safety of GenRank and others.

7. Retention

Server logs are kept for a limited period by our hosting provider. Analytics data is retained in aggregate. Correspondence about corrections is kept for as long as the correction is part of the published record. Operator account data is deleted when the account is closed.

8. Security

The site is served over HTTPS, database access is restricted by role, and operator access is limited to what each role requires. No system is perfectly secure, and we cannot guarantee that unauthorised access will never occur.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete or restrict the processing of your personal information, to object to processing, and to lodge a complaint with a supervisory authority. To exercise any of these rights, write to hello@genrank.com. We respond within the time required by applicable law.

10. International transfers

Our providers operate in the United States and other countries. Where the law requires it, transfers rely on recognised safeguards such as standard contractual clauses.

11. Children

The site is not directed at children under 14 and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy. Material changes are noted in the changelog and the “Last updated” date above.

13. Contact

Privacy questions and requests: hello@genrank.com.