Privacy Policy

This is an English translation of our Política de Privacidade. If the two versions differ, the Portuguese version prevails.

1. Who we are and who this policy applies to

Ranking LTDA("Ranking", "we"), registered in Brazil under CNPJ 26.519.606/0001-21, headquartered at Rua Frei Leopoldo, 39, Sala 4 — Ouro Preto, Belo Horizonte/MG, CEP 31310-190, is the controller of the personal data processed under this policy. We operate the website ranking.bhz.br and our reporting and traffic-management platform.

This policy applies to:

• Visitors to our website and people who contact us (forms, e-mail, WhatsApp);
• Users of our platform (agency staff and their advertiser clients);
• Advertisers who connect their accounts on third-party platforms (such as Google Ads and Meta Ads) to our platform through authorization (OAuth);
• People who download the Ranking Suite plugin from our website or sign up to receive its news (see section 7).

2. Data we collect

2.1. Data you give us

• Contact and identification: name, e-mail, phone/WhatsApp and the message sent through a form or messaging app.
• Platform account data: name, login e-mail and authentication credentials (managed by our authentication provider).
• Billing data (when applicable): information needed to issue invoices and process payments, handled by a payment provider;
• Ranking Suite news sign-up (optional): e-mail and chosen language, with the consent records described in section 7.3.

2.2. Data collected automatically

• Browsing and device data (IP address, browser type, pages visited) and cookie identifiers, used to operate the website and measure its performance.

2.3. Data from connected platforms (Google, Meta and others)

When a user authorizes the connection of an advertising or analytics account, we access — only from that account and only the data needed — information such as:

• Structure and performance: accounts, campaigns, ad groups, ads, keywords, audiences, search terms and metrics (cost, impressions, clicks, conversions, conversion value and similar);
• Access tokens (OAuth): the tokens that allow reading this data, stored encrypted (see section 10).

We do not collect the content of private messages, payment data of your end customers, or any data beyond what is needed for the features described below.

3. How and why we use data

• To respond to contacts and provide sales and support service;
• To create and display reports, dashboards and analyses of the performance of the advertising accounts you connected;
• To operate the management tools(for example, reviewing search terms and applying negative keywords), always with the user's confirmation;
• To send e-mail reports and operational notifications that you set up;
• To send Ranking Suite plugin news to people who signed up and confirmed their sign-up, and to count how many times the plugin was downloaded;
• To keep the service secure, prevent fraud and comply with legal and regulatory obligations.

4. Legal bases (LGPD)

We process personal data based on:

• Performance of a contract and preliminary procedures, to provide the service;
• Consent, for example when you connect a third-party account via OAuth, accept non-essential cookies or sign up for Ranking Suite news;
• Legitimate interest, for security, service improvement and communication with clients;
• Compliance with a legal or regulatory obligation.

5. Use of data from Google APIs (Limited Use)

Ranking's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use data obtained from Google APIs only to provide and improve the user-facing features (reports, dashboards, audits and search-term management) for the account that authorized access;
• We do not transfer or sell this data to third parties, except when necessary to provide or improve these features, when required by law, for security purposes, or as part of a merger/acquisition governed by this policy;
• We do not use Google data for targeted advertising;
• We do not use this data to train generalized or third-party artificial intelligence models;
• We do not allow humans to read this data, except: with your specific consent; for security (investigating abuse); to comply with applicable law; or when the data is aggregated/anonymized and used for internal operations.

The scope requested from Google is limited to what is needed (for example, https://www.googleapis.com/auth/adwords for Google Ads) and you can revoke access at any time (see Data Deletion, in Portuguese).

6. Use of data from Meta platforms

When you connect a Meta account (Facebook/Instagram Ads), we access only the data of the accounts you authorize, and we use it exclusively to generate reports and operate the tools of our platform, in accordance with Meta's Platform Terms and policies. We do not collect the content of private messages. You can revoke access at any time in your Meta account settings or on our platform (see Data Deletion, in Portuguese).

7. Ranking Suite (WordPress plugin)

Ranking Suite is a free WordPress plugin made by Ranking. This section explains which data we process when you download the plugin or ask to receive its news, and what the plugin does with the data of your own website.

7.1. The plugin does not send data from your site to Ranking

• Ranking Suite does not send to Rankingany data from the site where it is installed: not your visitors' data, not your content, not usage statistics;
• To protect the site, the plugin stores inside the site itself the IP addresses of login attempts and security logs, for up to 90 daysby default (the site owner can change this period). This data stays in your site's database, under the responsibility of whoever runs the site; Ranking has no access to it;
• The options that send data to third-party services — IndexNow, Google Fonts and captchas — come turned off. If you turn any of them on, the data goes straight from your site to that service, under that service's privacy rules, without passing through Ranking.

7.2. Download counting

• When you download the plugin from our website, our own server counts the download by storing only the date, version and language. This count does not store your IP address, does not use cookies and does not identify you;
• If you accepted cookies in the website notice, we also record the download as an event in Google Analytics, to understand how the website is used. If you declined or have not chosen yet, this event is not sent;
• Downloading does not require sign-up. People who download from WordPress.org are subject to WordPress.org's privacy rules.

7.3. "Want to hear about what's new?" sign-up

• It is optional. You can download and use the plugin without signing up;
• What we store: your e-mail, the language you chose, the sign-up date, the consent text you accepted and the IP address at the moment of consent. The IP and the accepted text are used only as proof of your consent, as the LGPD requires;
• What for: to send news about Ranking Suite, such as new versions and important fixes. We do not sell or hand over your e-mail;
• Double opt-in: after signing up, you receive an e-mail with a confirmation link. We only send news after you click it;
• Legal basis: your consent (LGPD, art. 7, I), which you can withdraw at any time;
• How to leave: every e-mail includes a link to unsubscribe. You can also ask to be removed by writing to contato@ranking.bhz.br;
• For how long: we keep the data while you are subscribed. After you leave, it is deleted within 30 days. A subscription that is never confirmed through the email link is also deleted within 30 days.

7.4. Controller and contact

The controller of the download and sign-up data described above is Ranking LTDA, CNPJ 26.519.606/0001-21. For questions or requests about this data, write to contato@ranking.bhz.br. The rules for using the plugin are in the Ranking Suite Terms of Use.

8. Who we share data with

We do not sell personal data. We share data only with providers that help us operate the service (processors), under confidentiality and security obligations, and only to the extent necessary:

• Hosting and infrastructure (cloud provider for the website/application);
• Database and authentication (managed database provider with per-client isolation);
• Advertising data collection provider (integration with media platforms);
• Artificial intelligence providers, to generate analyses of metrics already collected;
• E-mail delivery provider (reports, notifications and Ranking Suite news);
• Audience measurement tool (Google Analytics), only for people who accepted measurement cookies;
• Payment provider (when there is billing);
• Authorities, when required by law or court order.

9. Cookies and similar technologies

We use essential cookies (needed for the website to work and for sessions) and, when you arrive through a partner link, a cookie that records that referral. Measurement cookies (such as Google Analytics cookies), used to understand how the website is used and improve it, are only activated if you click Accept in the cookie notice; if you decline, they are not used. You can also manage cookies in your browser settings; blocking essential cookies may affect how the service works.

10. Storage, security and retention

• Token encryption: access tokens (OAuth) are encrypted at rest with AES-256-GCM; the keys are kept only in server environment variables;
• Secure transport: all traffic uses HTTPS and secure session cookies;
• Per-client isolation:each agency's data is segregated by row-level security policies in the database;
• Retention: we keep data for as long as needed for the purposes above and for legal obligations; when an account is disconnected, its credentials are deleted, and the data can be erased on request (see Data Deletion). Ranking Suite news sign-up data follows the period in section 7.3.

11. International data transfers

Some of our providers may process data outside Brazil. In these cases, we adopt the safeguards set out in the LGPD to ensure an adequate level of protection.

12. Your rights

Under the LGPD, you can request: confirmation that we process your data; access to the data; correction; anonymization, blocking or deletion of unnecessary data or data processed in non-compliance; portability; information about sharing; and withdrawal of consent (for Ranking Suite news, just use the unsubscribe link in any e-mail). To exercise these rights, write to contato@ranking.bhz.br.

13. Children and teenagers

The service is intended for businesses and professionals. We do not knowingly collect data from minors; if we identify such processing without legal grounds, we will delete it.

14. Changes to this policy

We may update this policy to reflect changes in the service or in the law. The date of the last revision is shown at the top of this page; relevant changes will be communicated through the usual channels.

15. Data protection officer and contact

For questions about privacy, exercising your rights or data deletion, contact our privacy channel: contato@ranking.bhz.br.