Privacy Policy

Last updated: July 14, 2026

1. Who operates KeyRank

KeyRank (key-rank.com) is operated by a registered Ukrainian sole proprietorship. For data protection purposes, the operator below is the controller of your personal data.

Controller

Individual Entrepreneur Hromov Serhii ValeriiovychФОП Громов Сергій Валерійович

Tax number (РНОКПП)

3191205894

Registered address

Apt. 4, 41 Prospekt Metalurhiv, Novokodatskyi District, Dnipro, Dnipropetrovska Oblast, 49000, Ukraine

Email

info@key-rank.com

KeyRank is built and run by one person. There is no data protection officer — privacy requests come to me directly at the address above.

2. What data I collect

Account data

• Email address (used for authentication, account recovery, and service emails)
• Name and profile picture, as provided by Google when you sign in
• Authentication tokens (for keeping you signed in)

Project data

• Project names and domains you create
• Keywords you add for tracking
• Keyword ranking results collected by the service

Payment and subscription data

If you subscribe to a paid plan, I store a record of your subscription and of each charge:

• Your current plan, its expiry date, and your payment provider
• A subscription reference and transaction identifiers issued by Monobank
• For each charge: the amount, currency, status (approved, failed, or reversed), and the date it was charged

These records are linked to your email address. They are what lets me show your billing history, renew or cancel your subscription, issue refunds, and meet my tax and accounting obligations.

Automatically collected data

• IP address (for security and abuse prevention)
• Browser type and operating system (basic request headers)
• Pages visited within KeyRank and timestamps

What I do NOT collect

• Card numbers or any card details. These are entered on Monobank's payment page and stored by Monobank. I never see, receive, or store your card number, expiry date, or CVV.
• Data used to build advertising or behavioural profiles about you, and no data is used for remarketing or ad personalisation. See section 5 for the one advertising-related tag I do load.

3. How I use your data, and on what legal basis

• To provide the service — checking keyword rankings, displaying results, managing your projects and your subscription. Legal basis: performance of our contract (the Terms of Service).
• To take and manage payments — charging your subscription, issuing refunds, keeping billing records. Legal basis: performance of our contract, and compliance with a legal obligation for the accounting records.
• To send you service emails — ranking reports, billing notices, and account notifications. Legal basis: performance of our contract. You can unsubscribe from reports at any time.
• To keep the service secure and prevent abuse — legal basis: my legitimate interest in protecting the service.
• To measure whether my ads lead to signups — legal basis: your consent, given when you sign in (see section 5).
• To improve KeyRank — based on aggregated, anonymised usage patterns. Legal basis: my legitimate interest.

4. Cookies

KeyRank uses cookies for:

• Authentication: Keeping you signed in across sessions
• Session management: Maintaining your active session state
• Conversion measurement: A Google Ads cookie, set only after you sign in — see section 5

5. Advertising cookies

When you sign in and accept the Terms of Service, KeyRank loads a Google Ads tag that measures whether my ads lead to signups. This cookie is set by Google and is used only for conversion measurement — not for remarketing or ad personalisation. The tag is never loaded for visitors who are not signed in, so browsing the public site sets no advertising cookies.

6. Who your data is shared with

I do not sell your personal data, and I do not share it with anyone for marketing, advertising, or data brokerage. I do rely on the following providers to run the service:

• Google (sign-in): KeyRank uses Google as its only sign-in method. When you sign in, Google gives me your email address, name, and profile picture. I never receive your Google password.
• Monobank (payments): Universal Bank (Monobank), Ukraine, processes all card payments. Your card details go directly to them. They receive the information needed to take payment and issue refunds, and they store your card credentials so your subscription can renew automatically. Their handling of your card data is governed by their own privacy policy and by card scheme rules.
• Google Cloud (hosting): The service and its databases run on Google Cloud infrastructure in the europe-west1 region (Belgium, EU).
• Email delivery: An email provider is used to deliver ranking reports and account notifications to your inbox.
• Google Ads: Conversion measurement only, as described in section 5.
• Google Search: KeyRank checks Google search results to determine keyword positions. Your keywords are sent as search queries — no personal data is included in these requests.

I may also disclose data where I am legally required to do so.

7. International transfers

Your project and account data is stored in the EU (Belgium). However, I am based in Ukraine, and Monobank — the payment provider — is a Ukrainian bank. This means that if you are in the EU/EEA or the UK, your account and payment data is accessed and processed in Ukraine, which is outside the EEA. Where such a transfer requires safeguards, I rely on the appropriate legal mechanisms available, including transfers that are necessary to perform our contract with you.

8. Data retention

• Your account data and project data are kept as long as your account exists.
• If you delete your account, that data will be deleted within 30 days.
• Payment and billing records are the exception. I am required to keep records of transactions for tax and accounting purposes, so records of your payments are retained for as long as the law requires — at least three years — even after you delete your account. These records are kept only for that purpose and are not used to profile you.
• If KeyRank is shut down, user data will be deleted within 90 days of the shutdown date, subject to the same retention rule for payment records.
• Server logs containing IP addresses are retained for up to 90 days.

9. Your rights

Depending on where you live, you may have the right to:

• Access your personal data — you can see your projects and keywords in the dashboard
• Delete your data — you can delete your account through the settings page, subject to the payment-record retention rule in section 8
• Export your data — data export features are planned but not yet available. Contact me if you need your data.
• Correct your data — contact me to update your account information
• Object to processing based on legitimate interest, and withdraw consent for conversion measurement at any time

If you are in the EU/EEA, you have rights under the GDPR, including the right to lodge a complaint with your local data protection authority. If you are in California, you have rights under the CCPA. I will honour these rights to the best of my ability as a solo operator. Contact me at info@key-rank.com.

10. Data security

I use reasonable measures to protect your data, including encrypted connections (HTTPS), secure authentication, and access controls on the database. Card data never touches my servers — it is handled by Monobank, a licensed bank. Still, no system is completely secure, and I cannot guarantee absolute security. KeyRank is a small service run by one person; please weigh that when deciding what to entrust to it.

11. Children

KeyRank is not intended for anyone under 16 years of age. I do not knowingly collect data from children.

12. Changes to this policy

I may update this privacy policy at any time. Continued use of KeyRank after changes means you accept the updated policy. I will make reasonable efforts to notify users of significant changes.

13. Contact

For privacy-related questions or requests: info@key-rank.com