Privacy Policy

1. Introduction

This Privacy Policy describes how Winrank collects, uses, stores, and processes data when you use our platform at winrank.co. Winrank provides AI-assisted content planning, copy generation, image generation, and social publishing workflows for Instagram and TikTok.

By using Winrank, you acknowledge that the data practices described here apply to your use of the Service, including account features, generation features, social platform integrations, and scheduling tools.

2. Information We Collect

a) Account and Authentication Data

When you create an account or sign in, we process authentication data through Supabase, including your account identifier and login session metadata required to keep your account secure and accessible.

b) Content Inputs and Generated Outputs

We process and store data you submit to generate content, such as brand profile fields, content goals, prompts, scripts, captions, hashtag sets, content calendars, and generated outputs (including images). This allows you to save, review, edit, and publish your content.

c) Connected Account and Integration Data

If you connect Instagram or TikTok, we process the authorization and integration metadata needed to post on your behalf when you explicitly request publishing or scheduling. We do not collect social platform passwords.

d) Technical and Operational Data

We collect technical records such as request metadata, error logs, and feature execution events to operate, secure, debug, and improve the Service.

3. How We Use Data

• Provide account access, authenticated sessions, and core app functionality.
• Generate content plans, post copy, scripts, and media outputs based on your inputs.
• Store drafts, generated assets, and publishing history in your workspace.
• Publish or schedule content to connected social accounts when requested by you.
• Run background scheduling workflows (for example, scheduled publish triggers).
• Detect abuse, prevent unauthorized use, and maintain platform reliability.
• Measure product performance and improve quality of generated results.

4. AI Processing and Model Providers

Winrank sends relevant portions of your prompts and content context to AI providers used by our generation pipeline, including Google Gemini, ElevenLabs, and HeyGen, only to fulfill requested generation tasks. AI output quality can vary, and generated content may require your review before publication.

We do not use your data to sell targeted advertising profiles. We do not claim ownership of your original inputs or final content outputs.

5. Platform Integrations and Tokens

If you connect social accounts, Winrank processes access credentials and integration state required to perform posting actions. Those credentials are used only for integration functionality you enable, such as direct publish, scheduled publish, and connection status checks.

You can disconnect integrations at any time in the app. After disconnection, Winrank will no longer initiate new publishing requests for that account.

6. Service Providers and Infrastructure

Winrank relies on third-party infrastructure providers to operate:

• Supabase for data storage, authentication, and database operations.
• Vercel for application hosting and deployment infrastructure.
• Composio for social platform integration orchestration.
• Google Gemini, ElevenLabs, and HeyGenfor AI generation features.

We may also process or disclose data when required by law, regulation, legal process, or to protect the security and integrity of the Service.

7. Security Practices

Winrank uses reasonable technical and organizational safeguards, including transport encryption, access controls, and controlled credential handling for platform integrations. No service can guarantee absolute security, but we continuously improve our security controls.

8. Data Retention

We retain data for as long as needed to provide the Service, maintain account functionality, enforce platform rules, and satisfy legal obligations. If you delete content or disconnect integrations, associated records may be removed immediately or on a rolling retention basis depending on system needs.

9. Children’s Privacy

Winrank is not intended for users under 18 years old. If we become aware of data collected from a user below this age threshold, we may disable the account and remove associated data.

10. Your Controls and Rights

Depending on your jurisdiction, you may have rights to:

• Access personal data associated with your account.
• Correct or update account and profile information.
• Delete content you created in the product.
• Disconnect social account integrations.
• Request deletion of your account data where applicable.

11. Cookies and Session Technologies

Winrank uses essential cookies or similar session mechanisms necessary for authentication, security, and product functionality. Disabling these may prevent normal use of the app.

12. Cross-Border Processing

Because Winrank depends on cloud infrastructure and AI providers, your data may be processed in multiple jurisdictions where these services operate. We use reasonable safeguards to protect data in transit and at rest.

13. Policy Updates

We may revise this Privacy Policy to reflect product changes, integration changes, legal requirements, or security updates. The effective date at the top indicates the latest revision.

14. Legal Scope

This Privacy Policy governs how Winrank handles data through the Service. It does not govern third-party websites, apps, or services that you may access through links or platform integrations.