This translation is provided for convenience; the French version prevails.

Privacy

Last updated: October 28, 2026

i am rank measures the visibility of brands in AI engines. This page tells you what we collect on the iamrank.com site and on the app.iamrank.com platform, why, how long we keep it, and how to exercise your rights.

Who is responsible

Anthony Quinchon EI, Bâtiment G, 305 rue Maréchal Lyautey, 83600 Fréjus, France. For any question about your data, write to contact@iamrank.com. The publisher's full details are in the legal notice. The data of the site and the platform is hosted in France, in Paris, by Supabase.

The iamrank.com site

The free scan

The AI visibility scan runs on scan.iamrank.com. What it collects (the site tested, your email if you request your report, an anti-abuse hash of your IP) is detailed on its own privacy page (in French).

If you had joined the early access list

The list has been closed since the platform opened, on October 19, 2026. It recorded your email address, the date, the page you signed up from and, if you had indicated it, the plan you were interested in. Your email is used for one thing only: writing to you about the opening. Legal basis: your consent. We keep it for three months at most after the opening, so you have time to create your account if you wish: an automatic deletion takes care of it. You can ask for it to be deleted earlier, at any time.

To prevent mass sign-ups, we count sign-ups per hash of your IP address, computed with a secret key. The IP itself is never recorded, and this counter is erased within one hour.

When you use our free tools

The llms.txt generator, the AI crawler simulator and the prompt calculator read the public pages of the address you enter, as a bot would. To write or analyze, the public text of these pages is sent to Claude, Anthropic's AI model. We store nothing in our database and we do not ask for your email. To prevent a tool from being used in a loop, we count uses per IP hash: these counters erase themselves within 25 hours at most. What you then edit in a tool stays in your browser.

If you become an affiliate

The affiliate program is run with FirstPromoter (Igil Webs SRL), on iamrank.firstpromoter.com. You create your affiliate account there: your name, your email, your payout method (PayPal or bank account) and the tracking of your sales and your commissions. This data is used to run the program and to pay you. Legal basis: the affiliate agreement. We keep it as long as you are an affiliate, then for the period required by our accounting obligations. You never see the full email address of the customers you refer.

If you had pre-registered before the program opened, on our Tally form (a Belgian company whose data is hosted in the European Union), your answers are only used to invite you. We keep them for three months at most after the opening, on October 19, 2026, if you do not join the program.

Cookies and audience measurement on the site

The iamrank.com site measures its traffic with its own platform, as our customers do: the tag described below (“What we measure on your site”) counts visits coming from AIs, without cookies and without identifiers, and the server records AI crawler visits (the crawler and the page requested). It also counts its page views with Vercel Web Analytics, without cookies: the page, the referrer, the country, the device type and the browser. Vercel recognizes the same visit for 24 hours at most, without keeping anything that would allow you to be tracked beyond that. The site sets no cookies, with a single exception: if you arrive through an affiliate's link (an address containing “?via=”), we ask for your consent. If you accept, FirstPromoter counts your visit and sets its tracking cookie, and we keep the identifier of this visit for 60 days in a cookie (iar_fp_tid) valid on iamrank.com and on the platform: if you subscribe, the affiliate who referred you is paid. Your choice is kept for six months (iar_affiliation cookie). If you refuse, nothing else is set. Legal basis: your consent. We do not sell your email to anyone and we do not share it with any advertiser.

The app.iamrank.com platform

Your account

To log you in, we record your email address. If you sign in with Google or Microsoft, they send us your email address and your name. We also keep your first name if you provide it, your email settings and the date of your first login. Our login service (Supabase) records the date of each login and the IP address used, for account security.

We also record, in our own database, the actions taken in the platform (login, setup steps, plan chosen, pages opened, export downloaded) to understand how it is used, improve it and write to you at the right time if your setup stops partway. The platform also counts its page views with Vercel Web Analytics, without cookies or persistent identifiers (identifiers contained in addresses are removed before sending). Legal basis: the contract between us (the Terms of Use and the Terms of Sale) and, for this usage tracking, our interest in improving the service.

To help you or fix a problem, the i am rank team can display your workspace as you see it, in read-only mode: nothing can be changed in it or sent on your behalf, the viewing session ends on its own after 50 minutes, and each one is logged. Legal basis: our interest in providing the service.

Your team

When you invite someone, we record their email address to send them the invitation. It is erased as soon as they join your workspace. The members of a workspace see the name and email of the other members.

What you track

The brands, competitors and prompts you enter, the answers from AI engines, the alerts, the actions, the articles and the reports. This is data about brands, not about people: the Terms of Use prohibit tracking a person.

What we measure on your site

If you install our tag on your site, it sets no cookie. It keeps in the visitor's browser, for the duration of their visit only (session storage), where they came from and their entry page, so that only one visit is counted per session. We record neither their IP address nor any identifier: only daily totals, with the originating AI engine and the landing page for visits coming from AIs, and a simple total for the others.

If you install our relay (Cloudflare, WordPress or Vercel), it does the sorting on your site and only sends us AI crawler visits: the crawler, the page requested without its parameters, your server's response and its duration. Your visitors' visits are never sent to us.

If you connect Google Analytics

In AI traffic (Trafic IA), you can connect your Google Analytics account instead of installing our tag. You sign in with Google and authorize i am rank to read your statistics, in read-only mode (Google's “analytics.readonly” scope): we cannot change anything in your account.

• What we read: the list of your Google Analytics accounts and properties (their name and the address of the site they measure), so you can choose the right one. Then, for the chosen property only, daily totals: the number of visits and key events coming from AIs (ChatGPT, Perplexity, Gemini…), by engine and by landing page, and the total number of visits to your site. No data about any visitor: no identifier, no IP address, no age, no city.
• Why: to display these figures in AI traffic and in its export, for you and the members of your workspace. Nothing else: no advertising, no resale or transfer to a third party, never sent to an AI model, never used to train a model. No one at i am rank looks at them, except at your request (support), for security or if the law requires it. Legal basis: the contract (you are the one requesting this feature).
• How we keep them: the access tokens Google gives us are encrypted (AES-256) and never leave our servers; the figures are hosted in Paris, with the rest of your workspace. We re-read your account once a night.
• How long: as long as Google Analytics is connected, and 13 months at most for each imported day. When you disconnect, access is revoked at Google and both the access tokens and the imported figures are erased immediately.
• How to disconnect: in the platform, Settings, Integrations (Réglages, Intégrations), “Disconnect” (Déconnecter). You can also remove access from your Google account, at myaccount.google.com/connections.

i am rank's use of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements:

i am rank's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

If you connect Cloudflare

In AI crawlers (Robots IA), you can connect your Cloudflare account instead of installing a relay, if your domain name runs through Cloudflare. You sign in with Cloudflare and authorize i am rank to read, in read-only mode, the list of your domains (“Zone Read”) and their statistics (“Analytics Read”): we cannot change anything in your account or on your site.

• What we read: the name of your domains, their account and their plan, so you can choose the right one. Then, for the chosen domain only, AI crawler requests (GPTBot, ClaudeBot, PerplexityBot…) as hourly totals: the crawler, the page requested without its parameters, your site's response and the number of visits. We never ask for your visitors' requests, or for any IP address.
• Why: to display these visits in AI crawlers, its log and its export, and to spot what blocks the crawlers. Legal basis: the contract.
• How long: 90 days, like the visits received through a relay. When you disconnect, access is revoked at Cloudflare and both the access tokens and the imported visits are erased immediately. The access tokens are encrypted (AES-256) and never leave our servers.
• How to disconnect: in the platform, Settings, Integrations (Réglages, Intégrations), “Disconnect” (Déconnecter), or at Cloudflare, in your profile, “Manage OAuth authorizations”.

Payment and invoices

Payment is processed by Stripe. Your card details are entered with Stripe: we only see the card brand, the last four digits and the expiration date. Stripe also keeps your company's name, address and VAT number, which are used for your invoices.

Platform emails

Your login code, your invitations, your morning alerts, your Monday report, the reminder before the end of your trial and the confirmation if you cancel. If your sign-up or your setup stops before your trial starts, one or two emails to help you finish it, based on what you have already done. These emails, the alerts and the Monday report can be turned off from Settings, Emails (Réglages, Emails) or from the link at the bottom of each email.

How long

• Your account: as long as you use it. You can ask for it to be deleted at any time.
• A workspace's data: during the subscription, then 30 days after access ends, so you can come back if you wish. It is then deleted.
• AI crawler visits (relay or Cloudflare): 90 days.
• Figures read from Google Analytics: 13 months at most, and erased as soon as you disconnect Google Analytics.
• Usage tracking: it is detached from you, and therefore anonymous, as soon as your account is deleted.
• Invoices: for the period required by law.

Platform cookies

The platform only uses the cookies necessary for it to work: your login session, the workspace and the brand you have chosen, the plan and the offer chosen on the site for the duration of your sign-up, and the security of connections to Slack, Google Analytics and Cloudflare (a 10-minute cookie, for the round trip to their site). No advertising or audience measurement cookies, so nothing to accept. If you accepted the affiliate cookie on the site, the platform reads it at payment and passes its identifier to Stripe, so that FirstPromoter can attribute your subscription.

For both

Who receives what

• Supabase hosts the data, in Paris, and manages login to the platform.
• Vercel serves the site and the platform, and counts their visits (without cookies). Its servers are in the United States.
• Upstash runs the site's anti-abuse counters.
• Stripe receives what is needed for payment and invoices.
• Resend sends the platform's emails.
• The AI engines we query (OpenAI, Google, Anthropic, Perplexity, Microsoft, DeepSeek, xAI, Mistral) and our data collection providers (DataForSEO, cloro, Bright Data) receive your prompts, which are about brands. They never receive your email or your name.
• Anthropic also receives the public text of the pages read by the free tools and by the platform setup, and the data needed to write your recommendations and your articles. Never your email or your IP.
• Slack receives your alerts if you connect it to your workspace, without any email.
• Google (Google Analytics) and Cloudflare, if you connect them: we request your statistics from them, in read-only mode, with your consent. They receive nothing from us beyond these requests.
• FirstPromoter runs the affiliate program: affiliate accounts, the tracking of visits coming from their links (with your consent) and the amount of the subscriptions they bring in, read from Stripe.
• Tally received the pre-registrations for the affiliate program, in the European Union.
• The publisher receives a Slack notification for each affiliate pre-registration (the profile, the channels and the audience size) and at each key stage of a subscription (trial started, plan change, reason given in case of cancellation), never your name or your email.

Vercel, Stripe, Resend, Anthropic, OpenAI, Slack and the other US companies receive this data outside the European Union, with the safeguards provided for by the GDPR (Data Privacy Framework or the European Commission's standard contractual clauses). DeepSeek, in China, only receives prompts about brands, no data about you.

Your rights

You can request access to your data, its rectification, its erasure or its portability, object to processing or request its restriction, and withdraw your consent at any time. An email to contact@iamrank.com is enough; we reply within 30 days. If you believe your rights are not being respected, you can lodge a complaint with the CNIL (cnil.fr), the French data protection authority.