Privacy Policy

Adoomi Limited runs SimplyRank and is the data controller for the personal data described in this policy. If you are in the European Economic Area or the United Kingdom, this means Adoomi Limited decides why and how your personal data is used.

You can contact us about privacy at [email protected], or by post at Adoomi Limited, Smart Station, First Floor, Incubator Building, Masdar City, Abu Dhabi, United Arab Emirates.

We collect only what we need to run SimplyRank:

• Account data: Your name, email address, company name, your role in a workspace, and sign-in activity (when you signed in, your IP address, and your browser and device).
• Workspace data: The brands, competitors, prompts, categories and settings you set up, and the email addresses of people you invite to your workspace.
• Scan data: The answers AI models give to your prompts, and what we work out from them: mentions, positions, cited sources and sentiment. This is mostly information about brands, not about people.
• Website checks: The public website addresses you confirm, selected pages, technical findings and suggested fixes. We request these pages only when a workspace member starts a check, and save the report rather than full page bodies.
• Billing data: Your Stripe customer ID, plan, subscription and invoice status, and the billing name, address and tax number you give at checkout. We never receive full card numbers.
• Communications: Emails you send us and our replies, whether the emails we send you were delivered, and messages you type into the chat assistant on our website.
• Technical and usage data: Your IP address, browser, the pages you visit and error reports. If you opt in to analytics or marketing cookies, also the data those cookies collect (see “Cookies and similar technologies” below).
• Answers to our exit question: Some of our ad pages may ask visitors who are leaving one optional question about why. If you answer, we keep your choice, any note you type and when you sent them, and use a scrambled form of your IP address for a short time to stop abuse. We do not ask for your name or email address.
• Requests for a free website check: If you request a free check, we collect the email address and public website address you provide, your request to receive the report, and technical findings about the homepage. Where the offer includes an AI visibility snapshot, we also keep the buyer questions, AI answers and linked sources. We use public homepage text with Anthropic to infer your business and create three buyer questions, then ask OpenAI and Perplexity those questions. Anthropic also analyses the returned AI answers to identify recommended alternatives, with supporting quotes. We do not send your email address to these AI providers. We confirm your email address before running the check and emailing a private report link. Requesting a check does not subscribe you to marketing emails.

If you are in the European Economic Area or the United Kingdom, data protection law requires a legal basis for each use. Ours are:

• Providing SimplyRank: Creating your account, signing you in, running scans, showing results and sending service emails such as sign-in links and scan results. Basis: performing our contract with you.
• Billing: Taking payments, issuing invoices and keeping accounting records. Basis: our contract with you, and our legal obligations under tax and accounting law.
• Security and reliability: Preventing abuse and fraud, rate limiting, and finding and fixing errors. Basis: our legitimate interest in keeping SimplyRank safe and working.
• Improving SimplyRank: Understanding which features are used, mostly from aggregated data, and reading answers to our exit question. Basis: our legitimate interest in improving the product, or your consent where cookies are involved.
• Research and benchmarks: Creating aggregated, de-identified data from scan data across workspaces (prompts, the brands and competitors tracked, and the AI answers we collect), and using it to analyse and improve SimplyRank and to create, publish and share benchmarks, research and industry reports, including in our marketing. This data does not identify you, your workspace or any individual, and we do not name a customer in published research without their permission. For accounts opened before 21 October 2026, this applies thirty days after we email the account holder about it. Basis: our legitimate interest in improving SimplyRank, and in researching how AI models present brands and publishing and promoting that research.
• Product news and marketing emails: Telling customers about new features and offers. Basis: our legitimate interest, or your consent where the law requires it. Every marketing email has an unsubscribe link.
• Advertising and measuring our ads: We advertise SimplyRank on search engines and social networks. To learn which ads bring customers, and to choose who sees our ads, we may: run advertising platforms’ tags on our public pages; tell the platform whose ad you clicked, from our servers, when you sign up or become a paying customer (the ad’s click ID, what happened and when, and the amount paid); and give a platform a scrambled (hashed) copy of an account holder’s email address so it can match it to its own users, to leave existing customers out of our ads, show our ads to people who signed up but have not bought, or find similar businesses. If you are in the European Economic Area or the United Kingdom, we do these only with your consent: the tags only once you opt in to marketing cookies, and the rest only if you had opted in when you signed up. Elsewhere we may also rely on our legitimate interest in promoting our business. You can say no at any time: turn marketing cookies off in Cookie settings (our servers see that choice when you sign up, when you start a paid plan, and when you turn it off while signed in), use a browser that sends a Global Privacy Control signal, or email [email protected]. After that our servers send nothing more about you to advertising platforms. For accounts opened before 22 October 2026, our servers send none of this unless we emailed the account holder about it at least thirty days before. Basis: your consent, or our legitimate interest where the law allows it.
• Analytics and advertising cookies: Only if you opt in. Basis: your consent, which you can withdraw at any time.
• Legal requirements: Responding to lawful requests and enforcing our terms. Basis: our legal obligations and legitimate interests.

Where we rely on legitimate interests, you can object (see “Your rights” below). We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

To run a scan we send your prompts, which include the brand and competitor names you track, to the AI model providers listed under “Who we share data with”. We do not send them your name, email address or billing details.

The chat assistant on our website sends the messages you type into it to Anthropic, to write its replies.

We use these providers through their business APIs, whose terms do not allow them to train their models on the data we send. We never train AI models on your data.

We share personal data only with the service providers that help us run SimplyRank, each for the purpose listed:

• Supabase: Application database and sign-in. Stores your account, workspace and scan data in Zurich, Switzerland, and messages typed into the chat assistant on our website in Ireland (both on Amazon Web Services).
• Vercel: Hosts and serves the website and web application.
• Stripe: Payments, subscriptions and invoices. Stripe holds your card details; we never see them.
• Resend: Sends our emails: sign-in links, scan results, billing notices and product updates.
• OpenAI, Anthropic, Google and Perplexity: The AI models we query for your scans. They receive your prompts and the brand and competitor names in them, not your account details. Anthropic also writes the replies of the chat assistant on our website, so it receives the messages you type there.
• Sentry: Error monitoring. Receives error reports and, for some sessions where an error occurs, a recording of the page with text and form inputs masked.
• Upstash: Rate limiting, to stop abuse. Uses your IP address or account ID for a short time.
• Cloudflare: Website delivery, cookieless web analytics and tag management. Also serves the chat assistant on our website, which receives the messages you type into it, and stores answers to optional exit questions, requests for free website checks, and their private reports in our own Clever Pops installation.
• Google Analytics and Heap: Product and website analytics. They run only if you opt in to analytics cookies; until then, nothing is sent to them.
• Advertising platforms: Google Ads, and Meta (Facebook and Instagram), Microsoft Advertising or LinkedIn if we advertise with them. They measure our ads and help choose who sees them, as described under “Advertising and measuring our ads” above. Their tags on our pages set no advertising cookies unless you opt in to marketing cookies. For some uses they act on our behalf; for others, such as improving their own advertising, they decide how to use the data under their own privacy policies.

We may also share data with professional advisers, with authorities where the law requires it, and with a buyer or successor if SimplyRank or our company is sold or reorganised, in which case this policy continues to apply to your data.

We do not sell your personal data. We do not share your workspace or scan data with advertising platforms; what they may receive is described under “Advertising and measuring our ads” above.

We may publish and share aggregated, de-identified data that does not identify you or any individual (see “How we use it, and our legal bases” above).

Your account, workspace and scan data are stored in Zurich, Switzerland, on every plan. The European Commission and the United Kingdom recognise Switzerland as providing adequate protection for personal data.

Messages typed into the chat assistant on our website are stored in Ireland, in the European Union.

Adoomi Limited is based in the United Arab Emirates, and some of our providers process data in other countries, including the United States. Where the law requires safeguards for these transfers, we rely on those in our providers’ data processing terms, such as the European Commission’s Standard Contractual Clauses.

• Account, workspace and scan data: For as long as your workspace exists, including after you cancel a subscription. We delete it when you ask us to delete your account, unless the law requires us to keep part of it.
• Aggregated, de-identified data: It no longer identifies you, so we may keep and use it after your workspace is deleted.
• Messages to the chat assistant on our website: Deleted automatically 90 days after you send them. You can ask us to delete them sooner.
• Answers to our exit question: Deleted automatically 30 days after you send them.
• Free website check requests and reports: Deleted automatically within 30 days of the request. Confirmation links expire after 24 hours and private report links expire with the request. You can ask us to delete them sooner.
• Website check reports: Available for 90 days after each check, then removed by daily cleanup. Deleted with your workspace if it is deleted sooner.
• Billing records: For as long as tax and accounting law requires.
• Error reports and logs: For a limited period set by our providers, after which they are deleted automatically.
• Marketing preferences: If you unsubscribe, we keep a record of that so we do not email you again.
• Advertising data: The ad’s click ID, the campaign details, your marketing-cookie choice at sign-up and a record of what our servers sent to an advertising platform are kept with your workspace and deleted with it. Advertising platforms keep what they receive under their own policies.

When you ask us to delete your account, we complete the deletion within one month of confirming your request.

Functional cookies are always on because they are needed to keep you signed in, protect your session, remember your privacy choices, remember the language of the page you came from when you sign in, sign up or accept an invitation, and run core features.

Analytics cookies are optional and off by default. Google Analytics and Heap run only if you opt in; until then, nothing is sent to them. If you opt in, we use them to understand how SimplyRank is used and to improve it.

Where a public page shows an optional exit question or free-check offer, Clever Pops stores nothing on your device unless you have opted in to analytics cookies. If you have, it remembers in your browser for 30 days that it showed an offer or question, so it does not ask again, and counts how often it is shown, closed, interacted with or completed, including progress through the questions, without recording your answers in analytics. With analytics consent, the same browser can attribute a later verified trial signup to a qualified popup view; no email address or account identity is sent to the popup analytics service.

Marketing cookies are optional and off by default. If you opt in, advertising platforms’ tags use them to measure our ads and to show our ads to people who have visited our site, and our servers may tell the platform whose ad you clicked when you sign up or start paying (see “Advertising and measuring our ads” above).

With marketing storage on, we also keep the campaign, matched keyword, ad group, landing page, referring site and ad click ID in this browser, so a reload or return visit can still be linked to the campaign when you sign up. We use each saved record for up to 30 days and remove expired records when you next open our site. A new campaign replaces the saved one; a direct return does not extend its lifetime. Opening a tagged campaign link after its old record has been removed can start a new measurement window. Turning marketing off, clearing your privacy choice or sending a Global Privacy Control signal clears this saved attribution.

Separately, we count on our own servers how many visitors reach each step of sign-up and, to improve our public pages, how visitors use them: how far down a page they scroll, whether a page stays on screen for 10 seconds, whether they open the sample report or a question in a page’s FAQ, which buttons they press to sign up or to see our plans and comparisons, and whether they turned on optional cookies. These counts use a random number that exists only while the page is open: nothing is stored on your device, and no name, email address, IP address or browser details are recorded with them, only the page you first opened, the website that sent you (the site only, not the page), the campaign tags of the link you came from, if it had any, and whether you came from an ad click (not the click’s ID). If you reject optional cookies, or turn analytics cookies off, we stop counting how you use our public pages. If you arrive from an ad or from a link with campaign tags, we keep the campaign details, the ad’s click ID and your marketing-cookie choice with the workspace you create, so we can tell which campaigns bring customers. Our servers send the click ID to an advertising platform only as described under “Advertising and measuring our ads” above. The counts are deleted after a little over a year, and the campaign details are deleted with your workspace.

The Google Ads tag tells Google which of our public pages a visitor opens, which website sent them (the site only, not the page), the ad’s click ID and campaign tags if they came from an ad, and when they sign up, so we can measure our ads. It never sends the addresses of signed-in pages. Until you accept marketing cookies it does this without setting cookies, using Google’s Consent Mode. If you accept them, Google may also add your browser to a list of our site’s visitors, so it can show you our ads on other sites.

You can change your choices at any time using the Cookie settings link in our footer. You can also manage ad personalisation in your Google, Meta, Microsoft or LinkedIn account settings, and opt out of interest-based ads from many companies at youronlinechoices.eu (Europe) or optout.aboutads.info (United States).

We protect data with encryption at rest and in transit, database rules that keep each workspace’s data separate, passwordless sign-in, and production access limited to the people who run SimplyRank. No system is perfectly secure.

If a security incident affects your personal data, we will investigate it, contain it, and notify the relevant authorities and affected customers without undue delay where the law requires it.

Depending on where you live, you may have the right to access your personal data, correct it, delete it, receive it in a portable format, restrict or object to how we use it, and withdraw consent at any time. People in the European Economic Area and the United Kingdom have these rights under the GDPR. California residents have rights under the CCPA, including to know what we collect and to ask us to delete it; we do not sell personal data. Sending ad events or hashed email addresses to advertising platforms, as described above, may count as “sharing” for targeted advertising under some US state laws; you can opt out by turning marketing cookies off, using a browser that sends a Global Privacy Control signal, or emailing us. People in the United Arab Emirates have rights under the UAE’s personal data protection law.

To use any of these rights, email [email protected] from the address on your account. We may ask you to confirm your identity. We reply within one month and there is normally no fee.

You can also complain to your local data protection authority. We would appreciate the chance to help first.

SimplyRank is a business service and is not intended for children. We do not knowingly collect personal data from children.

If we change this policy we will update the date at the top of this page. If a change materially affects how we use your personal data, we will email account holders before it takes effect.

For privacy questions or requests, contact [email protected], or write to Adoomi Limited, Smart Station, First Floor, Incubator Building, Masdar City, Abu Dhabi, United Arab Emirates.