Updated: 1 October 2026
1. Data controller
The controller of your personal data is Ecovision Impex SRL, Cluj-Napoca, Romania. Data protection contact: contact@vendrank.com.
- Legal name
- Ecovision Impex SRL
- contact@vendrank.com
2. Data we collect
Account data: email address, name (optional), password (stored only as a non-reversible cryptographic hash). Usage data: projects and websites you add, tracked keywords, generated reports, technical logs (IP address, browser type, access time). Billing data: company name, VAT number, address, for invoicing.
3. Purposes and legal basis
Providing the Service and performing the contract (Art. 6(1)(b) GDPR); invoicing and legal obligations (Art. 6(1)(c)); platform security and product improvement under legitimate interest (Art. 6(1)(f)); marketing communications only with your consent (Art. 6(1)(a)), which you can withdraw at any time.
4. Processors and transfers
We use providers for hosting, SEO data (DataForSEO), AI models for content generation and email delivery. They receive only the data strictly necessary (for example the analysed domain and keywords, never your password). Where a provider is located outside the EEA, transfers rely on the European Commission's Standard Contractual Clauses.
5. Cookies
The application uses only technical storage required for authentication and preferences (language, theme). We do not use advertising cookies. Traffic statistics for public pages are aggregated and anonymous. Full details in the Cookie Policy (/en/cookies/).
6. Retention
Account data is kept while the account is active and for 30 days after closure. Accounting records are kept for the statutory period (10 years). Technical logs are kept for at most 12 months.
7. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with the Romanian supervisory authority ANSPDCP (www.dataprotection.ro). To exercise your rights write to contact@vendrank.com; we reply within 30 days.
8. Security
Connections are encrypted (TLS), passwords are stored using key-derivation (scrypt), data access is role-based and backups are encrypted.
9. Changes
Any changes to this policy will be published here; we will notify you by email of significant changes.