Privacy Policy
Effective date: 11 March 2026
1. Data Controller
Lepre Oy (Business ID: 3464332-4) Email: support@myrankx.com Website: www.myrankx.com RankX operates as an independent data controller with respect to all data it processes in connection with the Service.
2. What RankX Does — Overview
RankX is a local business ranking and competitive intelligence platform. RankX analyses business data available from multiple publicly accessible online sources, applies its proprietary algorithm to derive analytical signals, and presents the results as comparable ranking scores. RankX does not reproduce or republish third-party content in its original form. It derives aggregated signals from public sources solely for the purpose of producing its own independent analytics. RankX does not sell business data and does not use rankings for advertising sales. Rankings are determined exclusively by algorithmic analysis — paid subscriptions have no effect on ranking outcomes. RankX does not generate new information about businesses. It organises data already in public circulation into a structured, comparable format — consistent with the longstanding practice of industry comparison services, editorial "best of" lists, and business directories.
3. Data Collected
3.1 Public Business Data (All Businesses)
RankX analyses business data from multiple publicly accessible online sources, including business directory services, review platforms, mapping services, and businesses' own websites. RankX additionally generates its own analytics based on the collected signals. The signals analysed include, without limitation: business name, industry category, location, average rating, review count and temporal distribution, responses to reviews, opening hours, profile completeness, image count, and the existence and technical status of a business website. This data is used exclusively for the purpose of calculating RankX scores and ranking positions. It is not sold or disclosed to third parties. Only minimal data is displayed publicly: business name, city, RankX score, and ranking position. Contact details, full analytics, and competitive intelligence are accessible only upon verification of business ownership (claiming).
3.2 User Account Data (Registered Users)
Upon registration and claiming, RankX collects: full name, email address, and business details.
3.3 Service Usage Data
Login records, feature usage, and following activity (i.e., which businesses a user monitors — see Section 8 regarding anonymity policy).
3.4 Technical Data
IP address, browser type, and device information, collected solely for the purpose of ensuring service functionality.
4. Purposes of Processing
Personal data is processed for the following purposes: • provision and maintenance of the Service • calculation of business scores and ranking positions • generation of competitive analyses and industry benchmarks • delivery of email notifications (reports, score changes, competitive developments) • improvement and development of the Service • production of aggregated, anonymised industry statistics
5. Legal Bases for Processing (GDPR Art. 6)
Contractual Necessity (Art. 6(1)(b))
The core functionalities of the Service — scoring, analytics, and follow notifications — are processed on the basis of the contract between RankX and the registered user.
Consent (Art. 6(1)(a))
The delivery of analytics-based email communications is based on the user's explicit opt-in consent provided at the time of claiming.
Legitimate Interests (Art. 6(1)(f)) — Public Business Data
The analysis of publicly available business data and the calculation of rankings is based on the legitimate interests of RankX. We have assessed the applicability of this legal basis as follows: RankX's legitimate interest: RankX provides a transparent, algorithm-based comparison that benefits both business operators (competitive intelligence regarding their market position) and consumers (reliable, advertising-free comparison). Data is publicly available: All business data analysed by RankX is freely accessible on the internet without authentication. RankX does not circumvent technical access controls and does not process information that businesses have not themselves made publicly available. Equal treatment: RankX applies the same algorithm uniformly to all businesses within a vertical. Scores are based exclusively on measurable, publicly available signals — not on payments, commercial relationships, or editorial judgment. Balancing test: RankX has assessed that the interest of businesses in not appearing in public industry comparisons does not override the legitimate interest of RankX and the market in transparent, comparable information — particularly given that only minimal data is displayed publicly and more sensitive analytical data requires explicit consent. Comparable services have operated lawfully under this framework for decades. Right to object: Any business has the right to request restriction of its visibility within the Service (see Section 12).
Data Minimisation (Art. 5(1)(c))
RankX does not collect or display more data than is necessary for the provision of the Service. Follow activity data discloses only aggregate counts — never individual identities.
6. Algorithmic Analysis and Scoring
RankX uses algorithm-based analysis to produce business comparisons. Scores are derived from automated analysis of publicly available signals — including review volume and recency, profile completeness, and online visibility. The scoring methodology is transparent: each point in a score is attributable to a measurable signal. Scores do not incorporate editorial assessments, and paid subscriptions have no effect on ranking outcomes. Rankings reflect relative position within an industry vertical at a given point in time — not an absolute assessment of quality. Rankings are updated automatically as underlying public data changes.
7. Public Data vs. Claimed Profile
| Data Element | Public (No Login) | Claimed Profile (Consent Given) |
|---|---|---|
| Business Name | TOP 10 per region | All businesses |
| City | TOP 10 per region | All businesses |
| RankX Score | TOP 10 per region | All businesses |
| Ranking Position | TOP 10 per region | All businesses |
| Full Address | — | ✓ |
| Phone Number | — | ✓ |
| Website URL | — | ✓ |
| Competitive Analytics | — | ✓ (subscription) |
| Monthly Reports | — | ✓ (subscription) |
| Follow Notifications | — | ✓ (subscription) |
8. Competitor Monitoring and Anonymity
RankX's competitor monitoring feature operates under a strict anonymity policy: • The identity of a following user is never disclosed to the monitored business under any circumstances • A monitored business receives notification that it is being followed, but receives only an aggregate count — not the identity of any follower • Email notifications do not contain the name or any identifying information of the following user • Follow relationship data is protected at the database level by Row Level Security controls • Administrative users do not have access to follow relationships
9. Cookies
RankX uses essential cookies for session management and authentication. Analytics cookies are used to monitor and improve service usage. Users may manage cookie preferences through their browser settings.
10. Disclosure and Transfer of Data
Personal data is not disclosed to third parties for marketing purposes. For the purpose of providing the Service, data may be processed by the following sub-processors: • Supabase — database infrastructure (EU region) • Stripe — payment processing • Postmark — transactional email • Vercel — hosting infrastructure • PostHog — analytics (EU region) Where data is transferred outside the EU/EEA, RankX ensures compliance with GDPR requirements through the use of Standard Contractual Clauses.
11. Security
RankX implements appropriate technical and organisational measures to protect personal data, including: • encryption of all data in transit (HTTPS/TLS) • database-level access controls (Row Level Security) • access to personal data restricted to authorised personnel and service functions • secure password handling; passwords are not stored in plaintext
12. Rights of Data Subjects
You have the right to: • access the personal data held about you • request rectification of inaccurate data • request erasure of your personal data (right to be forgotten) • restrict the processing of your data • data portability • object to processing carried out on the basis of legitimate interests • withdraw consent at any time without affecting the lawfulness of prior processing • lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi) To exercise your rights, contact: support@myrankx.com
Business Visibility Request:
If you represent a business and wish to restrict or remove its public visibility within RankX, please submit a request to support@myrankx.com. Upon receipt of a valid request, RankX will cease displaying the business's information in public listings. Aggregated, anonymised industry data derived from the business's public signals may continue to be used for ranking calculations. Requests will be processed within 30 days.
Automated Decision-Making (Art. 22):
RankX scores are calculated algorithmically from public data. Rankings do not produce legal effects and do not significantly affect data subjects within the meaning of GDPR Art. 22. You are nevertheless entitled to request human review of your ranking by contacting support@myrankx.com.
13. Data Retention
User account data (name, email) is deleted within 6 months of account closure. Analytics derived from public data (scores, ranking history, aggregated statistics) are retained indefinitely as part of the Service's core dataset. Follow relationships are deleted immediately upon account closure.
14. Changes to This Privacy Policy
RankX reserves the right to update this Privacy Policy as necessary. Material changes will be communicated by email or through the Service no fewer than 30 days prior to the effective date of such changes.
Lepre Oy — RankX | support@myrankx.com | www.myrankx.com
Version 3.0 — 11 March 2026