Privacy Policy

Last updated: November 9, 2026

This Policy explains which personal data Rankzooka processes, why, and what your rights are, under Brazil’s General Data Protection Law (LGPD, Law 13.709/2018) and, where it applies, the EU General Data Protection Regulation (GDPR). In short: we collect the minimum needed for your account and subscription to work, and your videos never leave your device.

1. Who the controller is

The operator of Rankzooka is responsible for your data. For any privacy matter, including reaching our data protection officer (DPO), write to support@rankzooka.com.

2. What we do not collect

Your videos, audio, titles and edits are processed only in your browser. They are never sent to our servers and we have no access to them. We do not use advertising tools or third-party trackers, and we do not sell personal data.

3. Data we process

  • Account: email, user identifier and, if you sign in with Google, the basic profile data Google shares (name and photo), which we only use to show in the account menu. Your password is stored by our authentication provider as a hash; we never see it.
  • Subscription: Stripe customer ID, plan, billing interval, status, period dates and whether the free trial was used. Card details stay with Stripe only.
  • Service usage: renders per month, render quota tracking, account creation date and last access.
  • Terms acceptance: the version of the Terms and this Policy you accepted, and when.
  • Security and administration: records of admin actions (such as account suspension) and temporary technical data such as your IP address, kept in memory to limit abuse and not written to server logs.

4. Why we use it and legal bases

  • To create and keep your account, authenticate you and provide the service you subscribed to (performance of a contract).
  • To bill your subscription, apply plan limits and meet tax and accounting duties (performance of a contract and legal obligation).
  • To prevent fraud and abuse and keep the service secure (legitimate interest).
  • To answer your requests and send essential account messages, such as email confirmation, password resets and billing notices (performance of a contract).

5. Who we share it with

We only share data with providers that run the service on our behalf, under contract and for the purposes above:

  • Supabase: authentication and the account database.
  • Stripe: payments, subscriptions and receipts.
  • Google: sign-in, if you choose to use your Google account.
  • Hosting and infrastructure providers that run the website and the API.

We may also share data when required by law, a court order or a competent authority, or to defend our rights.

6. International transfers

Some of these providers store data outside Brazil, for example in the United States. Such transfers use appropriate safeguards, such as contractual clauses, as the LGPD and GDPR require.

7. Cookies and local storage

We only use essential browser storage: your sign-in session (so you stay signed in) and your language preference. Stripe’s payment pages use their own cookies for security and fraud prevention. We do not use advertising or analytics cookies.

8. How long we keep it

We keep account data while your account is active. If you ask for deletion, we delete or anonymize your data, except what the law requires us to keep, such as billing and tax records (usually up to 5 years), and security records for as long as needed to investigate abuse.

9. Your rights

At any time and free of charge, you can:

  • confirm whether we process your data and access it;
  • correct incomplete or outdated data;
  • ask for anonymization, blocking or deletion of unnecessary data or data processed unlawfully;
  • ask for a copy of your data in a portable format;
  • ask us to delete your account and data processed on the basis of consent;
  • know who we share your data with;
  • object to processing and ask for review of automated decisions;
  • complain to Brazil’s data protection authority (ANPD) or to the authority in your country.

To exercise these rights, write to support@rankzooka.com from your account’s email. We reply within 15 days.

10. Security

We use encrypted connections (HTTPS), access control, server-side limit checks and records of admin actions. No system is completely immune to failures; if an incident may pose a significant risk to you, we will notify you and the authorities as the law requires.

11. Children

Rankzooka is not directed at people under 18 and we do not knowingly collect children’s data. If you believe a minor created an account without permission, contact us and we will remove it.

12. Changes to this Policy

We may update this Policy. Significant changes will be announced and, when needed, we will ask you to accept again before you keep using the editor.