---
title: Security and data
url: https://rankjet.co/en/docs/security
description: How RankJet stores your connections, what it can access and which data it keeps
---

To publish for you, RankJet needs access to your site, and to Search Console if you connect it. This page covers how that access is stored, what it allows, what other data RankJet keeps and how you remove it. The binding terms are in the [privacy policy](https://rankjet.co/en/privacy).

## Credentials are encrypted

Every credential you give RankJet is encrypted at rest and used only on RankJet's servers, when they publish or read data for you. It never reaches your browser again after you save it.

| Connection | What RankJet stores |
| --- | --- |
| Google Search Console | The read-only access Google grants, encrypted |
| WordPress plugin | Your site address and the connection key the plugin creates, the key encrypted |
| WordPress application password | Your site address, username and application password, the password encrypted |
| Shopify | The store name, client ID and secret, the secret encrypted |
| Code site | The endpoint address and the webhook secret, the secret encrypted |

## What the access allows

- Search Console access is read-only. RankJet reads your performance data and the status of your pages, and cannot change settings or submit anything to Google. See [Google Search Console](https://rankjet.co/en/docs/search-console)
- A WordPress plugin connection needs an administrator to approve it inside WordPress, and the approval code works once
- The Shopify app you create has only the `write_content` and `write_files` permissions. It can publish blog posts and their images, and cannot see orders, customers or products
- A code site receives articles only at the endpoint you set, each one signed with your secret in the `X-Webhook-Secret` header
- Access to your data is restricted to your own account

> Treat the webhook secret and the plugin's manual connection key like passwords: anyone who has one can send articles to your site. If one leaks, disconnect and connect again to replace it.

## What RankJet keeps

| Data | What it includes |
| --- | --- |
| Account | Your email address and the basic details needed to run your account |
| Connections | The credentials listed above, encrypted |
| Site and content | Your site address, the pages RankJet reads for internal links, your keywords and articles, and the performance data you connect |
| Payments | Processed by Stripe. RankJet never receives or stores your full card details |
| Usage | Technical information about how the app is used, to run, secure and improve it |

RankJet does not sell your data, and does not use your account details, content or site data for advertising.

## Disconnect and delete

You can disconnect any connection in **Settings**, on the **Integrations** tab. Disconnecting deletes the stored credentials, and articles already published stay on your site. To review, correct or delete your personal data, email support@rankjet.co.

- [Google Search Console](https://rankjet.co/en/docs/search-console): Connect Search Console to see your real rankings and clicks, and which articles are in Google
- [Plan and billing](https://rankjet.co/en/docs/billing): One plan, a free trial with a card upfront, and how to cancel or change your card
- [Custom webhook](https://rankjet.co/en/docs/integrations/webhook): Receive published articles on a site built in code, with an endpoint your AI tool or developer builds