Security and data

How RankJet stores your connections, what it can access and which data it keeps

To publish for you, RankJet needs access to your site, and to Search Console if you connect it. This page covers how that access is stored, what it allows, what other data RankJet keeps and how you remove it. The binding terms are in the privacy policy.

Credentials are encrypted

Every credential you give RankJet is encrypted at rest and used only on RankJet's servers, when they publish or read data for you. It never reaches your browser again after you save it.

Connection	What RankJet stores
Google Search Console	The read-only access Google grants, encrypted
WordPress plugin	Your site address and the connection key the plugin creates, the key encrypted
WordPress application password	Your site address, username and application password, the password encrypted
Shopify	The store name, client ID and secret, the secret encrypted
Code site	The endpoint address and the webhook secret, the secret encrypted

What the access allows

Search Console access is read-only. RankJet reads your performance data and the status of your pages, and cannot change settings or submit anything to Google. See Google Search Console
A WordPress plugin connection needs an administrator to approve it inside WordPress, and the approval code works once
The Shopify app you create has only the write_content and write_files permissions. It can publish blog posts and their images, and cannot see orders, customers or products
A code site receives articles only at the endpoint you set, each one signed with your secret in the X-Webhook-Secret header
Access to your data is restricted to your own account

Treat the webhook secret and the plugin's manual connection key like passwords: anyone who has one can send articles to your site. If one leaks, disconnect and connect again to replace it.

What RankJet keeps

Data	What it includes
Account	Your email address and the basic details needed to run your account
Connections	The credentials listed above, encrypted
Site and content	Your site address, the pages RankJet reads for internal links, your keywords and articles, and the performance data you connect
Payments	Processed by Stripe. RankJet never receives or stores your full card details
Usage	Technical information about how the app is used, to run, secure and improve it

RankJet does not sell your data, and does not use your account details, content or site data for advertising.

Disconnect and delete

You can disconnect any connection in Settings, on the Integrations tab. Disconnecting deletes the stored credentials, and articles already published stay on your site. To review, correct or delete your personal data, email support@rankjet.co.