Privacy policy

Last updated 27 October 2026

Tallyrank is an SEO agent for websites. This policy explains what we collect when you use tallyrank.app and console.tallyrank.app, what we do with it, and the choices you have. Questions: hello@tallyrank.app.

What we collect

• Your account: your email address and name, and the workspace (team) you belong to. Sign-in is handled by Clerk.
• Your site's public pages: the pages listed in your sitemap, read the way a search engine reads them, including their text, titles, headings and links.
• Google Search Console data, only if you connect it: the searches, clicks, impressions and positions Google reports for your site, and whether your pages are indexed. Access is read-only.
• Google Analytics data, only if you connect it: weekly visitor counts for your site. Access is read-only.
• Other connections you choose to add (Traks, Dodo Payments, Stripe, App Store Connect, Cloudflare): the access keys you give us, stored encrypted, and the weekly totals we read with them.
• What the agent produces: keyword research, plans, tasks, posts, rankings and measurements for your sites.

How we use it

Only to provide Tallyrank to you: to research searches, plan and write content, write tasks for your coding agent, check your site, and measure and report results. We don't sell your data, use it for advertising, or share it except with the processors below.

Google user data

Tallyrank's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We request read-only access to Search Console (and, if you choose, Google Analytics) and use it only to show you your site's search performance, find what to improve, and measure the changes Tallyrank suggests.
• We don't use Google user data for advertising, don't sell it, and don't use it to train general-purpose AI models.
• Parts of it (for example the searches your site appears for) are sent to Anthropic's Claude to produce your site's analysis, plans and reports, as a processor acting for us. Anthropic doesn't train its models on this data.
• No person at Tallyrank reads it unless you ask us to, it's needed for security, or the law requires it.
• You can disconnect Google at any time in your site's Settings; we stop using the access and delete the stored token. You can also remove access in your Google account's security settings.

Who processes data for us

• Cloudflare: hosting, storage and browser rendering of public pages.
• Clerk: sign-in and team membership.
• Anthropic: the Claude AI models that analyse your site and write plans, posts and tasks.
• DataForSEO: keyword volumes, difficulty, rankings and competitor data. We send it search phrases and domain names, never your personal data.
• Google: Search Console and Analytics, when you connect them.

Security

Access tokens and keys you connect are encrypted at rest (AES-GCM). Each site's data is kept in its own isolated storage. Traffic is encrypted in transit.

Keeping and deleting data

We keep your data while your account and sites exist. Removing a site deletes everything stored for it. Disconnecting a connection deletes its stored token. To delete your account and all its data, write to hello@tallyrank.app; we do it within 30 days.

Cookies

We use only the cookies needed to keep you signed in and to secure sign-in flows. No advertising or tracking cookies.

Your rights

You can ask for a copy of your data, a correction, or deletion at hello@tallyrank.app.

Changes

If we change this policy in a way that matters, we'll say so in the console before it takes effect.