Privacy Policy
Our commitment to your privacy
rankONE Agency Pty Ltd (“rankONE”, “we”, “us”, or “our”) operates rankone.com.au and related tools including Pulse Agent (agent.rankone.com.au). We are committed to protecting your personal information and being transparent about how we collect, use and share it.
This Privacy Policy applies to all services operated by rankONE Agency and explains your rights under the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).
In plain English: We collect information to deliver our services, improve our tools, and communicate with clients. We do not sell your data. We do not share it with third parties except where required to deliver our services or comply with the law.
Information we collect
We collect information you provide directly to us, and information generated through your use of our services.
Information you provide:
- Business name, address, contact details and ABN
- Social media account handles and credentials (stored securely for service delivery)
- Google Business Profile access and review data
- Trading hours, menu information and venue details
- Communication preferences and onboarding form responses
- Payment and billing information (processed by our payment partners)
Information collected automatically:
- Google Analytics usage data on our websites
- Social media performance metrics via authorised API access
- Google review data via Google Business Profile API
- Instagram and TikTok mention data via Meta and TikTok APIs
- Log data including IP address, browser type and pages visited
How we use your information
We use the information we collect to:
- Deliver social media management, content creation and Google review response services
- Operate Pulse Agent — our AI-powered review and brand monitoring tool
- Generate AI-drafted responses to Google reviews on your behalf
- Monitor brand mentions and influencer content across social platforms
- Send you reports, approvals and service communications
- Improve and develop our services and internal tools
- Comply with our legal obligations
We use artificial intelligence tools including Anthropic’s Claude API to generate content and review responses. Content generated by AI is always reviewed by our team or presented to you for approval before being published.
Third-party services
To deliver our services we work with the following third-party platforms. Each has their own privacy policy and data practices:
- Google — Business Profile API, Places API, Google Analytics, Google OAuth
- Meta (Facebook & Instagram) — Instagram Graph API, Webhooks
- TikTok — TikTok for Business API
- Anthropic — Claude AI API for content generation
- Google Firebase — Firestore database for Pulse Agent data storage
- Synergy Hosting — Australian web hosting provider
- Xero — accounting and invoicing
We only share the minimum data necessary for each integration to function. We do not sell, rent or trade your personal information to any third party for marketing purposes.
Data storage & security
Your data is stored on servers located in Australia and the United States (Google Firebase). We take reasonable steps to protect your information from misuse, interference, loss, and unauthorised access including:
- HTTPS encryption on all web properties
- Restricted access to client data within our team
- Secure credential storage — passwords and API keys are never stored in plain text
- Regular backups of Pulse Agent data
Note: No method of internet transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. We encourage clients to use strong, unique passwords and to notify us immediately if they suspect any unauthorised access.
Social media & API access
Where you grant rankONE access to your social media accounts or Google Business Profile, we use that access solely to deliver agreed services — posting content, responding to reviews, monitoring mentions and generating performance reports.
We do not access your accounts for any purpose beyond the scope of your service agreement. You may revoke access at any time by removing our permissions in your platform settings. Revoking access may affect our ability to deliver services.
Your rights
Under the Australian Privacy Act you have the right to:
- Request access to the personal information we hold about you
- Request correction of inaccurate or outdated information
- Request deletion of your personal information (subject to legal obligations)
- Opt out of marketing communications at any time
- Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)
To exercise any of these rights, contact us using the details below. We will respond to all requests within 30 days.
Cookies
Our websites use cookies and similar tracking technologies to improve your experience and analyse usage. You can control cookie settings through your browser. Disabling cookies may affect some functionality of our websites.
We use Google Analytics to understand how visitors use our websites. This data is aggregated and anonymised. You can opt out via the Google Analytics opt-out browser add-on.
Changes to this policy
We may update this Privacy Policy from time to time. We will notify active clients of material changes via email. The effective date at the top of this page will always reflect the most recent version.
Continued use of our services after changes are posted constitutes acceptance of the updated policy.
Contact us
If you have any questions about this Privacy Policy or how we handle your personal information, please get in touch: