Privacy policy
Last updated 26 October 2026
Ranking (ranking.bobwork.ai) is run by BobOffice, LLC, a Delaware company (“we”). This policy explains what we collect when you use Ranking, why, and how to have it deleted. Questions: info@bobwork.ai.
What we collect
- Account: your email address, used to sign you in with one-time links and to send the reports you schedule.
- Projects: the domains, competitors, keywords and AI prompts you add, and the results of the checks you run.
- Billing: top-ups are handled by Stripe. We keep the amount, date and a Stripe reference. We never see or store your card number.
- Usage: a log of the checks you run and what each one cost, so your balance is correct.
Google user data
If you choose to connect Google on a project, Ranking asks for read-only access to:
| Permission | What we read | What we use it for |
|---|---|---|
| Google Search Console (read-only) webmasters.readonly | The list of sites you can access, and search queries, pages, clicks, impressions, click-through rate and position for the site you pick | Showing your own search performance next to your tracked rankings, in your project only |
| Google Analytics (read-only) analytics.readonly | The list of GA4 properties you can access, and sessions by channel, landing page and source for the property you pick | Showing organic and AI-assistant visits to your site, in your project only |
Ranking cannot change anything in your Search Console or Analytics accounts. We store only an encrypted refresh token, linked to the project where you connected it. Report figures are fetched when you open the tab and kept in short-lived memory, not in our database.
We do not sell Google user data, use it for advertising, share it with third parties, or use it to train AI models. People at BobOffice, LLC do not read it, except when you ask us for help, when needed for security, or when the law requires it.
Ranking’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Disconnecting: open the project, go to Share › Integrations and press Disconnect. We revoke the token with Google and delete it straight away. You can also remove access at myaccount.google.com/permissions.
Who processes data for us
Vercel (hosting), Supabase (database), Stripe (payments), Resend (email), and our search and AI data providers, which receive the keywords, domains and prompts you check, but never your Google data.
Keeping and deleting data
We keep your data while your account is open. Deleting a project deletes its keywords, prompts, results and Google connection. To delete your whole account, email info@bobwork.ai from the account’s address; we delete it within 30 days. Payment records are kept as long as tax law requires.
Cookies
We use one sign-in cookie. No advertising or tracking cookies.
Your rights
You can ask for a copy of your data, a correction, or deletion at any time by emailing info@bobwork.ai. Every table in the app can also be exported as CSV.
Changes
If we change how we use Google user data, we will ask for your consent again before doing so.