Privacy Policy
Effective Date: January 1, 2026 • Last Updated: September 23, 2026. How Zobay Rank protects your crawl telemetry, workspace credentials, and query data.
Zobay Rank is committed to stringent privacy governance. We process customer data strictly to execute website crawls, evaluate answer engine citations, and generate generative optimization insights. We never sell customer information, and our AI model integrations operate with strict zero-training guarantees.
1. Information We Collect & Process
We only collect data strictly necessary to execute website crawling, verify status codes, and track multi-engine prompt citations.
Account & Profile Credentials
Work email address, salted password hashes (Argon2 / bcrypt), workspace team name, and notification preferences.
Audit & Crawl Targets
Target domain URLs, crawl depth parameters, robots.txt directives, and target answer engine prompt tracking configurations.
Integration Tokens
Encrypted API keys and webhooks provided for Google Search Console, Brevo, Slack, or Discord notification channels.
Security & Telemetry
Timestamped server access logs, client IP addresses for brute-force rate limiting, and diagnostic crawler latency statistics.
2. How We Use & Protect Your Telemetry
All crawl jobs and AI prompt simulations run in isolated execution sandboxes with multi-layered perimeter safeguards.
SSRF-Protected Crawling
Our crawler strictly forbids traversing internal private IP spaces (RFC 1918), AWS/GCP metadata endpoints, and non-HTTP protocols, safeguarding your network topology.
Encrypted Credential Storage
Third-party tokens (Search Console, webhooks) are encrypted using AES-256 with KMS rotated keys. Passwords are cryptographic hashes utilizing Argon2/bcrypt algorithms.
Zero Model Training
Our integrations with OpenAI, Anthropic, Google, and Perplexity utilize commercial enterprise endpoints where customer prompts and answers are strictly exempt from model training.
3. Your Rights Under GDPR, CCPA & Global Laws
You retain complete sovereign ownership over your account data, audit records, and workspace configurations.
Individual Privacy Rights
- Right to Access: You can download a structured copy of your workspace data, crawls, and prompt histories at any time.
- Right to Erasure: You can request immediate permanent deletion of all account records, audit tables, and project assets.
- Right to Rectification: You can modify or update billing, team, and domain configurations in real time via settings.
- Right to Opt-Out: We do not sell your personal data; no opt-out is necessary because monetization of customer data is prohibited by design.
Privacy Inquiries & Data Protection Officer
For any questions regarding this Privacy Policy, sub-processors, or to submit a formal GDPR/CCPA request, contact our security and privacy team directly:
Frequently Asked Privacy Questions
Clear answers regarding data retention, AI model isolation, and audit ownership.
Q1.Do AI models or LLMs train on my website crawl data or prompts?
No. Zobay Rank submits diagnostic queries to ChatGPT, Perplexity, Gemini, and Claude via commercial enterprise API tiers with explicit zero-data-retention and zero-model-training clauses. Your tracked prompts and audit results are never used to train public AI models.
Q2.Does Zobay Rank sell customer or website audit data to third parties?
Never. We do not sell, rent, or monetize your personal information, workspace metadata, or crawl findings under any circumstances.
Q3.How long is website crawl history retained?
Historical crawl snapshots and status code reports are retained for the duration of your active subscription to enable longitudinal trend reporting. You can permanently purge crawl records at any time via your project dashboard.
Q4.How can I request full deletion of my workspace and personal data?
You can submit a complete data erasure request at any time by contacting our data protection desk at privacy@zobay.in or support@zobay.in. We process GDPR and CCPA erasure requests within 7 business days.
Enterprise-Grade Search Intelligence with Total Privacy
Run deterministic crawls and live model prompt tracking with complete data sovereignty and zero LLM training risk.