Privacy policy

• We collect only what you send us through a form or the chat, plus your IP address to stop spam and, when analytics is on, how the site is used.
• We use it to answer you. We don't sell it or share it for advertising.
• We use Google Analytics to see which pages help, with its advertising features off. It runs only after you agree if you're in the European Economic Area, the UK and Switzerland, never if your browser sends Global Privacy Control, and anyone can turn it off with “Cookie settings” at the foot of every page.
• Our chat assistant is an AI. What you type is sent to our AI provider to write the reply.
• Everything is deleted on a fixed schedule: chat transcripts after 30 days, enquiries after 24 months.
• Email contact@rankharvor.com to see, correct or delete what we hold about you.

This policy covers rankharvor.com. RankHarvor is a Florida-based web design, SEO and AI agency serving businesses across the USA, owned and run by its founder, Abu Mohammad Fazlay Rabby. When this policy says “we” or “us”, it means RankHarvor.

For anything about your information, email contact@rankharvor.com or call (323) 503-4171.

We collect what you choose to send us, plus a few technical details that keep our forms and chat working and free of spam. You can browse the site without giving us anything but the analytics described below, which you can turn off.

When you use the contact form

• Your name and email address
• Your phone number, if you add it
• The service you're interested in and your project details

When you ask for the free AI site check

• Your website address and email address

When you chat with our assistant

• The messages you type
• The page you're on and the language of the page, which help the assistant answer
• A random conversation ID that your browser creates, so the chat continues as you move between pages
• If you ask us to follow up: your name, email, phone number (optional), the service you need and a short summary of your request. The assistant sends these only after you've given your email and agreed to send them.

Sent automatically

• Your IP address. We store it with each enquiry, and use it to limit how much one connection can send: 5 form submissions an hour, and 20 chat messages every 10 minutes or 80 a day.
• The page you sent an enquiry from, and the date and time.
• On the contact form, the time you opened the page, which we use only to spot automated spam.

When analytics is on

• Through Google Analytics 4: the pages you view, how you arrived (for example a search engine, or a link's campaign tags), your approximate location (city level), device, browser and screen size, and a random ID kept in a cookie so repeat visits count once.
• A few actions, recorded without what you typed: sending the contact form or site check (with the service you picked), opening the chat, the chat passing your request to our team, and clicking to call, email or book a call.

We don't ask for card numbers, Social Security numbers, passwords or health details, and our assistant is told not to collect them. Please don't include them in a form or a chat.

• To reply to your enquiry, including any estimate or site check you asked for.
• To answer your questions in the chat.
• To check the chat assistant's answers and improve them, as the note in the chat window says.
• To block spam and abuse, and to keep the chat assistant within a fixed daily and monthly budget.
• With analytics, to see which pages and services people find useful and where our enquiries come from, only as totals.

We don't sell your personal information, share it for targeted advertising, or add you to a mailing list. We share it only with the service providers below, who handle it on our behalf.

The chat assistant is an AI, not a person, and it says so. Its replies are written by an AI model from a third-party provider we choose; today that provider is Command Code. If we change provider, we update this page.

To write each reply, our server sends the provider the conversation so far (your messages, the page you're on, the language of the page and the assistant's earlier replies) along with our instructions and public information from this website. Your browser never connects to the AI provider, and we don't send it your IP address. The provider handles the conversation under its own terms.

The assistant doesn't make decisions about you. It answers questions and, when you ask, passes your details to a person on our team.

Hostinger hosts this website, our forms and our chat assistant on servers in the USA. Enquiries and chat records are stored in private files on our Hostinger account, outside the public website.

Email. Each enquiry is emailed to our own inbox. Contact form and site check enquiries go through Hostinger's mail service. When you ask the chat assistant to follow up, we email our team an alert and a copy of the conversation, and email you your own copy; these are sent through Resend, an email delivery service, or through Hostinger's mail service when Resend isn't set up.

Our AI provider receives the chat conversation, as described above.

Google Analytics (Google LLC) receives the usage details under What we collect when analytics is on, and processes them for us as a service provider. We keep Google signals and ad personalization off, don't link analytics to any advertising account, and never send it your name, email, phone number or messages. Google Analytics doesn't log or store IP addresses.

Google handles call bookings, only if you choose to book (see Links and booking).

We may also disclose information if the law requires it, to protect our rights or someone's safety, or to a buyer if the business is ever sold, in which case this policy would still apply to it.

We use one analytics tool, Google Analytics 4, and no advertising or cross-site tracking tools. Our fonts are served from our own server.

Analytics cookies

When analytics is on, Google Analytics sets two first-party cookies on rankharvor.com: “_ga” and “_ga_X7NYNRE9BK”. They hold a random ID and the time of your visit, and expire after 13 months. Google keeps the statistics for 14 months, then deletes them.

• In the USA analytics is on unless you turn it off.
• In the European Economic Area, the UK and Switzerland it stays off until you press “Allow”. Until then no analytics cookie is set, and at most Google receives a cookieless signal that a page was viewed, with no ID that could recognise you.
• Global Privacy Control: if your browser sends it, analytics is off and no analytics cookie is set.

Change your choice at any time with “Cookie settings” at the foot of every page. Choosing “No thanks” also deletes the analytics cookies already set. Your choice is remembered in your browser (local storage) so we don't ask again.

A security cookie from our host

Hostinger's content delivery network (hCDN) sits in front of this site and may show some visitors a quick browser check. When it does, it can set a short-lived security cookie so you aren't checked again on every page. It exists to keep bots out; it's not used for analytics or advertising, and we don't read it. Blocking it may stop the site loading.

What the site keeps in your browser

• Your cookie choice (local storage): whether you allowed analytics, once you choose.
• Your motion setting (local storage): if you pause the site's animations, your browser remembers it on your next visit. Nothing is stored unless you use the switch.
• The chat (session storage): your conversation ID and the messages on screen, so the chat continues as you move between pages. Cleared when you close the tab or press “New chat”.
• Chat reminders (session storage): whether you've closed the chat tab on the side of the page, and whether the assistant's pop-up hint has already appeared, so neither shows again in that visit.

None of this is sent to us or anyone else, except the conversation ID that travels with each chat message. Our private admin area uses one sign-in cookie, only for our own team.

We honor Global Privacy Control as a request to turn analytics off. Browsers no longer send Do Not Track widely and it has no agreed meaning, so we rely on Global Privacy Control and your choice in “Cookie settings” instead.

A clean-up runs on our server every day and deletes each record once its time is up.

A chat in progress · 2 hours

Kept on our server so the assistant can follow the conversation, then deleted two hours after your last message.

Chat transcripts · 30 days

Kept so we can check the assistant's answers, then deleted. Card numbers and Social Security numbers written in their usual formats are masked before a transcript is saved.

Spam and abuse limits · 30 days

A scrambled (hashed) version of your IP address and the times of your recent messages, deleted once it has gone 30 days without use.

Chat budget log · 12 months

The time, conversation ID, size and cost of each chat request, never what was said. Kept in monthly files; a month is deleted once all of it is more than 12 months old.

Admin sign-in log · 12 months

The IP address and time of each attempt to sign in to our private admin area, and what our team did there. Deleted the same way as the budget log.

Website usage statistics · 14 months

Held by Google Analytics, not on our server: pages viewed and the actions listed under “What we collect”, tied to a random ID in the analytics cookie, never your name or email. Google deletes it automatically after 14 months.

Enquiries and follow-up requests · 24 months

What you sent through the contact form, the free AI site check or the chat, with the IP address and page it came from. Deleted from our server 24 months after you sent it, and from our inbox on the same schedule.

We keep something longer only if you ask us to (for example, once you become a client) or if the law requires it. Records about paid projects are kept under the client agreement.

• Our pages and forms use HTTPS, which encrypts what you send on its way to us.
• Enquiries and chat records are stored outside the public website, in folders only our server account can open.
• Our AI and email keys stay on our server. Apart from Google Analytics when it's on, your browser only talks to our own server.
• Our admin area is password-protected, limits sign-in attempts and signs out after a period without use.

No website is perfectly secure. If a breach ever affects your information, we'll tell you and the authorities as the law requires.

Wherever you live, you can ask us to:

• tell you what we hold about you and send you a copy
• correct anything that's wrong
• delete it
• stop using it for anything other than replying to you

Email contact@rankharvor.com from the address you used with us, or tell us that address and we'll write to it to confirm the request is yours. We reply within one business day to say we have it, and complete it within 30 days. It's free, and asking won't change how we treat you.

Our forms and chat are optional; you can always call (323) 503-4171 or email contact@rankharvor.com instead. To clear the chat from your browser, press “New chat” or close the tab.

California law (the CCPA, as amended by the CPRA) gives California residents specific privacy rights. Whether or not it applies to a business our size, we follow it.

• What we collect: identifiers (name, email, phone, IP address, the analytics cookie ID), what you tell us about your business and project, chat messages, and how you use this site (analytics). The sources, purposes and retention periods are described above.
• Who receives it: the service providers listed under Who handles it, only to provide their service to us.
• Selling and sharing: in the last 12 months we have not sold personal information or shared it for cross-context behavioral advertising, including that of anyone under 16. Google Analytics works for us as a service provider with its advertising features off. You can still turn it off with “Cookie settings” or Global Privacy Control.
• Sensitive information: we don't ask for it and don't use it to infer anything about you.
• Your rights: to know, access, correct and delete your information, to limit its use, and not to be treated differently for asking. An authorized agent can ask for you with your signed permission. Use the steps under Your rights and choices.

Several states, including Virginia, Colorado, Connecticut, Utah, Texas and Oregon, have their own privacy laws. We give the same rights to everyone, so you can use the steps under Your rights and choices wherever you live. If we turn down a request, reply to our answer and we'll review it again; if you still disagree, you can contact your state attorney general.

We work with US businesses, but anyone can visit the site. If you're in the European Union or the United Kingdom, RankHarvor is the controller of your information, and:

• We rely on our legitimate interest in answering enquiries, running the chat assistant and keeping the site safe; on steps you asked for before a contract when you request an estimate or site check; on your consent when the assistant sends your details to our team; and on your consent for analytics, which stays off until you press “Allow” and can be withdrawn with “Cookie settings”.
• Your information is stored and handled in the USA, and some providers may handle it elsewhere, under their own safeguards.
• You have the rights under the GDPR and UK GDPR to access, correct, delete, restrict, object to and move your information, and to withdraw consent. Use the steps under Your rights and choices.
• You can complain to your local data protection authority (in the UK, the ICO), though we'd like the chance to put things right first.

This site is for businesses and isn't aimed at children. We don't knowingly collect information from anyone under 13, or from anyone under 16 in the EU or UK. If you think a child has sent us something, email contact@rankharvor.com and we'll delete it.

Our pages link to other sites, such as our Google reviews, our Facebook, Instagram and LinkedIn pages and the sources behind our research. Those sites have their own privacy policies.

Booking a call uses Google Calendar: the “Book a call” links open Google's booking page in a new tab, and what you enter there is handled by Google under its own privacy policy, then lands on our calendar with a Google Meet link. Google's booking page isn't loaded on our pages until you follow that link.

If we change how we handle your information, we'll update this page and its effective date. If a change means using information you already gave us in a new way, we'll ask you first.

RankHarvor, run by Abu Mohammad Fazlay Rabby, Florida, USA. Email contact@rankharvor.com or call (323) 503-4171. For the terms that apply when you use the site, see our terms of use.