Privacy Policy

Vantage is a search-optimisation platform that connects to your website and Google Search Console to improve your visibility in search engines and AI answer engines.

For the personal data of your own account (name, email, billing), we are the data controller. For the website content and search data we process on your behalf, we act as your data processor.

Account data: your name, business email and company name, plus the Stripe customer and subscription identifiers, plan, subscription status and billing-period dates needed to operate your account.

Free AI visibility checks: the website URL you submit, the resulting sampled audit, and your name and business email. We send the requested report to that email; marketing updates are sent only where you actively opt in.

Search data: metrics from your Google Search Console (queries, impressions, clicks, positions) — accessed read-only, with your explicit authorisation.

Website content: the pages, metadata, and structure of the site you connect, so our agents can propose and apply optimisations.

Usage data: how you interact with our dashboard, for product improvement and security.

We do not ask you to upload customer databases, CRM lists, order records or marketing email lists. Our integrations request least-privilege access scoped to search performance and site content.

Connected public pages or Search Console query strings can occasionally contain names or other incidental personal data. If present, we process it only to provide the service and protect the platform; we do not use it to build customer profiles or for advertising.

Vantage does not receive or store your full payment-card number or CVC. Those details are entered directly into Stripe-hosted Checkout and are handled by Stripe.

Stripe is our payment processor. Stripe-hosted Checkout collects and stores your payment-card and billing details so it can start a subscription, collect recurring payments, send receipts and prevent fraud. Stripe acts as an independent controller for parts of that processing under its own privacy policy.

Vantage stores the minimum references needed to provide and protect your subscription: Stripe customer and subscription IDs, your plan, subscription status and current billing-period end. Our server also records Stripe webhook event IDs and event types to prevent duplicate processing. These records are not card credentials.

Invoice and receipt information remains in Stripe. When you open Billing in the Vantage dashboard, our server retrieves the relevant invoice metadata from Stripe for display; it is not exposed to other customers.

You can update your payment method, view invoices or cancel through Dashboard → Billing → Manage billing. Card changes happen on Stripe-hosted pages, not inside Vantage.

When you connect Google Search Console, we request the read-only scope https://www.googleapis.com/auth/webmasters.readonly (plus your Google account email to identify the connection). We use this data solely to analyse your search performance, generate optimisation recommendations, and produce your reports inside Vantage. We cannot change anything in your Search Console.

Vantage’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular: we do not sell Google user data; we do not use it for advertising; we do not allow humans to read it except with your explicit consent, for security purposes, to comply with law, or as part of aggregated, anonymised internal operations; and we only transfer it to provide or improve user-facing features of Vantage.

You can disconnect Google Search Console at any time from your dashboard’s Connections page, or revoke Vantage’s access directly at myaccount.google.com/permissions. On disconnection we delete the stored authorisation tokens and stop collecting new Search Console data. Existing search history remains subject to the retention and deletion terms below.

To return the requested free AI visibility check and to improve the accuracy and security of that service. The public URL and a limited public-page excerpt may be sent to our answer-engine provider; your name and email are not.

To send occasional practical updates only when you have opted in; you can withdraw that consent at any time.

To analyse your search performance and generate optimisation recommendations.

To apply changes you approve to your website.

To provide reporting, support, and to operate and secure the service.

We do not sell your data, and we do not use your data to train third-party AI models.

Data is encrypted in transit (TLS) and at rest. Authorisation tokens are kept in an isolated server-only store that client sessions cannot read.

Access is governed by row-level security so each client can only ever access their own data.

We use vetted providers to run the service: Stripe for payments; Supabase for authentication, database and storage; Vercel for hosting; Resend for service email; Google for Search Console OAuth and data; MiniMax for optimisation recommendations; Perplexity and Serper for citation and search research; and Upstash for rate limiting. A current sub-processor list is available on request.

Only the data needed for a task is sent to each provider. For example, excerpts of search data and page content — not account passwords, payment-card details or billing credentials — are processed by AI and search providers. Where a provider is outside the UK, transfers use appropriate safeguards.

Authorised Vantage administrators can view customer account, connection, service and billing-status records in our internal CRM for support, security and service delivery. Full card numbers and CVCs are not available in that CRM.

Under UK GDPR you have the right to access, correct, export, or delete your personal data, and to withdraw consent at any time. You can revoke our access to your platforms in one click from your own platform settings.

To exercise any right, email privacy@vantagerank.co.uk and we will respond within 30 days.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk) if you believe we have mishandled your data.

We retain account and processing data while your account is active. After closure we delete or anonymise it under the applicable product, security, backup and processor schedules, except where a limited record is required by law, to resolve disputes or to honour an unsubscribe request. Contact privacy@vantagerank.co.uk for the current schedule or a deletion request.

Free AI visibility checks and related contact details are retained only while needed to provide the requested result and permitted follow-up, then deleted or anonymised under the applicable schedule. You can ask us to delete them sooner.