GDPR Compliance.
Data Subject Authority.

Under GDPR, roles are clearly defined. FixRank acts as the Data Controller for organization profiles, workspace configurations, and billing details. FixRank acts as the Data Processor for all technical crawl assets, HTML templates, meta diagnostics, and ranking signals parsed from your registered websites.

We process personal and technical signals under the following explicit GDPR legal bases: Contractual Necessity (Art. 6(1)(b)) to perform crawling and render staging codes, Legitimate Interests (Art. 6(1)(f)) to secure our global Edge clusters and prevent denial-of-service crawling loops, and Consent (Art. 6(1)(a)) for account notifications and browser preferences.

We obtain clear, unambiguous consent before establishing synchronizations with third-party tools like Google Search Console or GA4. You hold complete authority to instantly revoke this access at any moment via your workspace dashboard, which completely purges OAuth tokens.

FixRank aligns all technical operations with the UK Data Protection Act 2018. We systematically assess telemetry pipelines to guarantee they are isolated, restricted, and encrypted by default.

We gather only the minimum data required to parse page canonicals, meta elements, and organic visibility indicators. We do not index or store unrelated personal content.

Data processing is executed strictly to calculate organic visibility metrics, recommend HTML metadata patches, simulate crawlers, validate staging changes, and enforce enterprise network security.

We maintain internal security guidelines covering patch deployment SLAs, dual-engineer validation for CI/CD updates, periodic network scans, and immediate incident containment workflows.

Our system is hosted across highly protected Amazon Web Services (AWS) data centers located within the EU (Dublin, Ireland) and the United Kingdom (London). Backups are fully encrypted using KMS systems, and environments maintain isolation at all runtime boundaries.

Key technical safeguards include: End-to-end HTTPS TLS 1.3 encryption in transit, strict RBAC, automated network anomaly detection, and continuous isolation of temporary crawl storage nodes.

Staged SEO templates and temporary crawler logs are automatically deleted on a rolling 7-to-30-day schedule. Account profiles are kept while active, and legal tax receipts are stored in accordance with statutory guidelines.

FixRank never sells site data or templates. Technical metrics are processed only by trusted, GDPR-compliant subprocessors (Edge hosting, transactional mail) who are contractually bound to the same strict data isolation guidelines.

In compliance with GDPR Article 32, we employ robust administrative and technical controls to guarantee operational security. This includes mandatory multi-factor authentication, routine code audits, and isolated staging testing frameworks.

EU and UK residents possess statutory rights over their data. These include the right to access records, correct errors, request permanent deletion ('right to be forgotten'), restrict signal processing, and receive portable data bundles.

A complete technical diagram detailing our encryption boundaries, Cloudflare Edge caches, AWS database layers, and third-party subprocessor flow is available for review by enterprise security teams.

For compliance validation, standard contractual clauses (SCCs), or corporate agreements, reach out to our team at FixRank, Inc. (10x Galaxy Ltd). Email: hello@fixrank.ai or privacy@fixrank.ai.

FixRank is dedicated to ensuring WCAG 2.1 Level AA accessibility compliance across our dashboard interfaces. We continuously test keyboard navigation and contrast ratios to ensure maximum usability.

FixRank has designated a specialized internal Data Protection Officer to supervise all compliance, DPA reviews, and rights requests. You can contact them directly: dpo@fixrank.ai.

We may adjust this GDPR Compliance Statement to reflect regulatory modifications or hosting updates. The updated versions will always be posted here with revised timestamps.

By creating a workspace, binding your site, or utilizing our autonomous SEO crawlers, you acknowledge that you have reviewed and consented to the data processing terms outlined in this compliance statement.