Rank-in-Maps

Privacy Policy

Last updated: November 3, 2026

This Privacy Policy explains how Rank-in-Maps (operated by CTB Digital Marketing Co., Ltd.) collects, uses, discloses, and protects your personal data when you use rank-in-maps.com and related services, including our dashboard, AI tools, and third-party integrations.

1. Data Controller

CTB Digital Marketing Co., Ltd.
Company registration: 0115568011922
981/175 Villaggio 3 Srinakarin-Bangna, Moo 9, Bang Kaeo, Bang Phli, Samut Prakan 10540, Thailand
General contact: info@ctbmarketing.com
Privacy contact: craig@ctbmarketing.com

2. Data We Collect

  • Account data: name, email, login/profile identifiers.
  • Business data: business name, location, categories, connected profile data.
  • Billing data: subscription and transaction records via Stripe (we do not store full card numbers).
  • Usage data: IP address, browser, device, visited pages, logs, and product events.
  • Support data: messages, emails, attachments, and related context you share with support.

3. Why We Process Data and Legal Bases

We process personal data under applicable legal bases (including Thailand PDPA and, where applicable, GDPR):

  • Contract: to create accounts, deliver services, and manage subscriptions.
  • Legitimate interests: security, fraud prevention, product analytics, and service improvement.
  • Consent: selected cookies and marketing communications where required.
  • Legal obligations: tax, accounting, and regulatory compliance.

Product statistics

To improve Rank-in-Maps, we count accounts in anonymous weekly statistics: how many accounts use the service and how many finished setup in the last 30 days. Only setup completed on or after 3 November 2026 is counted. We store broad ranges only, and only for groups of at least 10 accounts.

We do this on the basis of our legitimate interest in improving the service. Every account is included by default. You can opt out at any time, and opting out does not change anything else about your account or the service.

We exclude business names, addresses, URLs, reviews, conversations, website text, Drive and Second Brain content, Google content and data derived from it. These statistics are never used to train AI models on your content.

To opt out, turn on “Don't include my account” in Settings → Privacy. Your account is left out of every calculation after that. You can turn it off again at any time; activity from while you were opted out is not added back.

We keep the anonymous weekly statistics for product improvement, without account identifiers, business identifiers or customer content. If you opt out, we keep that choice until you change it or delete your account. Service records follow the retention rules in the Privacy Policy.

Opting out or deleting your account stops future inclusion. Statistics saved earlier contain no account links and remain.

For access, correction, export or deletion requests, contact craig@ctbmarketing.com. We do not sell your personal data.

Product statistics

4. Data Sharing

We may share data with service providers necessary to operate the service, such as:

  • Stripe (payments and billing).
  • WorkOS (authentication and account identity services).
  • Convex and cloud infrastructure providers we use.
  • Email, analytics, and support tooling providers.

We do not sell your personal data.

5. International Transfers

Your data may be stored or processed outside Thailand. We use appropriate safeguards such as data processing agreements and industry-standard security controls.

6. Retention

We keep data only as long as needed for service delivery, legal compliance, and dispute resolution. We delete or anonymize data when no longer required.

7. Your Rights

Depending on applicable law, you may have rights to access, correct, delete, restrict, object, and request portability of your personal data. Contact us using the addresses above.

8. Cookies and Tracking

We use cookies and similar technologies for authentication, service functionality, analytics, and experience improvements. You can manage cookie settings through your browser controls.

To understand how people find us, we keep a first-party cookie (rim_vid, 90 days) with a random visitor id. With it we record the website that sent you, any campaign tags in the link, which pages you view and the steps of signing up. When you sign in we link that record to your account. We do not store your IP address. In the EU/EEA, UK, Switzerland and Thailand we do this, and load Google Analytics storage, only if you accept the cookie banner. We do not track browsers that send Global Privacy Control or Do Not Track. Records are deleted after 180 days, or with your account.

9. Security

We implement reasonable technical and organizational measures, including HTTPS, access controls, and periodic monitoring. No method of transmission or storage is 100% secure.

Recoverable credentials use application-level AES-256-GCM sealing when configured. This panel shows stored envelope metadata only. It does not verify that a credential is usable or a key is available.

Rank-in-Maps can read business data and recover credentials when needed to deliver the service. This is not end-to-end encryption or zero knowledge.

Credential protection · Inspect the sealing code · Inspect verification tests

10. Changes to This Policy

We may update this policy from time to time. If changes are material, we will provide notice via the website or other appropriate channels.

Please also review our Terms of Service.