Privacy Policy

Effective November 9, 2026. Last updated November 10, 2026.

Who we are

Aero Rankings (aerorankings.com) is operated by Aero Rankings ("Aero Rankings", "we", "us"). We provide search, AI-visibility, advertising and marketing services to businesses. This policy covers our website, our dashboard and client portal, our emails, and the script our clients install on their own websites.

Our services are offered to businesses, and this policy is written mainly for the people who work at those businesses and for visitors to our site. It isn't a contract and doesn't create rights beyond those the law gives you.

What we collect

Information you give us

• Inquiry and contact forms: your name, business name, email, phone number, city, industry, website, the details you choose to share about your business (such as revenue range and goals) and your message. When you tell us your contact preferences, we record what you agreed to (email and/or text), the wording you saw, when, and the IP address it came from, so we can prove your consent.
• Free AI-visibility check: your business name, website, the question checked, and the results we generate. Each result is saved at a private link that expires.
• Website chat: what you type, our AI or staff replies, and your name and email if you give them.
• Accounts: name, email and password. We store passwords only as a salted scrypt hash, never in readable form.
• Clients: business details, logins and permissions you connect (such as a Google Business Profile, ad account or social account), content, photos and instructions, and billing details. Card and bank details are entered with our payment providers, not with us.

Information we gather ourselves

• Our own site: the page path and referring page of visits.
• Meta Pixel: our public pages (not the dashboard, client panel or portal) load Meta's pixel. It tells Meta when you view a page, when you send us an inquiry or contact form, and when you start a subscription, so we can measure and target our Facebook and Instagram ads. Meta receives your IP address, browser details and the page address, and may link them to your Meta account under Meta's privacy policy. We don't send Meta the contents of the forms you fill in. If your browser sends a Global Privacy Control signal, the pixel doesn't load.
• Server and security data: IP addresses and request details, used for rate limiting, preventing abuse and keeping the service running.
• Public business information: to find businesses that may want our services, and to analyze our clients' markets, we collect information businesses publish about themselves, such as business name, website, city, phone number, published email addresses and social profiles, and their public Google listings and reviews. Where Google's terms require it, the only Google data we store is the place ID; everything else is fetched fresh when shown.

Data we handle for our clients

Some of our tools run for our clients, on their behalf, using data about their customers and website visitors. That includes:

• The site script (agent.js) a client installs on their website. It records page views, link clicks and the referring page. It also captures the name, email, company and message from forms that contain an email field, unless the client marks a form to be ignored. It keeps which page version a visitor saw in that visitor's browser storage, so they see the same version next time.
• Review requests, email campaigns, loyalty programs, QR codes and online ordering that a client runs through us. These use the customer details the client provides or that customers enter (such as name, email, phone and order details), along with the consent the customer gave.

For this data the client decides what is collected and why, and we process it on their instructions. Each client is responsible for having a lawful basis to collect it and for giving their own visitors and customers a privacy notice that covers our tools. If you're a customer of one of our clients, please contact that business first. We'll help them answer your request.

How we use information

• To provide, run and improve our services, including the AI features, reports and dashboards.
• To answer inquiries, set up accounts, take payment and support clients.
• To contact businesses about our services by email, with an unsubscribe link in every message.
• To measure what works on our site and on our clients' sites.
• To protect the service: preventing fraud, abuse and security problems, and enforcing our Terms of Service.
• To meet legal obligations and to establish, exercise or defend legal claims.

We do not sell personal information. The Meta Pixel on our public pages shares visit information with Meta for advertising, which some state privacy laws call "sharing" for cross-context behavioral advertising. To opt out, turn on Global Privacy Control in your browser (we honor it automatically), or email us and we'll tell you how to block it.

Who we share it with

We share information only as needed to run the service, with providers that process it for us under their own terms and security practices:

• AI providers (Anthropic, Groq and OpenRouter) to generate text, analyze websites and answer chat. Text sent to them may include what you wrote and business information.
• Google (Places, Maps, Business Profile and Ads APIs), when a client connects an account or a feature looks up a business.
• Meta (Facebook and Instagram), when a client connects a social account for posting.
• Search and map services (Brave Search and OpenStreetMap Nominatim) to find business websites and locations.
• Payment processors (PayPal and Stripe) for subscriptions and client orders.
• Our email delivery provider and our hosting provider, which carry our emails and run our servers.

We may also disclose information when the law requires it, to protect our rights, users or the public, or as part of a merger, sale or transfer of our business. We aren't responsible for how independent third parties (including Google, Meta, PayPal and Stripe) handle information under their own privacy policies once you or a client share it with them directly.

Cookies and browser storage

• auburn_sid: a sign-in cookie set only when you log in. It's HttpOnly, lasts up to 30 days and is cleared when you log out.
• ar-theme: remembers whether you chose light or dark mode.
• ar_chat: lets the website chat pick up your conversation where you left off.
• Ordering pages remember your cart. On client sites, the site script remembers which page version you were shown.

These are all needed for the feature they serve. You can clear them in your browser settings, but sign-in, chat history and saved carts will stop working until they're set again.

On our public pages the Meta Pixel also sets _fbp (and _fbc when you arrive from a Meta ad), which Meta uses to measure ads. These aren't needed for the site to work, and clearing or blocking them changes nothing for you here.

Emails and opting out

Every marketing, outreach, review-request and campaign email we send includes an unsubscribe link. Using it adds your address to our do-not-email list, and we stop sending to it. You can also reply or email us to opt out. We still send messages you need about an account or service you have with us.

Where an inquiry form asks whether we may contact you by text message, we record your answer. We only text you if you agreed, and you can reply STOP to any text at any time.

How long we keep it

We keep information for as long as we need it for the purposes above: while you're a client or an active inquiry, and afterwards as long as needed for records, taxes, disputes and enforcing our agreements. Sign-in sessions end after 30 days. Free-check result links expire. Addresses on our do-not-email list are kept so we can keep honoring the request. When information is no longer needed, we delete it or make it anonymous.

Security

We use reasonable safeguards for the size and nature of our business. These include encrypted connections (HTTPS), hashed passwords, httpOnly sign-in cookies, role-based staff access, rate limits and regular backups. No system is completely secure, though, and we can't guarantee that information will never be accessed, disclosed or lost. If we learn of a breach that affects you, we'll notify you as the law requires.

Your choices and rights

You can ask us to show you, correct or delete the personal information we hold about you, or to stop contacting you. Email [email protected] from the address in question. We may need to verify who you are before acting, and we'll answer within the time the law allows (usually 30 to 45 days). We may keep information when the law requires or allows it, for example for billing records or a legal claim.

Depending on where you live (for example California, Colorado, Connecticut, Virginia and other U.S. states), you may have rights to know, access, correct, delete and port your information, to opt out of sale, sharing or targeted advertising (we don't do these), and not to be discriminated against for using these rights. You can use an authorized agent, and you can appeal a decision by replying to our answer.

If you're a customer or visitor of one of our clients, see Data we handle for our clients.

Children

Our services are for businesses and are not directed to children under 13 (or under 16 where the law sets that age). We don't knowingly collect their information. If you believe a child has given us information, contact us and we'll delete it.

Changes and contact

We may update this policy as our services change. We'll post the new version here with a new "last updated" date, and where the changes are material, we'll tell clients by email or in the dashboard. Continuing to use the service after an update means the updated policy applies.

Questions or requests: [email protected].

To the fullest extent permitted by law, our liability for any matter relating to this policy is limited as set out in our Terms of Service.