Schedule a Meeting Add to WordPress
Legal

Privacy Policy

Last updated: October 20, 2026

ThinkRank is an AI-powered SEO plugin for WordPress, built by WPDeveloper (a Startise brand). This policy explains what data we handle in two places: this website (thinkrank.ai), and the ThinkRank plugin, including what happens when you connect your Google account or an AI provider to the plugin.

The short version

  • The plugin stores its settings, API keys, and your SEO data in your own WordPress database. We do not receive them.
  • When you connect Google, ThinkRank reads your data with read-only access and shows it to you inside your own WordPress dashboard. Your analytics data is not sent to our servers.
  • All Google user data is encrypted in transit, kept to the minimum scopes needed, and deletable by you at any time. See How we protect Google user data.
  • We do not sell your data, and we do not use your Google data for advertising.
  • Usage tracking in the plugin is opt-in and off by default.

1. This website

Analytics

We use Google Analytics 4 to understand how the site is used. Analytics runs behind Consent Mode with consent denied by default: no analytics cookies are set unless you accept them in the consent banner. Your choice is stored in your browser and you can change it at any time by clearing site data.

Forms and email

If you submit a form (for example a newsletter signup or a demo request), we receive the details you enter and use them to respond and, with your consent, to send updates. Every email includes an unsubscribe link. Newsletter signups are processed through Brevo, our email service provider.

Your ThinkRank Hub account in the header

If you're signed in to ThinkRank Hub, this site's header shows your account: your browser asks the Hub who you are, using your Hub sign-in, and this site keeps nothing about it. Your picture comes from Gravatar, the picture service WordPress uses. Your browser asks Gravatar for it by a hash of your email address, without saying which page asked. Without a Gravatar picture, your initials show instead.

Signing in to ThinkRank Hub with Google

ThinkRank Hub can offer Continue with Google on its sign-in page. If you choose it, Google tells the Hub your email address and that Google has verified it, and nothing else: the Hub asks only for the openid and email scopes, keeps no Google token, and uses the address to sign you in or create your Hub account, as an emailed sign-in link would. It never connects your Google account to your sites' Search Console or Analytics; that stays in the plugin, on each site.

Local storage

The site stores small preferences in your browser (your theme choice and your consent decision). While you're signed in to the Hub, that browser tab also keeps your name, workspace and picture until it closes or you sign out, so the header doesn't flicker from page to page. These are not tracking cookies and never leave your device.

2. The ThinkRank plugin

ThinkRank is installed on your own WordPress site. Your settings, your AI provider API keys, and the SEO data it generates are stored in your site's database, under your control. Beyond the third-party services you actively enable (listed below), the plugin does not send your data anywhere. By default, uninstalling preserves your data; you can choose to delete everything in Settings → Data Management.

3. Google user data

ThinkRank can connect to Google so you can see your own site's performance inside WordPress. This section describes that integration in full.

What we access

  • Google Analytics (read-only): traffic metrics for the GA4 property you select, such as sessions, pageviews, traffic channels, and top content.
  • Google Search Console: clicks, impressions, average position, queries, and index status for your verified property.
  • Google PageSpeed Insights: performance and Core Web Vitals results for your pages.

Scopes we request

Access is granted by you through Google's OAuth consent screen. ThinkRank requests read-only scopes only, and never requests write access:

  • https://www.googleapis.com/auth/analytics.readonly — a sensitive scope. It lets ThinkRank read the GA4 property you select so it can show your traffic metrics inside your own WordPress dashboard. It grants no ability to change your Analytics configuration or data.
  • Read-only Search Console access, used to show clicks, impressions, average position and index status for the property you select.

ThinkRank never modifies your Google Analytics or Search Console data, and requests no scope beyond what the feature you enabled needs.

How we use it

Your Google data is used for one purpose: showing you your own metrics and insights inside your WordPress dashboard, and powering the reporting features you choose to enable (for example scheduled email reports or the rank tracker). If you use an AI-powered insights feature, the relevant metrics are included in the prompt sent to the AI provider you configured with your own API key, only when you use that feature.

Where it is stored

Data fetched from Google is stored and cached on your own WordPress site. It is not transmitted to or stored on WPDeveloper's servers. One narrow exception keeps your connection alive: our token service (api.thinkrank.ai) receives your Google OAuth refresh token and OAuth client ID, solely to issue fresh access tokens on a schedule or just before expiry. The token service never receives your analytics, Search Console, or PageSpeed data.

Sharing

We do not sell Google user data, we do not share it with third parties, we do not use it for advertising, and no human at WPDeveloper reads it except with your explicit consent for support, for security investigation, or where the law requires.

How we protect Google user data

Google Analytics and Search Console data obtained through the scopes above is treated as sensitive. These are the mechanisms that protect it:

  • Encrypted in transit. Every request between your WordPress site, Google's APIs, and our token service is made over HTTPS with TLS. ThinkRank makes no unencrypted request carrying Google user data or OAuth credentials.
  • Stored on your own infrastructure, not ours. The metrics ThinkRank fetches are written and cached only in your own WordPress database, where they are protected by your hosting environment and by WordPress's own capability checks — only logged-in users you have granted the relevant ThinkRank capability can view them. This data is never transmitted to, stored on, or processed by WPDeveloper's servers.
  • Least privilege. ThinkRank requests read-only scopes only, and only for the property you explicitly select during setup. It cannot write to, delete from, or reconfigure your Google properties, and it does not read properties you did not connect.
  • Credential isolation. Our token service (api.thinkrank.ai) holds only your OAuth refresh token and OAuth client ID, and uses them for exactly one operation: exchanging them with Google for a short-lived access token. It is never used to read your Analytics, Search Console, or PageSpeed data, and it stores none of that data.
  • Restricted access. Google user data is not routinely accessible to WPDeveloper staff. It is read by a person only with your explicit consent for a support request, where necessary to investigate a security incident, or where the law requires it.
  • Deletion on revocation. Disconnecting Google in the plugin, or revoking ThinkRank from your Google Account permissions page, immediately stops all further data fetching. You can erase the cached Google data held on your site at any time through Settings → Data Management.

Limited Use disclosure

ThinkRank's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access

You can disconnect Google at any time from ThinkRank → Essential SEO → Integrations, or revoke ThinkRank's access from your Google Account permissions page. Revoking access stops all further data fetching immediately.

4. AI providers (your own key)

ThinkRank's AI features run on an API key you supply for OpenAI, Anthropic (Claude), Google Gemini, or OpenRouter. When you actively run an AI feature, the prompt, which can include your post content, titles, and keywords, is sent to the provider you configured. Requests are made only when you trigger a feature, and your key is stored in your own database. Your chosen provider's terms and privacy policy apply to that processing.

5. Other services the plugin can contact

  • IndexNow (api.indexnow.org): if you enable Instant Indexing, your site host, IndexNow key, and the affected URLs are submitted when you publish, update, or delete content.
  • Google and Bing sitemap ping: if sitemap pinging is enabled, your sitemap URL is sent so crawlers re-fetch it.
  • Usage tracking (send.wpinsight.com): opt-in and off by default. Only if you agree during setup, non-sensitive diagnostics are sent: your site URL, WordPress and PHP versions, and active plugins and theme, plus your admin email only if you separately consent to updates. A one-time country lookup is made via ip-api.com at registration. You can turn this off at any time in ThinkRank's settings.

6. Data retention and deletion

Website analytics are retained per Google Analytics' standard retention controls. Form and newsletter data is kept until you unsubscribe or ask us to delete it. Plugin data lives on your own site: uninstalling preserves it by default, and Settings → Data Management lets you erase it completely.

7. Children

This website and the plugin are not directed at children under 16, and we do not knowingly collect their data.

8. Changes to this policy

We will post any changes on this page and update the date at the top. Material changes to how Google user data is handled will be highlighted here before they take effect.

9. Contact

ThinkRank is a product of WPDeveloper. For any privacy question or request, reach us through the WPDeveloper support desk. Our company-wide policy is at wpdeveloper.com/privacy-policy.