Privacy Policy
This policy explains what AugmenTrait Pvt. Ltd. (“AugRank”, “we”) collects when you use AugRank, why we collect it, where it is stored, and what you can require us to do with it. It applies to augrank.com, app.augrank.com, and the AugRank API.
Two different roles
AugRank handles two kinds of personal data, and our legal role differs between them. The distinction matters because it determines who you contact about what.
- Your account data — your name, email, mobile number, company, billing details, and how you use the product. Here we are the Data Fiduciary, and this policy governs it.
- Data about the people you contact — the leads, prospects, and contacts you ask AugRank to find, store, and message. Here you are the Data Fiduciary and AugRank is your Data Processor. We process that data only on your instructions, and you are responsible for having a lawful basis to collect and contact those people.
What we collect
- Account and identity — name, email address, mobile number, password hash, and organisation details. If you sign in with Google, we receive your name, email address, and profile picture from Google.
- Configuration — the websites, keywords, competitors, brand voice, and sending identities you set up.
- Generated and collected content — articles, audits, outreach messages, reasoning trails, and the leads discovered on your behalf.
- Connected-service data — Search Console and Analytics metrics for properties you connect, and LinkedIn activity performed under your connected account.
- Billing — plan, invoices, and payment status. Card details go directly to Razorpay or Stripe; we never see or store your full card number.
- Operational — IP address, browser and device, request logs, and error reports, used to run and secure the service.
Credentials are held differently from everything else
The tokens and cookies you entrust to us — Google OAuth tokens, LinkedIn li_at session cookies, git deploy keys, and CMS publishing credentials — are third-party credentials held in trust. They are stored encrypted in AWS Systems Manager Parameter Store under a dedicated encryption key. They are never written to our database, never written to logs, never included in screenshots or error reports, and are never accessible to our staff in readable form.
Each background task that needs one is granted permission to read only your organisation's credentials, and only for the lifetime of that task.
Where it is stored
All customer data is stored in AWS Mumbai (ap-south-1), in India. Your business data lives in a database schema dedicated to your organisation, separate from every other customer's.
Some sub-processors listed below operate outside India, so limited data — for example, the text sent for AI content generation, or payment details for international cards — is transferred abroad for those specific purposes.
Why we use it
- To provide the service you have subscribed to, including running audits, generating content, and sending the outreach you configure.
- To authenticate you, secure your account, and detect abuse.
- To bill you and meet our accounting and tax obligations.
- To send service messages: verification codes, security alerts, run digests, and billing notices. These are part of the service and cannot be turned off, though you control the frequency of digests.
- To improve AugRank. We use aggregate usage patterns for this. We do not use your content, your leads, or your generated articles to train AI models, and our AI sub-processor is contractually barred from doing so with data we send.
How long we keep it
- Account data — for as long as your account is open.
- Business data (leads, content, audits, reasoning trails) — for as long as your account is open, or until you delete it.
- After you close your account — your dedicated schema and its contents are deleted within 30 days.
- Invoices and tax records — retained as long as Indian tax law requires, regardless of account closure.
- Operational logs — retained for up to 90 days, then deleted.
- Credentials — deleted immediately when you disconnect a service or close your account.
Who else sees it
We use the sub-processors listed on our sub-processors page. Each one receives only what it needs to perform its function. We do not sell personal data, and we do not share it for advertising.
We disclose data to authorities only where compelled by valid legal process, and we will notify you unless we are legally prohibited from doing so.
Your rights
Under India's Digital Personal Data Protection Act, 2023, you can ask for a copy of the data we hold about you, ask us to correct it, ask us to delete it, and withdraw consent. Our DPDP notice explains each right and how to exercise it. Export and deletion are self-service from Settings → Danger zone; otherwise write to privacy@augrank.com and we will respond within 72 hours.
Cookies and sessions
We set a single essential cookie holding an opaque session reference. It is required to keep you signed in, and logging out deletes the corresponding record on our servers immediately. We do not use advertising or cross-site tracking cookies. Our marketing site uses privacy-respecting analytics that do not profile individuals.
Security
Data is encrypted in transit and at rest. Access is least-privilege, credentials are isolated per organisation, and administrative access to customer accounts is time-boxed, requires a stated reason, and is recorded in an audit log visible to you.
If a breach affects your personal data, we will notify you and the Data Protection Board of India as the DPDP Act requires.
Children
AugRank is a business tool and is not offered to anyone under 18. We do not knowingly collect data from children.
Changes
We will post any change here and update the date above. If a change materially reduces your rights, we will email you at least 30 days before it takes effect.
Contact
Privacy questions and rights requests: privacy@augrank.com.
AugmenTrait Pvt. Ltd., Hyderabad, Telangana, India.
AugmenTrait Pvt. Ltd. · Hyderabad, Telangana, India
Questions about this document: legal@augrank.com