Privacy notice.
This notice covers the OpenRank Labs website and agency enquiries. Contact us through the contact page for privacy requests.
Enquiries
When submission is available, we collect your name, email, optional website and budget, service interest, short goal, notice version, and optional marketing choice. We store a reference and time. Limited source/medium/campaign labels may be recorded. Please avoid confidential or sensitive data. We use enquiry details to assess fit, respond, and manage the requested engagement. Marketing permission is separate and optional.
Storage and access
Enquiries are stored in the agency database before a received confirmation is shown. Access is limited to authenticated staff with membership in the agency workspace. Vercel hosts the application; Supabase supplies database/authentication when configured. An approved notification channel may receive enquiry details for agency handling. Notification failure does not delete a stored enquiry.
Abuse protection and browser storage
The form uses a signed short-lived spam-protection question, a hidden bot field, and server-side rate limits. Rate-limit identifiers are keyed hashes of connection/email values; raw IP addresses are not stored in the enquiry table. Browser session storage keeps an idempotency key and received reference/time so a reload does not repeat a submission. If you choose to carry a readiness brief into an enquiry, it also holds your qualification answers and optional website for that handoff. The brief is accepted for 30 minutes, removed after confirmed submission or an invalid/expired import, and otherwise remains until the browser session ends. It is not an agency receipt. Essential form cookies expire after one hour.
Readiness and downloads
Readiness answers and optional website context are processed in your browser; entering a URL does not fetch or scan it. The result matches your stated objectives, constraints, evidence, investment preference, and timing to existing agency scopes. If you choose to request an engagement, an editable qualification summary, service interest, media budget, and website are carried into the enquiry form. These details reach the agency only when you explicitly submit that enquiry with contact details and privacy acknowledgement. Downloads are initiated by you and remain on your device. Preparing or downloading a brief does not submit it. A submission failure retains the entered form values in the current page so you can retry; it does not establish that the agency received them.
Retention
The scheduled cleanup removes new and closed enquiries once they are older than 90 days, and rate-limit buckets after two days. Enquiries involved in active contact or qualification remain available for the ongoing engagement and should be reviewed by agency staff. Provider backups have their own retention controls. You can request access, correction, deletion, or withdrawal of marketing permission through contact.
Measurement
The site exposes event hooks for readiness starts/completions, sample views, service selection, and stored enquiries. Form contents, email, submitted website, and goal are excluded from event payloads. No external analytics collector is connected in this release. If one is enabled, the notice and applicable choice controls must be updated.
Your choices
Submitting an enquiry acknowledges this notice; it does not require marketing opt-in. We do not sell enquiry details. You can choose not to submit, use the self-assessment without an account, or download a brief locally. Contact us before sharing sensitive information or if you need another way to enquire.