This policy explains what ZepRank collects, how connected Google and AI features use information, and how to contact us about your data.
Who operates ZepRank
ZepRank is operated by Super Marketing, Sanganer, Jaipur (Raj.) 302020. In this policy, “we”, “us” and “our” refer to Super Marketing. Contact support@zeprank.com for privacy questions, complaints or requests. Our business hours are 9 AM to 8:30 PM IST.
This policy covers our website, account workspace, Google Business Profile integrations and public customer review or feedback pages. A business using ZepRank also decides how it uses information from its customers and is responsible for its own notices and lawful use.
Information we collect
- Account and billing information: your name, email, mobile number, business name, password hash, subscription details, billing address or state and GST information if provided.
- Connected Google information: authorization tokens, business account and location identifiers, business profile details, review identifiers, reviewer display names, ratings, review text, timestamps and business replies made available through the permissions you grant.
- Workspace content: AI drafts, saved review pages, business descriptions, local SEO tasks, keywords, private feedback, feedback case notes and support conversations.
- Customer submissions: ratings, experience descriptions, review drafts and any name, contact details or private feedback a customer chooses to submit. A customer can post on Google only through their own Google account.
- Payment records: order and payment references, amounts, payment status and invoices. Checkout is handled by the payment provider; do not send card credentials, UPI PINs or bank passwords to our support team.
- Technical and security records: session identifiers, request information, activity events, errors and usage counters needed to operate the service, enforce limits and investigate misuse.
Why we use information
We use information to create and secure accounts, deliver the features you request, manage subscriptions and invoices, support you, prevent abuse, troubleshoot problems and meet applicable legal obligations. Business owners can view customer feedback submitted to their own review pages. We do not sell personal information or connected Google data.
Google account access & your control
Connecting Google is optional. The Google consent screen requests the Business Profile management permission, business.manage, so ZepRank can retrieve the profiles and reviews you are authorized to manage and publish business replies you submit. Where you explicitly enable template-based auto-replies, the app can publish eligible replies according to your saved settings.
Access and refresh tokens are stored using application-level encryption. Disconnecting Google in your workspace removes the saved connection tokens and stops local automation. Synced profiles, reviews and workspace records are separate from the connection and may remain until removed or covered by a deletion request. You can also revoke access in your Google account connections.
ZepRank’s use and transfer of information received from Google APIs is subject to the Google API Services User Data Policy, including its Limited Use requirements. Connected Google data is used to provide the user-facing features you request, not for advertising, selling profiles or training general-purpose AI models. Access by people is limited to authorized support with your permission, security and abuse investigations, legal requirements, or other access allowed by that policy.
AI processing & other service providers
When an AI feature is used, the relevant business context, rating, review or experience text is sent to the AI provider configured for that feature to generate the requested draft. Supported providers include OpenRouter, OpenAI, Anthropic, Google Gemini and Groq; availability depends on the administrator’s configuration. OpenRouter may route requests to the model provider selected in the app. You do not need to use every provider to use ZepRank.
AI outputs are saved or displayed as part of the requested workflow. Do not include sensitive personal information or secrets in prompts. Service providers process information under their own applicable terms, and processing may occur outside India. Contact us to ask which provider is currently used for a feature.
Hosting, database, email and payment providers may process information needed to run the service. Payments may be processed through Razorpay and its payment partners. We may disclose information where required by law or reasonably necessary to address fraud, security or legal claims. External services such as Google, WhatsApp and payment checkout pages have their own privacy policies.
Storage, retention & security
Account and workspace records are retained while needed to provide your account and requested services. Billing, tax, security and dispute records may be retained for the periods required by applicable law or a legitimate unresolved matter. There is no automatic promise that all account data is deleted merely because a subscription expires or you stop signing in.
We use access controls, password hashing and encrypted storage for Google connection tokens. No system can guarantee absolute security. Keep your sign-in details private and report suspected unauthorized access promptly. Deletion from active systems does not necessarily remove a record immediately from backups; residual copies may remain until the relevant backup expires or is overwritten and should not be restored for ordinary use.
Cookies & local storage
Essential cookies support sign-in sessions and request security. Browser storage may remember display preferences or cache static assets for the app’s offline screen. See our Cookie Policy for details and browser controls.
Your choices, requests & complaints
You can edit available account information, choose whether to connect Google, disable optional automation and contact us to request access, correction or deletion of information associated with you. We may need to verify account ownership and understand the records involved before acting. Applicable legal rights and exceptions depend on the laws and provisions in force when your request is handled.
For information submitted to a business’s review page, identify the business and page link; that business may also need to act on its own records. See our Data Deletion Policy for the request process. Revoking a Google connection does not delete a review already published on Google.
Children & changes to this policy
ZepRank accounts are intended for adults authorized to act for their business. The service is not directed to children. Contact us if you believe a child has submitted personal information that requires removal.
We may update this policy as the product or applicable requirements change. The date displayed on this page identifies the current version. Material new uses of connected Google information require appropriate notice and consent before they take effect.
Cookies & browser storage
This page explains the browser technologies used by ZepRank and the controls available to you.
What cookies & browser storage do
Cookies are small values a website asks your browser to store and send with later requests. Local storage and session storage keep values in your browser. Service-worker caches can retain files such as images, styles and the offline screen. These technologies serve different purposes and are not all advertising trackers.
Essential cookies
| Technology | Purpose | Typical duration |
|---|---|---|
| Application session cookie | Keeps your browser associated with its sign-in session and supports session-backed security and account flows. | According to the configured session lifetime; expiry and browser behavior can vary. |
| Request-security / CSRF cookie, where issued | Helps the application reject unauthorized form requests. | According to the relevant session or browser expiry. |
| Remember-me authentication, if selected | Allows the sign-in option you explicitly choose to persist beyond an ordinary session. | Until expiry, sign-out or removal in your browser, subject to the authentication flow. |
Cookie names may vary by installation and environment. Essential security and sign-in cookies are needed for the related features. Blocking them may prevent login, forms or checkout preparation from working correctly.
Preferences & cached files
Browser storage may retain preferences such as light or dark theme, a dismissed announcement or interface state. The app’s service worker may cache static assets and an offline information screen. It does not make the full workspace or live account data available offline.
Local preferences and caches can remain until you clear site data, the browser evicts them or a later app version replaces them. Clearing them can reset preferences and require assets to be downloaded again.
Analytics, advertising & external services
The standard ZepRank public page layout does not include an advertising pixel or an optional analytics tracker. If optional tracking is introduced, we will describe its purpose and provide any consent controls required before using it.
Connecting Google, opening a payment checkout, using WhatsApp or loading externally hosted resources may involve a separate service with its own cookies or browser technologies. The relevant provider’s privacy and cookie information applies to that service. Authorizing Google access is a separate choice from accepting website cookies.
How to manage your preferences
- Use your browser’s privacy settings to inspect, block or delete cookies for this site.
- Clear site data to remove local storage and cached files as well as cookies. You may be signed out and display preferences may reset.
- Use the app’s theme control to change the saved display preference.
- Manage Google permissions in your Google account and payment or WhatsApp preferences with those providers.
A browser “Do Not Track” setting does not replace account permissions or the choices described above. You can continue reading public information pages without creating a ZepRank account.
Questions & policy changes
For questions, contact Super Marketing at support@zeprank.com, Sanganer, Jaipur (Raj.) 302020. Business hours: 9 AM to 8:30 PM IST. Read our Privacy Policy for wider information handling. We update this policy when browser technologies or their purposes materially change.
Data deletion & account closure
Tell us which account or records are involved. We verify ownership, explain any required retention and confirm the action taken.
How to make a deletion request
Email support@zeprank.com with the subject “ZepRank data deletion request”, preferably from your registered email address. You can also open a signed-in support ticket. The request is handled by Super Marketing, Sanganer, Jaipur (Raj.) 302020, during 9 AM to 8:30 PM IST.
Include your registered email, business or review-page link if relevant, and whether you want to remove specific content, disconnect Google, close your account or request deletion of the account and associated records. Do not send your password, OTP, full payment credentials or Google tokens.
Verification & scope
We may ask you to confirm control of the account or provide enough information to identify the records. We use proportionate verification and do not need a password to process a request. If you act for a business or another person, we may need evidence that you are authorized.
If you submitted information through a business’s public review or feedback page, include that page’s URL and enough context to locate your submission. The business may hold its own copies and remains responsible for responding to requests concerning records it controls.
Information covered by account deletion
Depending on your request and applicable retention exceptions, removal can cover account profile information, saved Google connection tokens, synced business profiles and reviews, AI drafts, customer review-page settings, private feedback, local SEO tasks and associated workspace records. Deleting an account can make public customer links and related workflows unavailable.
Where a specific workspace offers a deletion control, read its confirmation carefully. For example, permanently deleting a customer review page also removes the saved business profile, associated private feedback and review-generation history for that page. Minimal daily usage totals may remain separately to prevent bypassing usage limits; deleting a page does not reset its already consumed quota.
Information that may need to be retained
We may retain invoices, tax and payment records, evidence needed for an unresolved refund or dispute, security or fraud records, and information that a valid legal obligation requires us to keep. We will explain relevant exceptions when responding rather than promising that every record can always be erased.
Copies may remain temporarily in backups until those backups expire or are overwritten. Retained copies should not be used to restore a closed account for ordinary business use, except where necessary for a legal or security requirement. De-identified aggregate statistics that no longer identify you may also remain.
Disconnecting Google is a separate action
Use Disconnect in the Business Profile workspace to remove saved access and refresh tokens and stop local automation. You can also revoke permissions through your Google account connections. Disconnecting does not automatically delete synced records or cancel a ZepRank subscription.
Deleting ZepRank data does not remove business profiles, customer reviews or replies already published on Google. Those records must be managed using Google’s controls and policies. We cannot erase independent records held by a business, bank, payment provider or AI provider through a ZepRank account deletion alone.
What happens after a request
- We identify the request and verify the authority needed to act.
- We clarify scope, any effect on access or public links, and applicable retention exceptions.
- We remove or restrict the relevant information in active systems as appropriate and confirm the outcome or explain why a particular record must be retained.
Requests are handled within the timelines required by the law applicable to the request. Complex requests may require clarification or additional verification. If you have not received a response, follow up in the same conversation using your original request details.
Subscriptions, refunds & further questions
Deletion is not a refund request and does not automatically stop a separate payment mandate. See our Cancellation Policy and Refund Policy. Our Privacy Policy explains the wider handling of personal information.
Optional website analytics and contact enquiries
When enabled by the administrator, our public marketing pages can use Google Analytics, Microsoft Clarity, Meta Pixel or Microsoft Advertising UET. These services help measure website usage and advertising. Optional tracking loads only after you choose “Allow analytics”; Global Privacy Control is respected. Use “Privacy preferences” on a tracked public page to change your choice.
ZepRank does not install these marketing tags in administrator, account, verification, billing or customer review screens. Clarity text is masked and its default form-input masking is retained. We do not configure advanced matching with your email or phone number. Your browser and the providers can still process technical information such as device data, page URLs and IP addresses when optional tracking is allowed.
A Contact Us submission stores your name, email, topic and message in a private administrator inbox so the team can respond. A notification can alert the team without including the message or your contact details. Contact us to request access, correction or deletion, subject to applicable retention obligations.
Contact the team if you have a question about how this policy applies to your account.
Contact us