Privacy Policy

This policy covers the Rankless Account Portal — your personal sign-in, your company roster, and your affiliate earnings/content, if applicable. It does not cover any individual company workspace you open from your roster; each of those has its own privacy policy.

Account information — your name, email address, and a securely hashed password. We never store your password in plain text.

Company access — which company workspaces you’re authorized to open, so your roster can show them to you.

Usage and security data — IP address and request timestamps for sign-ins, used to secure your account (rate limiting, detecting repeated failed logins).

When you open a company from your roster, this account issues a short-lived, single- purpose signed token proving who you are to that specific company’s own, separately operated workspace. That workspace independently verifies you already have an account there before letting you in — this account cannot create access on its own. We do not share your password with that workspace, and we do not read that workspace’s data.

We keep your account data for as long as your account is active. If you’d like your data deleted, contact us and we’ll remove it, other than what we’re required to keep for legal or accounting reasons.

Passwords are hashed, never stored in plain text. Sessions and handoff tokens are signed and expire. Sensitive endpoints are rate-limited against abuse. Traffic to this account is encrypted in transit (HTTPS).

If this policy changes in a way that matters to how your data is handled, we’ll update the effective date above.

Questions about this policy: contact your Rankless representative.