1. Introduction
Digital Macaroni LLC, a Wyoming limited liability company doing business as RankLadder ("RankLadder," "we," "our," or "us"), owns and operates the RankLadder service and is located at 30 N Gould St Ste N, Sheridan, WY 82801. This policy explains our data governance framework.
Status: Data ControllerClients: The business owners using RankLadder. RankLadder is the Data Controller for your account data, billing information, and EIN.
Status: Data ProcessorCallers:The customers and callers who contact our Clients' businesses. RankLadder acts as a Data Processor acting strictly on Client instructions to answer calls, send text messages, and provide analytics.
1.5 European Economic Area (EEA) Users
For users in the EEA, we process personal data in accordance with the EU General Data Protection Regulation (GDPR). RankLadder acts as:
- Data Controller for your account information and usage data.
- Data Processor for caller and customer data processed through the Service on your instructions (you are the controller).
Lawful Basis: Contract performance (providing the Service), legitimate interests (security, analytics), and consent (where required). Your GDPR rights include access, rectification, erasure, restriction, portability, and objection. See Section 9 for exercise instructions.
1.6 California Residents (CCPA/CPRA)
For California residents, we comply with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
- We do not "sell" or "share" personal information as defined under CCPA/CPRA.
- Rights: Know what data we collect, delete it, correct it, and opt-out of profiling (if applicable). You can exercise your right to erasure by contacting us at hello@rankladder.app.
2. Information We Collect
| Category | Data Points | Legal Basis |
|---|---|---|
| Account | Name, Email, Business EIN | Contractual Necessity |
| Privacy Choices | Random consent ID, selected categories, policy versions, source page, and timestamps | Legal Obligation / Legitimate Interests |
| Call Data | Call recordings, transcripts, AI summaries, call metadata (duration, timestamp, caller number) | Consent / Legitimate Interest |
| Caller | Caller name, phone number, message content | Client Consent |
| Business Content | Knowledge base entries, website content you provide | Contractual Necessity |
| Usage | IP address, device and browser details, page views, interaction events, session data, logs | Legitimate Interests / Consent Where Required |
| Payment | Billing address, payment token | Legal Compliance |
Information You Provide to Us
- Account Information: Name, email address, password, business name, business address.
- Payment Information: Payments are handled by a third-party payment processor. We do not store your full card number.
- Business & Knowledge Base Content: Information you provide about your business, including hours, services, pricing, and knowledge base Q&As, used to train your AI's responses to callers.
- Caller Data: When a caller contacts your business, we process their phone number, the content of the call and any follow-up text messages, on your instructions as the business, you act as the data controller for this data and we act as the data processor.
Call Recording & Transcription
RankLadder answers calls using a real-time AI voice agent. Calls may be recorded and are transcribed and summarized by AI. Every call opens with a spoken disclosure that the call may be recorded and that the caller is speaking with an AI assistant, before any other conversation takes place. Recordings and transcripts are used to provide the Service to the business (call summaries, lead scoring, and knowledge base improvement) and are stored as described in Section 7 (Data Retention).
Information Collected Automatically
- Usage Data: IP address, browser type, operating system, device information, page views, interaction events, session data, and logs to help us understand website use, improve the service, and ensure security.
- Analytics: We use third-party analytics providers to measure website traffic and product interactions. One of these may provide session replay; all form input values are masked in our configuration.
- Cookies and Similar Storage: We use cookies and browser storage to maintain sessions and preferences and, where permitted, to measure website use. Where consent is required by law, we rely on consent before using non-essential storage.
3. Google API Services (Limited Use Disclosure)
RankLadder uses Google APIs to provide the Service. Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- AI Voice Processing: Calls are answered and processed by a third-party AI provider under contract with us, to understand callers, generate responses, and produce call summaries and transcripts.
- Calendar (optional): If you connect Google Calendar, we access your calendar availability and create bookings on your behalf, solely to provide the Service.
- How we use it: We use this data solely to provide the RankLadder service to you. We do not sell this data, and it is not used to train any provider's general-purpose AI models.
4. Data Usage
We utilize collected information to:
- Provide and maintain the Service.
- Authenticate your access.
- Answer, transcribe, and summarize calls, and score leads.
- Generate AI-driven call responses and knowledge base suggestions.
- Send transactional text messages you have requested or a caller has consented to.
- Comply with A2P 10DLC and toll-free verification regulations for SMS messaging.
Aggregated Data: We reserve the right to use de-identified, aggregated statistics based on platform trends for product improvement and industry reporting.
5. Text Messaging (SMS)
By providing your mobile phone number to RankLadder, you agree to receive text messages related to your requests, including replies, appointment reminders and confirmations, and, with your separate written consent, occasional review requests.
No third-party sharing: We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes.
Opt-out: Reply STOP to any message at any time to opt out of text messages. Reply HELP for help.
Message frequency & rates: Message frequency will vary. Message and data rates may apply. Contact your wireless carrier for details.
Opt-in data: All the categories in Section 2 exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
A2P 10DLC registration: We share your business information with The Campaign Registry and our telephony provider for the sole purpose of verifying your business identity and enabling you to send SMS messages in compliance with A2P 10DLC regulations.
For more information about our messaging practices, please see Sections 5 and 16 of our Terms of Service and our SMS Terms of Service.
6. Third-Party Infrastructure
We rely on a small number of industry-standard sub-processors, all located in the United States, to operate the Service. The categories of recipients are:
- AI and speech processing providers: Real-time AI voice processing, call transcription, and summarization.
- Telephony and messaging providers: Call routing, call forwarding, and SMS/MMS delivery.
- Cloud hosting, database, and authentication providers: Hosting for the website, dashboard, and API, and storage of account and conversation data.
- Payment processors: Subscription billing and payment handling.
- Transactional email providers: Account email and the daily digest.
- Analytics providers: Website and product analytics, including privacy-masked session replay when enabled.
Each sub-processor is bound by a written agreement limiting its use of personal data to providing services to us. A current list identifying our sub-processors by name is available on request at hello@rankladder.app.
Data Processing Agreement (DPA): By using RankLadder, you enter our standard DPA for processing caller and customer data through the Service. Available upon request at hello@rankladder.app.
International Transfers:Data is processed in the U.S. EU users' data is protected by Standard Contractual Clauses (SCCs) with our U.S. sub-processors to ensure GDPR compliance.
7. Data Retention
We retain personal data only for as long as necessary to provide the Service or comply with legal obligations. Privacy consent receipts are retained for up to five years. Financial transaction data is kept for 7 years per US tax regulations. If you delete your account, your data is purged from our active systems within 30 days. You can initiate a formal deletion request at any time by emailing hello@rankladder.app.
8. Security
We implement SOC 2 compliant data center practices, TLS 1.3 encryption for data in transit, and restricted role-based internal access to protect against unauthorized data exposure. While we strive to protect your data, no method of transmission over the Internet is 100% secure.
9. Your Rights
Depending on your location, you have specific rights regarding your personal data:
GDPR (EEA)
- Access your data
- Rectify inaccuracies
- Erasure ("Right to be forgotten")
- Restriction of processing
- Data portability
- Objection to processing
CCPA (California)
- Right to know what we collect
- Right to delete
- Right to correct
- Right to non-discrimination
- Right to limit sensitive data use
Response Time: We respond to all requests within 45 days. No fee applies unless requests are excessive. To exercise these rights, please contact our support team at hello@rankladder.app. Verification of identity/account ownership will be required.
10. Changes to This Policy
We may update this Privacy Policy when our practices, services, providers, or legal obligations change. The revised policy will be posted on this page with an updated “Last Updated” date.
When a change materially affects how we use personal information, we will provide reasonable advance notice through the Service, by email, or by another method reasonably designed to reach affected users before the change takes effect.
11. Children's Privacy
RankLadder is not intended for users under 18. We do not knowingly collect data from minors.
12. Contact Information
Digital Macaroni LLC
doing business as RankLadder
30 N Gould St Ste N
Sheridan, WY 82801
hello@rankladder.app
doing business as RankLadder
30 N Gould St Ste N
Sheridan, WY 82801
hello@rankladder.app