Legal

Privacy Policy

Last updated: 17 October 2026

1. Who we are

Innovate Rank Limited ("InnovateRank", "we", "us"), company number 16758436, registered office 288 Essex Road, London, N1 3AR, England, is the data controller for personal data processed through the InnovateRank platform at app.innovaterank.com.

Contact us about this policy at hello@innovaterank.com.

2. What we collect

  • Account data - your email address, name (if provided), password (stored as a one-way hash, never in plain text), profile avatar if you upload one, and your verification status.
  • Usage and security data - IP address and browser/device information recorded against your sessions, used for rate limiting and account security.
  • Build data - the prompts and instructions you submit to build a project, the model you chose, the generated project's metadata (for example its preview address and cost), and your credit transaction history.
  • Connected-service data - if you choose to connect a third-party hosting account (for example Vercel) to publish a build, the access token you provide for that account.
  • Billing data - when payment is enabled, our payment processor handles your card details directly; we hold only the billing records needed to run your credit ledger, not your full card number.

We do not collect special category data (health, religion and similar) and ask that you do not include it, or anyone else's personal data, in a prompt.

3. How we use it

  • to create and secure your account, including email verification and password reset;
  • to operate the build pipeline - running your prompts through the AI model you choose, metering credits, and showing you build history;
  • to protect the Service against abuse, including rate limiting signup, login and build requests by IP address and account;
  • to send you service emails (verification, password reset, build and billing notifications) and, if you connect it, to publish your build through your chosen hosting account;
  • to improve the product and investigate bugs or incidents.

We do not use your prompts or generated code to train our own models, and we do not sell your personal data.

4. Who we share it with

To provide the Service we share limited data with:

  • the AI model provider you choose for a given build (xAI, Anthropic or DeepSeek), which receives your prompt and project context to generate the output;
  • Resend, to deliver verification, password reset and notification emails;
  • our payment processor, once billing is enabled, to process payments;
  • your own connected hosting provider (for example Vercel), only if and when you choose to connect it, and only to publish the build you ask us to publish;
  • our infrastructure and hosting providers, who run the servers the Service operates on.

We do not share your data with anyone else for their own marketing purposes.

5. Cookies and similar technology

The Service currently uses only the cookies needed to keep you signed in and remember your session; we do not run analytics, advertising or tracking cookies at this time. If that changes, we will update this policy and ask for consent where the law requires it.

6. Where your data is processed

Some of the providers in section 4 are based outside the UK/EEA, including in the United States. Where that applies, we rely on the safeguards available under UK data protection law, such as the providers' own standard contractual clauses, to protect your data when it is transferred.

7. How long we keep it

We keep your account and build history for as long as your account is active, so you can see your past projects and credit history. If you ask us to delete your account, we will delete or anonymise your personal data within a reasonable period, except where we need to keep limited records (for example billing records) to meet legal obligations.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent where processing relies on it. To exercise any of these, including closing your account, email hello@innovaterank.com.

If you are in the UK or EEA and are not satisfied with our response, you can complain to the Information Commissioner's Office (ico.org.uk) or your local data protection authority.

9. Security

We apply reasonable technical and organisational measures to protect your data, including password hashing, encryption at rest for connected-service credentials (for example a Vercel token), and per-project sandbox isolation. No platform can guarantee perfect security, and InnovateRank is an early-stage product that is still being hardened; please use a unique password and avoid putting highly sensitive personal data into prompts.

10. Children

The Service is not directed at children, and you must be at least 18, or the age of legal majority where you live, to create an account.

11. Changes to this policy

We may update this policy as the Service changes. We will post the new version here with an updated "Last updated" date, and tell you in-app or by email if a change is material.

12. Contact

Questions or requests about your personal data: hello@innovaterank.com, or by post to Innovate Rank Limited, 288 Essex Road, London, N1 3AR, England.