What we read, what we store, and how to take it back.

Google access

MonoRanks asks for two read-only scopes, each only when you connect that product:

• Search Console: webmasters.readonly, to read clicks, impressions, CTR and position by query and page.
• Google Analytics: analytics.readonly, to read sessions, key events and traffic sources for the property you choose.

Nothing is ever written to a Google product. You can revoke access from the Integrations screen in MonoRanks or from your Google account’s third-party access page; either ends it immediately, and the stored data is deleted when you remove the website.

The WordPress connector

The connector is a plugin that accepts signed requests from MonoRanks with a key you create in the app. It can write titles, meta descriptions, image alt text, canonical URLs, noindex, redirects, one marked opening paragraph, AI crawler rules in the virtual robots.txt, and an llms.txt file. It cannot create users, install plugins, read drafts or passwords, or change themes. Every write is logged in the app with who approved it and can be undone.

What we store

Crawled page HTML samples (up to 4,000 characters of text per page) for checks and drafts, audit results, keyword positions, Search Console and Analytics aggregates, AI answers sampled for AI mentions, and your workspace settings. Data lives in the EU. Backups are encrypted and kept for 30 days.

Accounts

Passwords are hashed; two-factor authentication is available for every account; sessions can be reviewed and ended from the profile. API keys are scoped to a workspace and can be rotated.

Removing data

Removing a website deletes its audits, pages, keywords and answers. Deleting a workspace deletes everything in it. Both are final after a short grace period, and both are available from the settings without contacting us.

Reporting a problem

Email hi@monoranks.com. We answer within two working days and credit reporters who wish it.