Privacy
How we handle your data
This is the notice under articles 13 and 14 of the GDPR, written to be read: what we collect, why, who we share it with, how long we keep it and how you exercise your rights.
Data controller
Delion S.r.l.s., Via Fausto Coppi 72, 00142 Rome, Italy — tax code and VAT IT14456891002. For any request about your data: info@delion.it.
The website you are reading (rankgrove.app)
The pages of rankgrove.app work without profiling cookies and without tracking tools. The server records standard technical logs (IP address, date and time, page requested), kept for as long as security and maintenance require, on the basis of our legitimate interest in keeping the service running. Fonts are served from our own server: your browser contacts nobody else to get them. Details in the cookie page.
When we introduce traffic-measurement tools, this page will be updated first and, where required, we will ask for your consent with a banner.
The application (my.rankgrove.app): what data and why
| Data | Why we process it | Legal basis |
|---|---|---|
| Account: name, email, password (stored only as a hash), interface language, sign-in log. | Letting you in, recognising you, writing to you about the service (address confirmation, notices, deadlines). | Contract |
| Billing: company name, address, VAT number, e-invoicing code, and the invoices issued. | Issuing invoices and meeting tax obligations. | Contract and legal obligation |
| Payment: the payment method is collected and stored by Stripe; we only see outcome, amount, the last four digits and the expiry of the card. | Collecting the subscription and handling renewals and cancellations. | Contract |
| Projects: site address, business description, audience, tone of voice, categories, calendar, topics; the WordPress connection key (stored encrypted). | Building the editorial plan, writing and publishing the articles. | Contract |
| Content produced: articles, images, versions, approvals and deliveries. | Providing the service and showing you what went out, when and with what outcome. | Contract |
| Technical logs of the application and of deliveries. | Security, fault diagnosis, evidence of the operations performed. | Legitimate interest |
| Consents: acceptance of the terms, version, date, IP address. | Proving that the agreement was made, and with which text. | Legal obligation |
| Commercial emails: name, email address, how far you got in signing up, and whether you open our messages and their links. | Writing to you about RankGrove offers and news, and learning which messages are useful. Someone who signs up without finishing the trial receives up to three messages about the service, then we stop. | Consent, which you can withdraw with the link at the foot of every message |
No advertising profiling, no sale of data, no automated decision with legal effects on a person. Your content is not used to train artificial-intelligence models, neither by us nor by the providers that generate it.
Personal data inside your content
If personal data appears in your articles or brief (a quoted customer, a colleague), you are the controller of that processing and we act as processor on your behalf under article 28 of the GDPR, under the data processing agreement: we use it only to produce and publish your content. The plugin installed on your WordPress does not collect data about your visitors.
Who sees the data: providers and sub-processors
The service relies on providers chosen one by one. Each receives only what it needs.
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| Scaleway SAS | Servers, database, email sending | All application data | France (Paris) |
| Cloudflare Inc. | Storage of images and backups | Article images, encrypted database backups | EU, with standard contractual clauses |
| Anthropic, OpenAI, Google | Text and image generation | Project brief, topics, texts in progress. Never account or billing data. | United States, under the Data Privacy Framework or standard contractual clauses; no training on data sent through the API |
| Stripe Payments Europe | Payments and subscription portal | Billing details and payment method | Ireland |
| Fatture in Cloud (TeamSystem) | Electronic invoicing | Billing details | Italy |
| Klaviyo Inc. | Sending commercial emails and managing subscription preferences | Name, email address, how far you got in signing up, and whether you open our messages | United States, under the Data Privacy Framework and standard contractual clauses |
| Your WordPress | Where we publish | Your project’s articles and images | Wherever you host it |
Public authorities and advisers (accountant, lawyer) receive data only where the law requires it or to defend a right.
How long
- Account, projects and content: as long as the account is open, then 30 days to change your mind and download everything; after that, permanent deletion. Articles already published stay on your site.
- Invoices and tax data: ten years, as the law requires.
- Technical logs: 90 days.
- Images in transit to your site: 7 days after publication.
- Database backups: the last fifteen daily copies, then overwritten.
- Consent records: ten years from closure, to prove the agreement.
Your rights
Access, rectification, erasure, restriction, objection and portability (articles 15-22 of the GDPR). You download your data yourself, from your account, in readable files; you close the account yourself, from the same page. For everything else write to info@delion.it: we reply within 30 days. You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, or with the authority of your own country.
Security
Encrypted connections, passwords stored only as hashes, connection keys encrypted in the database, server access restricted and logged, encrypted backups kept with a provider other than the one hosting the database. Plugin updates install only when signed by us.
Changes
If we change anything material we tell you by email before it takes effect. Every version carries a number and date; previous ones are available on request.
This notice is written in Italian. This English version is a courtesy translation: in case of discrepancy the Italian text prevails.