Privacy policy

Who is responsible.

PositionLoop is operated by 24 HOUR POSITIONING PTY LTD, NSW 2067, Australia. The company is responsible for the personal information described here. Contact hello@positionloop.com for a privacy question, complaint or rights request.

Information we process.

We process account names and email addresses; password hashes and authentication records; website domains; keywords and search country, language and device selections; ranking history and check status; messages you send us; and technical request information used for reliability and security.

Online withdrawal notices include your name, email, optional contract or receipt reference, notice text, receipt reference and submission time. We store these as private request records and attempt to send a confirmation to your supplied email and hello@positionloop.com.

For credit pack purchases, we also process pack and payment status, query-credit balances and usage records, receipt or transaction references and payment-provider identifiers. Payment providers process your payment details. We do not ask you to email card numbers or store a card security code.

Why we use it.

We use account and tracking information to provide the service you request, run scheduled checks, show history and send verification, password-reset and weekly-summary emails. Support messages let us resolve issues and refunds. Billing records support payment reconciliation and legal record keeping; security data helps prevent misuse.

Withdrawal records let us receive and handle cancellation, withdrawal and refund requests, confirm receipt and resolve related disputes or legal obligations.

Where GDPR or UK GDPR applies, these purposes rely on performing our contract, meeting legal obligations and our legitimate interests in running and protecting the service. Optional marketing or nonessential tracking would rely on consent where required. You can object to legitimate-interest processing where applicable and withdraw consent without affecting earlier lawful processing.

Service providers and sharing.

Our hosting and infrastructure suppliers process the information needed to operate the service. Hostinger handles service email delivery. Serper receives the keywords and search settings needed for ranking queries; the software evaluates the returned public results against your selected domain. Providers receive the information needed for their role, rather than a copy of your entire account.

Shopify hosts buy.positionloop.com, the shopping cart and checkout. Shopify and the payment methods displayed at checkout process payment and customer contact information and supply order, payment and refund status to us so we can deliver credits. We may disclose information where required by law, to protect legal rights or during a business transfer with appropriate safeguards. We do not sell personal information or share it for behavioural advertising.

International processing.

We operate from Australia and serve customers internationally. Hosting, email and search-data services may process information outside Australia, the EEA or the UK. We require appropriate data-protection terms and safeguards where the law requires them, such as approved contractual protections for restricted transfers. Contact us for information about the providers and transfer safeguards relevant to your account.

Retention.

Ranking history is kept for 90 days. Completed task and email-queue records are normally removed after seven days. Login sessions last up to seven days. Account information is kept while needed to provide the account; payment, security and dispute records may need to be retained longer for applicable legal obligations or the issue concerned.

Withdrawal notices are kept separately from the seven-day task and email queues. We retain them for handling the request and any necessary related legal obligations or disputes, and remove them when no longer needed following a retention review.

You can request account closure and deletion by email. We verify the requester, remove data that no longer needs to be retained and explain any lawful retention. Routine service backups rotate on a seven-day schedule; removed information may remain in protected backups until they expire and is not restored for ordinary use.

Your choices and rights.

You can export available ranking records from your workspace and contact us to request access, correction, deletion or account closure. Where applicable, you may also request portability or restriction, object to processing or withdraw consent. We respond within the time required by applicable law, normally one month for GDPR requests, and may verify your identity using proportionate information.

Providing an email address and account information is necessary to run an account; without it we cannot provide authentication and tracking access. We do not make decisions about you with legal or similarly significant effects using automated profiling. The service is intended for adults and is not directed to children.

Protection, complaints and changes.

We use access controls, hashed credentials, secure transport and account isolation to protect the service. No internet service can guarantee absolute security. Notify us promptly if you suspect unauthorised account access.

If our response does not resolve a privacy complaint, you may contact the Office of the Australian Information Commissioner or, where applicable, your local EEA supervisory authority or the UK Information Commissioner. This does not require you to give up another available remedy.

We update this policy when processing changes and notify account holders of material changes where required. Read the cookie policy for browser storage information.