TrueRank

Privacy Policy

Effective date: July 4, 2026

1. Who We Are

Baxter Research Group ("Baxter Research Group," "we," "us," or "our") operates the TrueRank platform at truerank.brc.com. We are a market research organization committed to delivering high-quality research tools while respecting your privacy. This policy explains how we handle information when you use the TrueRank platform as an account holder, site visitor, or contact form submitter.

If you are participating in a TrueRank survey as a respondent, please refer to the privacy policy displayed within the survey — it covers the specific data practices that apply to survey participation.

2. Information We Collect

Account information — When you create an account, we collect your name, email address, company name, and job title. This information is used to manage your account and provide you access to the platform.
Payment information — If you subscribe to a paid plan, payment processing is handled by Stripe, Inc. We do not store your credit card number, expiration date, or CVV on our servers. Stripe processes your payment data in accordance with PCI DSS requirements. We retain only a transaction reference for billing and invoicing purposes.
Project and survey configuration data — When you create research projects, we store the project settings, survey configurations, items, categories, attributes, and related setup data you provide. This is the core content you build on the platform.
Aggregated research results — Survey responses collected through your projects are stored in anonymized, aggregate form. Individual respondent answers cannot be linked back to identifiable persons (see our survey privacy policy for details on respondent anonymization).
Usage and device information — We collect your IP address, browser type, and general usage patterns (pages visited, features used) to maintain security, diagnose technical issues, and improve the platform experience.
Contact form submissions — If you submit a contact or inquiry form, we collect the name, email, company, and message you provide in order to respond to your request.

3. How We Use Your Information

We use the information we collect to provide and maintain your TrueRank account and services, to process payments and manage subscriptions, to deliver research results and reports, to send transactional emails related to your account (such as password resets, project notifications, and survey campaign updates), to respond to your inquiries and support requests, to detect fraud and maintain the security of our platform, and to improve our services and develop new features.

We do not sell or share your personal information for monetary or other valuable consideration, as defined under the California Consumer Privacy Act (CCPA/CPRA), or under any other applicable law. We do not use your data for cross-context behavioral advertising, profiling, or automated decision-making.

4. Third-Party Service Providers

We use a limited number of third-party service providers to operate the platform. These providers act as data processors and are contractually obligated to use your data only as necessary to provide their services to us:

Stripe, Inc.— Payment processing. Stripe's privacy policy is available at stripe.com/privacy.
Twilio SendGrid — Transactional email delivery (account notifications, survey campaign emails). SendGrid processes email addresses and message content solely to deliver messages on our behalf.
Anthropic (Claude)— AI-assisted content features. When you use the platform's optional AI writing assistance (for example, to improve a project name, survey title, or question wording), the text you ask us to work on is sent to Anthropic's Claude API to generate a suggestion and returned to you. Anthropic acts as our subprocessor, processes the text only to return a result, and does not use it to train its models. We do not send survey respondents' individual answers to this service.

We do not use third-party analytics services, advertising networks, or social media trackers on the TrueRank platform.

5. Data Retention

Account information is retained for as long as your account is active. If you close your account, we will delete your personal information within 30 days, except where retention is required for legal, tax, or audit purposes. Project and survey configuration data is retained for as long as your account is active and your projects exist. Payment records are retained as required by applicable tax and financial regulations. Contact form submissions are retained for up to 12 months, then deleted.

6. Legal Basis for Processing

European Economic Area (GDPR): Our legal bases are contractual necessity under Article 6(1)(b) for providing the platform services you signed up for, legitimate interest under Article 6(1)(f) for security, fraud prevention, and platform improvement, and your consent under Article 6(1)(a) where specifically obtained (e.g., marketing communications). You may withdraw consent at any time.

United Kingdom (UK GDPR and Data (Use and Access) Act 2025):Processing is based on the same legal bases as the EEA — contractual necessity, legitimate interest, and consent where applicable. We comply with the UK GDPR as supplemented by the Data (Use and Access) Act 2025. If you are in the UK, you may complain directly to us using the contact details below — we will acknowledge your complaint within 30 days and respond without undue delay — or complain to the Information Commissioner's Office.

United States: We comply with the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) and all other applicable state comprehensive privacy laws, including those in effect in Arkansas, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. We do not sell or share your personal information. We do not use sensitive personal information for purposes beyond what is necessary to provide the platform services. We collect only information that is reasonably necessary for the purposes disclosed in this policy.

Brazil (LGPD): Processing is based on contractual necessity (Article 7, V), your consent (Article 7, I), and our legitimate interest (Article 7, IX).

Canada (PIPEDA and Quebec Law 25):By creating an account, you provide implied consent for the collection and use of information necessary to deliver the platform services. Express consent is obtained for any additional purposes. For residents of Quebec, we comply with the requirements of Quebec's Act respecting the protection of personal information in the private sector (Law 25), including privacy impact assessments and enhanced consent requirements.

India (DPDPA 2023):We process personal data in accordance with India's Digital Personal Data Protection Act, 2023 and its implementing rules. We provide itemized notices describing the data collected and its purpose, and we implement reasonable security safeguards as required by the Act.

South Africa (POPIA): Processing is based on contractual necessity, your consent, and our legitimate interest in providing and securing the platform.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data, to opt out of the sale or sharing of personal information (we do not sell or share personal information), to opt out of targeted advertising and profiling (we do not engage in either), to withdraw consent at any time, to object to processing based on legitimate interest, to appeal a denial of a privacy rights request, and to lodge a complaint with your local data protection authority. To exercise any of these rights, please contact us at the address below. We will respond to verifiable requests within the timeframes required by applicable law.

8. Do Not Track Signals

The TrueRank platform does not track you across third-party websites and does not use advertising or analytics cookies. Because we do not engage in tracking, our platform responds to Do Not Track (DNT) browser signals by default — there is no tracking behavior to disable.

9. International Transfers

Platform data is processed and stored on servers located in the United States. If you are accessing the platform from outside the United States, your data will be transferred to and processed in the United States. We ensure appropriate safeguards are in place to protect your data in accordance with applicable law.

10. Children's Privacy

The TrueRank platform is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has created an account, please contact us and we will promptly delete any related data.

11. Changes to This Policy

We may update this policy from time to time. The effective date at the top of this page indicates when the latest version took effect. If we make material changes, we will notify you via email or through a notice on the platform.

12. Contact Us

If you have questions or concerns about this privacy policy or your data, please contact us at: Baxter Research Group, Email: privacy@brc.com