Privacy Policy

Rampage Connect LLP (UEN: T24LL0745C) operates rampageconnect.com and the Rampage AEO Pro platform. We are based in Singapore and subject to the Singapore Personal Data Protection Act 2012 (PDPA).

For data protection enquiries, contact us at hello@rampageconnect.com. We aim to respond within 5 business days.

We collect personal data across three touchpoints:

AI Visibility Scanner & AEO Pro

• Email address — to deliver your scan report and, for Pro subscribers, weekly re-scan digests
• Name — optional, used to personalise report emails
• Company name — optional, used in report and internal lead records
• Website URL(s) you submit — to run the scan and store your history
• Scan results and score history — linked to your email, retained for the life of your account
• Payment information — collected and stored by Stripe directly; we do not see or store card details

Contact form

• Name, email, company, area of interest, and message — forwarded to our team by email
• Contact form submissions are not stored in a database; they exist only in our email inbox

Site analytics (all visitors)

• Page views, referrer, and approximate location (country/city, derived from IP address) — collected by Vercel Analytics. No cookies are used for this. No individual is identified.
• IP addresses are processed by Vercel's infrastructure to derive location data and are not stored by us directly

Advertising & conversion measurement (visitors from our ads)

• When you arrive from one of our Google Ads or reach a key action (such as messaging us on WhatsApp or requesting an audit), Google Analytics 4 and Google Ads set cookies (e.g. _ga, _gcl_*) to measure which ads and pages lead to enquiries.
• This is used only to measure our own ad performance in aggregate. We do not use it to build advertising profiles of you, and we do not sell this data.

We do not collect passwords (authentication is handled by Supabase), NRIC or passport numbers, financial statements, health data, or any sensitive personal data under the PDPA.

• To deliver your AI visibility scan report
• To provide and maintain your Pro subscription and dashboard
• To send weekly re-scan digests and score change alerts (Pro subscribers only; unsubscribe link in every email)
• To respond to contact form enquiries
• To follow up on a relevant business opportunity where you have enquired about our services
• To improve our scanning methodology and platform
• To understand aggregate site traffic and usage patterns (via Vercel Analytics)
• To measure the performance of our own advertising — which ads and pages lead to enquiries — via Google Analytics 4 and Google Ads conversion tracking

We do not sell your personal data to third parties. We use Google Analytics and Google Ads only to measure our own ad performance in aggregate — we do not use your data to build advertising profiles of you or to serve you third-party ads.

The following services process personal data on our behalf. Each operates under its own privacy policy and data processing agreements:

• Stripe — payment processing for Pro subscriptions. Stripe stores payment card data; we do not.
• Supabase — database (scan records, subscriber accounts) and authentication. Data is stored on AWS infrastructure. Supabase is headquartered in the US.
• Vercel — website hosting, serverless API functions, and Vercel Analytics. Vercel is headquartered in the US and processes requests via a global edge network.
• Google LLC — Google Analytics 4 and Google Ads conversion tracking, used to measure our own advertising performance. Google sets analytics and advertising cookies and is headquartered in the US.
• Resend — transactional email delivery (scan reports, contact notifications). Resend is headquartered in the US.

By using our services, personal data you provide (email, name, scan URLs) may be transferred to and processed in countries outside Singapore, including the United States, where our service providers (Supabase, Vercel, Resend, Stripe, Google) are headquartered or operate infrastructure.

We take reasonable steps to ensure these transfers are made to organisations that provide a standard of protection comparable to that under the PDPA, including by relying on standard contractual clauses and the data processing terms of each provider. Detailed data transfer terms are available from each provider's documentation upon request.

We retain scan history and account data for as long as your account is active. If you cancel your Pro subscription or request deletion, your personal data is removed within 90 days, except where retention is required by law (e.g. Stripe transaction records for tax purposes).

Contact form submissions are retained in our email inbox and may be deleted on request.

We use the following cookies:

• Authentication cookies — set by Supabase when you sign in to your Pro account. These are session cookies required for the dashboard to function. They are deleted when you sign out or expire after a standard session period.
• Advertising & analytics cookies — Google Analytics 4 and Google Ads set cookies (e.g. _ga, _gcl_*) to measure the performance of our own advertising — which ads and pages lead to enquiries. They are not used to build advertising profiles of you or to serve you third-party ads. These load only in production.
• Cookie-free analytics — Vercel Analytics measures aggregate traffic without setting any cookies.

Under the Singapore PDPA, you have the right to:

• Access — request a copy of personal data we hold about you
• Correction — request that inaccurate or incomplete data be corrected
• Withdrawal of consent — withdraw consent to any purpose at any time (subject to legal or contractual obligations); this does not affect data already processed
• Portability — request your scan history in a machine-readable format
• Opt-out of marketing — every email from us includes an unsubscribe link; you can also email us to be removed from all communications

To exercise any of these rights, email hello@rampageconnect.com with the subject line "Data request". We will respond within 10 business days.

In the event of a data breach that is likely to result in significant harm to affected individuals, we will notify the Personal Data Protection Commission (PDPC) and affected individuals in accordance with our obligations under the PDPA — within 3 business days of becoming aware of a notifiable breach.

We may update this policy from time to time. We will notify active Pro subscribers by email of material changes. The date at the top of this page reflects the most recent update. Continued use of our services after changes constitutes acceptance of the updated policy.