Help Center & FAQ

Common questions about local SEO tracking and integrations

The tracker generates search coordinates around your business address (e.g. at 1km intervals in a 3x3 grid). It queries maps results from those coordinates to check if your business ranks in the top "local 3-pack" or is pushed further down, giving you a detailed geospatial visualization of your visibility.

RankPilot utilizes the industry-standard OAuth 2.0 protocol to connect securely to your Google Account. When you authorize the connection, you are redirected to Google's official, secure authorization page. Here, you review the exact scopes requested (such as Google Business Profile management, Search Console readonly access, and Analytics readonly access). Google then issues a secure, encrypted token to RankPilot. At no point do we see, request, or store your Google password.

Yes. All connection credentials and OAuth 2.0 refresh and access tokens are secured at rest using industry-standard AES-256 encryption. Data transmission is fully encrypted in transit using TLS 1.3 / HTTPS. We run our system on secure, firewall-protected databases with isolated tenant permissions, and we operate under a strict policy: we do not sell, rent, or share your profile details, statistics, or reports with third-party advertisers.

You have complete control over your permissions. You can disconnect your Google account from RankPilot at any time:
  • From RankPilot: Go to Account Settings > Integrations, and click "Unlink". This will immediately purge your stored OAuth credentials and tokens from our database.
  • From Google Account Settings: Visit Google Third-Party Access Settings, select RankPilot, and click "Remove Access". Google will instantly invalidate the tokens, blocking all future access.

Yes. RankPilot is built to comply fully with Google's API Terms of Service, Google Workspace Developer Guidelines, and Google Business Profile API policies. We do not participate in any artificial ranking manipulation, automated spam generation, or astroturfing (e.g., posting fake reviews). Every reply draft or scheduled post is initiated and approved by a real user or configured strictly according to legal compliance standards.

We request three specific permissions during authorization:
  • business.manage: Used to sync your Google Business Profile listings, load customer reviews, submit review replies, and post updates or media.
  • webmasters.readonly: Used to securely fetch impressions, search queries, and clicks from Google Search Console.
  • analytics.readonly: Used to fetch conversion statistics and traffic trends from Google Analytics 4.

NAP stands for Name, Address, and Phone. Google expects these details to match exactly across your website, GBP profile, and third-party citation listings. Small differences (like "Suite 100" vs "#100") are audited and scored by our SEO module to help you optimize authority.

Yes, under Agency Settings you can register a CNAME (e.g. portal.youragency.com). Once verified in your DNS, client logins under that domain will render custom logos and support email overrides without any RankPilot branding.