RankLyst is an early-stage, pilot-phase company. This policy describes how we handle information today; it will evolve as we grow, and we'll update this page when it does.
If you use the "Request access" form, we collect the name, email, organization, specialty, and message you provide. We use it only to respond to your inquiry and follow up about RankLyst — we don't sell it, rent it, or share it with third parties for their own marketing. This site does not use tracking cookies or third-party analytics.
If your institution runs RankLyst, the applicant files, letters, and reviewer activity your committee uploads belong to your institution — we process it on your behalf, we don't use it for our own purposes, and we don't share it across institutions. Specifics, matching what's described in the Trust & Security section above:
Application and letter data is encrypted at rest.
Each institution runs its own instance with its own database — your data is never stored alongside another institution's.
You control a retention window, and deletion always requires an explicit, logged confirmation from an administrator — nothing is ever purged automatically.
Document text is sent to Anthropic's Claude API to run extraction. We'll walk through exactly what that means for your data agreements before you upload anything real.
You can ask what we hold about you, ask us to correct it, or ask us to delete it, by emailing hello@ranklyst.app. For applicant data inside an institution's own RankLyst instance, that institution controls access and deletion directly through the product.
Email hello@ranklyst.app and we'll respond directly — this is a small team, not a support queue.
Last updated September 2026. A general summary, not a substitute for legal advice — an institutional pilot is governed by its own signed agreement, which we'll provide before any real applicant data is involved.