Privacy Policy

This policy explains what information Ratingopia collects, how it is used, and the choices available to you — whether you're a business owner using Ratingopia, or a customer who scanned a Ratingopia QR code to leave a review.

Information we collect

From business owners (accounts):

• Name, email address, and password (or Google sign-in identity)
• Business details you add: business name, category, Google Place ID, brand color, logo, staff names, and business highlights
• Billing information, handled directly by our payment processor — we do not store your card details ourselves

From customers using the review flow (no account, no login required):

• A one-way hash of your IP address, not the IP address itself — used only to avoid double-counting the same visit, and never reversible back to an identifiable address
• Your star rating, selected highlights, and chosen language
• The AI-drafted review text you were shown, and whether you edited or copied it
• If you choose to send private feedback: your name, email, or phone number, but only if you provide them — all of these fields are optional

How we use this information

• To operate the review flow: generate draft text, show it to you, and let the business owner see aggregate results
• To run and improve the service, including fraud and abuse prevention
• To send account-related emails (billing, private feedback alerts) and, if you opt in, product updates
• To comply with legal obligations

We do not sell your personal information, and we do not use customer review data to train our own AI models.

Third-party services we use

Ratingopia is built on trusted infrastructure providers, each of whom processes a limited slice of the data above to do their specific job:

• Supabase — database, authentication, and file storage
• Google (Gemini API) — generates the AI review drafts from your selected highlights
• Google Places API — looks up a business's Google Maps listing during setup
• Resend — sends transactional emails (feedback alerts, receipts)
• Stripe — processes payments for paid plans
• Vercel — hosts the application

Each of these providers has its own privacy practices governing the data they process on our behalf.

Cookies and local storage

We use a small number of essential cookies to keep you signed in and to remember your dashboard theme preference (light or dark). We do not use third-party advertising or tracking cookies.

Data retention

If a business owner's subscription lapses or is cancelled, their data is not deleted — access is simply paused until the subscription is reactivated. You can request deletion of your account data at any time by contacting us.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information. To exercise any of these rights, contact us at the email below.

Children's privacy

Ratingopia is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the date at the top of this page.

Contact us

Questions about this policy? Email hello@ratingopia.com.