Privacy at Ratingly

Interim summary. The full privacy policy (with company details and the data processing agreement) is being finalised.

Who we are. Ratingly (ratingly.io) is operated by Swift Nodes LLC dba Ratingly.io, 1500 North Grant St, Suite N, Denver, CO 80203, USA. Contact: [email protected].

What we process. Your account details (name, work email), your business locations and settings, the public reviews of your connected business profiles, the replies we draft and you approve, and — if you use review requests — the contact details and consent records of your customers that you upload.

Google data. Google replies are paste-ready for now: we use the public Google Maps data you give us to draft a reply you can paste yourself. We do not post to Google on your behalf. If Google Business Profile access is enabled for your account in future, with your permission (Google OAuth, scope “business.manage”) we would read your Business Profile reviews; we will update this policy and ask you again before enabling posting. We do not use Google data for advertising, do not sell it, and delete review content we received from Google after 30 days. You can disconnect at any time in Settings or in your Google account.

AI. Reply drafts are written with Anthropic's Claude models acting as our processor. When we enable DeepSeek for a drafting task, DeepSeek's models also act as our processor. We send only the review and draft context needed to write the reply. Anthropic's API terms exclude training on API data; we only use DeepSeek under written terms that exclude training on your data. We do not use your data for advertising or sell it.

International transfers. Our hosting is in the EU (France). Anthropic processes AI data in the US, and our off-site backups are held by Backblaze B2 in the US. DeepSeek, if enabled, processes data in China. We use the providers' data processing terms and standard contractual clauses, and we assess transfers before enabling a new provider. We only enable DeepSeek for customer review text once its transfer and training terms are confirmed.

Processors. Contabo (hosting, France), Cloudflare (network protection), Anthropic (AI drafting, US), DeepSeek (AI drafting, China, only when enabled), Backblaze (off-site backups, US), Voyage AI (text analysis for search and reports), Stripe (payments), Resend (email), Twilio (SMS), Telegram (approval messages, if you link it), Google and the review platforms you connect (APIs), and OpenWeb Ninja (reads public Trustpilot and Yelp reviews of businesses that connect those sites).

Your rights. You can export or delete your data from your account (Settings), or ask us at [email protected]. Deleting closes the account at once and erases all its data after 30 days. Review-request contact details are deleted 30 days after the request is sent, and immediately if you delete your account. Invoices are kept by Stripe as the law requires.

Visitor analytics. We measure visits to this site with our own first-party analytics, served from ratingly.io. The analytics events use no cookies and no third-party script, and we do not store a persistent visitor identifier in your browser. For each page view we record the page, the referring site, campaign tags in the link, your country (derived from your IP address at the time of the request), device type, browser, operating system, language and screen width; when you leave the page we also record foreground time on page and how far you scrolled, and the browser reports page-speed measurements. To count unique visitors, we hash your IP address and browser user agent with a random value that changes every UTC day and is deleted after 48 hours. We do not store your IP address for analytics, and the visitor ID cannot be linked to you on a different day. This is pseudonymous measurement based on our legitimate interest in understanding and improving the service; it is not advertising and is never sold.

Before you sign up, we store the first page you visited, the referring site and any campaign tag in your browser's local storage so we can attribute the signup. That record is sent when you create an account, and the pages you visited earlier that same day may be linked to your new account so we can understand how people find Ratingly. Analytics events and signup journeys are kept for 400 days and are deleted when you delete your account. You can opt out at any time using the control below; we also honour the Do Not Track and Global Privacy Control browser signals.

Text messages. When a business's customer signs up for a feedback text (for example on a consent form at ratingly.io/f/…), we store their first name, mobile number, the date and the consent record, and send one text per visit on that business's behalf. Mobile numbers are encrypted and deleted 30 days after the text is sent. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except the SMS provider that delivers the message (Twilio). Reply STOP to any text to opt out.

Cookies and local storage. We only use a strictly necessary sign-in cookie. No advertising or analytics cookies. Local storage holds the analytics opt-out flag and the first-touch attribution record described above; neither is a cookie and neither identifies you across days.