Privacy

Who we are

Rateful is operated by rateful.shop (“Rateful”, “we”). It helps local businesses in the Greater Toronto Area collect feedback from their customers and invite them to review the business on Google. The business you visited decides to use Rateful; we handle the data on its behalf.

If you leave feedback

• We keep your rating, the options you tap and the words you write, so the business can read them.
• If you share a receipt photo, it is read once by our AI provider to pick out what you ordered. Rateful does not keep the photo; the provider deletes it within 30 days.
• Your email address is optional. If you give it, the business can reply to you; Rateful itself sends you nothing.
• A review you post on Google is written, edited and posted by you, under Google's own terms.

If you run a business on Rateful

We keep your account details, your business settings and, if you connect Google, access to your Business Profile so you can reply to reviews. Google review content is kept for no more than 30 days. You can disconnect Google at any time.

Google user data

• If you sign in with Google, we receive your name, email address and profile picture, and use them only to sign you in and show your account.
• If you connect your Google Business Profile, we use that access only to show your business's Google reviews in Rateful and to post the replies you approve, or that you have explicitly turned on automatic replies for. Review content is kept for no more than 30 days.
• We don't sell Google user data, use it for advertising, or use it to train AI models. We share it only with the processors listed below, to run the service.
• Rateful's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• You can disconnect Google from your settings at any time, or revoke access from your Google Account; the stored connection is then deleted.

How long we keep it

Feedback and any email address are kept for 24 months by default. A business can choose a shorter period, or delete its data at any time.

Who processes it

When our pilot starts, these services will process data for us. Customer and business data will be stored in Canada; some of these services are based in the United States, so data may also be handled there.

• An AI model provider: drafts reviews and replies, and reads receipt photos.
• Google: business listings, and Google reviews for owners who connect.
• Vercel and DigitalOcean: hosting and the database, in Canada.
• Upstash: short-lived counters that protect against abuse.
• Twilio and Resend: text and email alerts to business owners.
• Sentry: error reports, with personal details removed.
• Stripe: payments from businesses, once paid plans start.

Your choices

You can ask to see, correct or delete the feedback linked to your email address. Write to pratikvelani@gmail.com.