Privacy Policy
Your privacy is of paramount importance to us. This policy explains how RatingPulse collects, uses, protects, and handles your business and customer information.
Mobile Information & SMS Opt-In Privacy Safeguard
- Customer phone numbers submitted to RatingPulse are utilized solely to transmit transactional review invitations requested by the subscribing business.
- SMS opt-in consent is non-transferable and is never sold, leased, or distributed to any marketing brokers.
- Recipients can revoke consent at any time by replying STOP to any SMS message.
1. Information We Collect
Business Account Data
When you create an account, we collect your name, business name, work email address, payment identifiers (via Stripe), and Google Business Profile authentication tokens.
Customer Contact Records
To send SMS review requests, you may input your customer's name and mobile number. This information is stored securely and processed exclusively for message delivery.
Google Review & Reply Data
With your OAuth authorization, we sync public review ratings, reviewer names, review copy, and published owner responses via official Google APIs.
Usage & Telemetry
We gather anonymized technical data (browser type, session duration, feature utilization) to maintain software uptime, reliability, and security.
2. How We Use Your Information
- Facilitating SMS review invitations and customer feedback collection on your behalf
- Generating AI-drafted review replies using Google Gemini API based on public review content
- Publishing approved review responses directly to Google Business Profile via OAuth
- Processing billing, subscription lifecycle management, and sending operational notifications
- Enforcing compliance with carrier 10DLC regulations and maintaining opt-out suppression lists
3. Data Retention Schedules
4. Third-Party Service Providers & Infrastructure
We partner with trusted industry infrastructure providers strictly necessary to operate our service. We never sell customer or business data.
| Provider | Purpose | Data Shared |
|---|---|---|
| Twilio | A2P 10DLC SMS transmission | Recipient phone number, message text |
| Supabase | Encrypted cloud database & auth | Encrypted account credentials, invite history |
| Stripe | PCI-DSS Level 1 payment processing | Billing details (credit card tokens) |
| Google Cloud / APIs | Google Business Profile review sync & AI reply | Public review text, star rating, business name |
| Vercel | Edge application hosting & CDN | Standard web request headers & logs |
5. Data Security Standards
RatingPulse employs bank-grade security protocols, including TLS 1.3 encryption for all data in transit and AES-256 encryption for data at rest. Access to sensitive production keys and databases is strictly limited by multi-factor authentication and role-based access control (RBAC). In the unlikely event of a verified data breach, affected users will be notified within 72 hours.
6. Your Privacy Rights (GDPR & CCPA)
Depending on your jurisdiction, you have the right to request access to, correction of, or deletion of your personal data stored by RatingPulse. To submit a data subject access or deletion request, please email our privacy team.
7. Privacy Inquiries & Contact
If you have questions, comments, or concerns regarding this Privacy Policy or our compliance practices, please reach out to: