Privacy Policy

Uprate Technologies Private Limited ("RateUp", "we", "us") operates www.rateup.app and the RateUp platform (the "Service"). This policy explains how we handle personal information in two different roles:

• As a controller, for information about visitors to our website, people who contact us, and the businesses and team members who use RateUp.
• As a processor, for information our business customers put into RateUp about their own customers. That is covered in section 4.

Information you give us

• Account details: name, business name, email address, phone or WhatsApp number.
• Profile details you add, such as your role, team, photo and business address.
• Billing details: billing name and address and tax details. Card and bank details are collected by our payment providers, Stripe and Razorpay; we do not store full card numbers.
• Anything you send us through forms, demo bookings, chat, email or calls.

Information collected automatically

• Device and browser type, operating system, IP address and approximate location.
• Pages visited, links clicked, referring website and time on page.
• How you use the Service, such as features used and errors encountered.
• Advertising identifiers and conversion events, only if you accept cookies (section 6).

Information from third parties

• When you connect WhatsApp, Instagram or Messenger, Meta shares details of the business accounts, pages and phone numbers you connect.
• When you connect other tools, such as Shopify, WooCommerce or Google, we receive the data needed for that integration to work.

Businesses use RateUp to talk to their own customers. They put information into RateUp about those people: names, phone numbers, Instagram and Facebook IDs, message content and media, survey answers, loyalty points and rewards, orders and delivery addresses.

For this information, the business is the controller and RateUp is its processor. We process it only on the business's instructions and to provide the Service, as set out in our Data Processing Agreement. We do not use it for our own marketing, and we do not sell it.

If you are a customer of a business that uses RateUp and want to access, correct or delete your information, or stop receiving messages, please contact that business directly. If you contact us instead, we will pass your request on to the business.

We do not sell personal information. We share it only with:

• Service providers who host, secure and support the Service, such as cloud hosting, email delivery, error monitoring and payment processing. They may use the information only to provide services to us. The current list is on our Subprocessors page.
• Meta, when messages are sent or received through WhatsApp, Instagram or Messenger. Meta handles that information under its own terms and privacy policy.
• Integrations you turn on, such as Shopify, Google, HubSpot or Zapier, as needed for them to work.
• Advertising and analytics partners (Google and Meta), only for website visitors who accept cookies.
• Authorities or others, where the law requires it, or to protect the rights, safety and security of RateUp, our customers or the public.
• A buyer or successor, if RateUp is involved in a merger, acquisition or sale of assets. This policy will continue to apply to your information.

Our website uses a few cookies that it needs in order to work, such as keeping you signed in and remembering your cookie choice for six months. These are always on.

With your consent, we also use these tools to understand how the website is used and to measure our ads:

• Google Tag Manager, Google Analytics 4 and Google Ads conversion tracking
• Meta Pixel and the Meta Conversions API, which sends limited event data from our servers, such as hashed email or phone, IP address and device details

Until you accept, these tools run in a consent-denied mode: they do not set analytics or advertising cookies, and Meta Pixel events are not sent. You can change your choice at any time: open cookie settings. You can also block cookies in your browser, though parts of the site may then not work.

Our main databases are in the European Union, and our file storage and email delivery are in India. Some of our service providers process information in other countries, including the United States. Where information leaves the European Economic Area or the United Kingdom, we rely on safeguards such as the European Commission's Standard Contractual Clauses.

• Account information and Customer Data are kept while the account is open. After an account closes, we delete them within 90 days, as described in our Terms.
• Invoices and billing records are kept for as long as tax and accounting laws require.
• Enquiries and demo requests are kept for up to two years after our last contact.
• Backups are overwritten on their normal cycle.

We protect information with encryption in transit, access controls based on each team member's role, secure authentication, monitoring and regular backups. No system is completely secure. If a breach affects your personal information, we will notify you and the relevant authorities as the law requires.

Depending on where you live, you may have the right to:

• access the personal information we hold about you and get a copy of it;
• correct or update it;
• have it deleted;
• object to or restrict how we use it, including for direct marketing;
• withdraw consent you have given, at any time;
• nominate someone to exercise your rights if you die or become incapacitated (India).

• European Economic Area and United Kingdom: you also have the right to data portability and to complain to your local data protection authority.
• India: you have the rights under the Digital Personal Data Protection Act, 2023, including grievance redressal through the officer named in section 13.
• California: you have the right to know, delete and correct, and to opt out of "sale" or "sharing". RateUp does not sell personal information. Declining cookies stops our advertising tools from sharing it.

To use any of these rights, email [email protected]. We will answer within 30 days. We may need to verify your identity first.

RateUp accounts are for businesses and for people aged 18 or over. We do not knowingly collect personal information from children for our own purposes. Businesses that use RateUp are responsible for any information about minors they process with it.

We will update the date at the top whenever this policy changes. If a change materially affects how we use your information, we will also tell account owners by email or in the app before it takes effect.

For privacy questions, requests or complaints, contact our Grievance Officer:

Grievance Officer, Uprate Technologies Private Limited
Email: [email protected]

We acknowledge complaints within 7 days and aim to resolve them within 30 days.