RateMate
Privacy Policy
This Policy explains how RateMate processes information to provide verified professional reputation services to Suppliers, employees and organization representatives. It describes the current product and does not describe advertising technology that RateMate does not use.
Last updated date: August 6, 2026
01Who this policy covers
RateMate processes information about account holders, organization representatives, Supplier employees, couriers, Consumer Service Locations, people who submit lead requests, and visitors who use public profile pages. Organizations control the organization information they submit, while RateMate operates the platform and enforces its access and privacy boundaries.
02Accounts and identity
Registration and account administration may process name, email address, phone number, password hash, verified identity details such as passport information or a personal tax identifier where required, language and theme preferences, account status, organization membership, role, employment history, and device or session metadata. Passwords, verification codes, activation links, access tokens, and refresh tokens are protected and are never stored as readable passwords or raw active tokens.
03Organizations, employees, and onboarding
RateMate processes Supplier details, memberships, employee roles and employment relationships. A organization representative supplies a Tax ID and location evidence in a browser, with an optional location display name. One Tax ID identifies one organization with potentially many locations; a typed name never grants access to another branch. Guest evaluation does not require an account. Optional Organization Accounts support reviewed ownership claims, invitations, roles and grants for selected or all locations.
04QR codes, locations, visits, and ratings
The employee presents their personal QR in the mobile application; a organization representative scans it with a phone camera. RateMate processes the opaque QR capability, visit time, technical request information and precise location when permission is granted to verify the interaction. A Double Scan visit records check-in and check-out. Eligible organization evaluations may be submitted immediately or within 30 days after visit completion through Organization Inbox. Browser sessions and visit eligibility are separate controls.
05RateMate Score, reports, and public profiles
Structurally valid accepted evaluations immediately update star ratings, counts and applicable category averages. A new organization or limited history alone does not suppress an accepted evaluation. RateMate Score is a separate 0–100 measure available from the first eligible evaluation, with an explicit maturity level. Later invalidation removes the contribution; reviewed restoration recalculates it without duplicating evidence. Employees receive aggregates, not incoming evaluator identity, individual incoming comments/photos or source-identifying timestamps. Authorized Suppliers see employee evaluations and operational evidence within their employment and organization scope. Monthly report originals remain immutable; authorized correction projections reflect eligible changes. Revocable public-profile links expose only the approved projection.
06Activation and transactional emails
RateMate sends verification, activation, onboarding, security, Visit, evaluation, relationship, and other service notifications needed to operate an account. Delivery may use email through Resend and operating-system push notification services when configured. Delivery status, device notification identifiers, and limited provider references may be recorded for reliability, security, and audit purposes. RateMate does not currently use these messages for marketing campaigns.
07Uploaded files
Profile photos, optional organization evaluation photos and employee camera proof serve different purposes. Profile avatars have public image URLs and may appear in profile and QR interaction views. Evaluation and Proof photos remain private; authorized Suppliers can preview and download them within employment scope. Employee Proof uses the in-app camera and can include a reason, note, capture/server time, available foreground GPS and a permitted Visit context. Proof does not itself confirm a Visit or create a rating. PDF reports use authorized report data.
08Analytics, logs, security, and backups
Implemented analytics are operational aggregates such as organization, user, QR, Visit, Rating, and growth counts. RateMate records audit events, authentication activity, rate-limit and replay signals, request metadata, and technical errors to secure and operate the service. Database and uploaded-file backups are created for recovery and protected by operational access controls. RateMate does not use advertising analytics or cross-site marketing trackers.
09Billing and payment records
For paid Supplier access, RateMate may process the Supplier organization, subscription and billing period, plan and pricing tier, employee-count basis, amount and currency, order and payment status, provider and provider references, payment and failure timestamps, and security or audit events. These records are used to calculate the amount due, initiate and verify payment, apply the seven-calendar-day overdue access rule, restore access after confirmed payment, prevent duplicate or altered transactions, provide support, and keep required financial and audit evidence. Full payment-card numbers and card security codes are entered with the payment provider and are not requested or stored by RateMate.
12Retention and deletion
RateMate uses purpose-based retention rather than one universal period. Account and profile data are kept while an account is active and afterwards only as long as needed for legitimate operations, security, legal duties, or disputes. Authentication, session, and security data are kept only as needed for fraud prevention, audit, and incident investigation. QR and Visit evidence is kept as needed for verified interaction history, security, audit, and authorized reputation processing. Rating and reputation evidence may be retained to preserve immutable, reproducible, and auditable professional history; identity is deleted, anonymized, or pseudonymized where legally and technically appropriate without falsifying that history. Billing, accounting, and tax records are kept for periods required by Armenian law, and support or dispute records while reasonably needed to resolve matters or legal claims. After account deletion, personal data without a remaining lawful or legitimate purpose is removed or anonymized. Evidence review dates are review checkpoints, not promises of automatic deletion. Invalidating an evaluation removes its rating contribution without automatically deleting its evidence.
13Your choices and rights
Subject to applicable law and evidence-integrity requirements, a person may request information and access, correction, blocking, restriction, deletion, or withdrawal of consent where consent is the basis of processing. Account holders can update supported profile fields and preferences directly. Requests are verified before action to protect other users and organizations. A person may also apply to the Armenian Personal Data Protection Agency or a court. Contact ratematecompany@gmail.com.
14Security and policy updates
RateMate uses role and organization authorization, tenant isolation, opaque sessions, replay protection, rate limiting, encryption in transit, restricted administrative access, audit logging, backups, and privacy-specific API responses. No system can promise absolute security. Material policy changes will be published on this page with an updated date.
Legal entity and contact details
Verified operator information approved for RateMate publication.
- Legal entity name
- RateMate
- Legal form (sole proprietor / LLC)
- —
- Tax ID
- —
- Registered address
- —
- Support email
- ratematecompany@gmail.com
- Support phone
- +374 33 282776
- Privacy contact
- ratematecompany@gmail.com
- Last updated date
- August 6, 2026