Rate Me More’s Data Retention and Deletion Policy explains how long we keep your data and how you can have it deleted.
- Data Categories and Retention Periods: We classify data to determine retention:
- Personal Data (PII): Business account details (name, email, business info) are retained as long as your account is active and then for compliance. Our internal policy retains PII up to 7 years for legal obligations.
- Payment Data: Credit/debit card data is not stored by us (handled by Stripe). Any payment tokens or receipts we retain for 90 days to comply with PCI and tax rules.
- Analytics/Usage Data: How long we keep analytics depends on your plan. For example, free-tier analytics data is kept ~30 days, Professional ~90 days, and Enterprise up to 365 days. We may keep aggregated or anonymized analytics longer for product development.
- Feedback Content: Customer feedback (ratings, comments) is stored to generate reviews and reports. This data is tied to your account and is deleted when you delete your account (subject to backup policies).
- Log Data: System logs (error reports, access logs) are kept for up to 1 year for security, then purged.
- Deletion of Data: You can request deletion of your personal data at any time. For business customers, this means deleting your account and associated feedback; for end users, you may ask the business or us to remove your contact info from private feedback. We comply with user deletion requests except where we need data for legal reasons (e.g. tax records). Upon a valid deletion request, we will erase or anonymize your data in our active systems. We may retain backups of anonymized data for a limited time, but no longer than needed.
- User Rights and Process: In accordance with GDPR/CCPA, we honor deletion and correction requests. For example, we will respond to a deletion request within 45 days as required under CCPA. To request deletion or correction, contact our support team (via the dashboard or support email). We will verify your identity before processing requests. If we deny a deletion request (e.g., data is legally required to be kept), we will explain why.
- Automatic Deletion: We have automated policies to purge data after its retention period. For instance, unused free-trial accounts may be deleted after 30 days of inactivity, old feedback is removed after 1 year, etc. We will periodically delete analytics older than the retention for your plan.
- Data After Account Closure: If you cancel your subscription or delete your business account, we will remove or anonymize your personal data. However, we may keep aggregated, non-identifying metrics for internal analysis. Any posted reviews or content you generated cannot be “un-posted” from third-party sites (Google, Yelp, etc.) by us.
- Compliance: This policy follows applicable law. Under GDPR, we inform you of retention periods. Under CCPA, we must delete data when requested (subject to exceptions