Privacy Policy
Last updated: September 2026 • Domain: ratezit.com
1. Who are we?
RateZit (ratezit.com) is a QR-based customer feedback platform for restaurants, hotels, cafes, and other hospitality businesses, operated out of India. No VC funding, no data-selling side hustle, no shady stuff.
For any privacy-related matter: support@ratezit.com
2. Who does this policy cover?
Two types of people use RateZit:
- •Business owners (Merchants) — restaurants, hotels, cafes, etc. who sign up and pay us.
- •Their customers — people who scan a QR code and leave a rating.
This policy covers both.
3. What do we collect — and why?
From business owners
When you sign up, we ask for:
- →Your name, email, phone number
- →Your business name and address
- →Your Google Maps link
- →GST number (optional — only if you want a GST invoice)
Why? To run your account, send you invoices, and link your QR codes to the right business. Nothing more.
From your customers
When a customer scans your QR and submits feedback, we collect:
- →Their star rating (1–5)
- →Their written feedback (optional)
- →Their name (totally optional — they can skip it)
- →The time they submitted
- →Which restaurant's QR they scanned
- →A scrambled, one-way hash of their IP address — just to stop people spamming fake reviews. We cannot reverse this to find out who they are.
We do NOT collect their phone number, email, device info, or precise location. Anonymous by default.
4. What do we do with this data?
- •Business owner data — we use it to manage your account, send billing emails, and provide support.
- •Customer feedback data — we show it to you on your dashboard so you can understand what your customers think. That's it.
We never sell data. We never use it for ads. We never share it with anyone who isn't directly helping us run the platform.
5. How long do we keep it?
- •Customer feedback — 12 months, or until you cancel your account, whichever comes first.
- •Your account data — while your account is active, plus 3 years after (Indian tax law requires this for billing records).
If you ask us to delete your data, we'll do it within 30 days. Email us at support@ratezit.com.
6. Do we use cookies?
On QR feedback pages: only a basic session cookie to stop the same person submitting the same rating 50 times. No tracking, no ads, no Google Analytics on customer pages.
On your dashboard: a login session cookie so you stay logged in. Standard stuff.
7. Who do we share data with?
Short answer: almost nobody.
- •Cloud hosting provider — to actually run the platform. They operate under strict confidentiality and cannot use your data independently.
- •Law enforcement — only if a valid Indian court order requires us to.
That's the complete list. No data brokers, no advertisers, no third-party analytics on customer pages.
8. Your rights
Under India's Digital Personal Data Protection Act, 2023, you can:
- →Ask what data we have on you
- →Ask us to correct any wrong information
- →Ask us to delete your data
- →Withdraw your consent at any time
Just email support@ratezit.com with the subject "Data Rights Request" and we'll sort it within 30 days.
9. Got a complaint?
We're legally required to have a Grievance Officer under the Consumer Protection Act, 2019. Ours is the RateZit Support Team, reachable at support@ratezit.com. Raise a concern and we'll respond within 30 days.
If you're still not happy after that, you can approach the Data Protection Board of India once it's fully constituted.
10. If we update this policy
We'll email you at least 15 days before any meaningful change. The "Last updated" date at the top always reflects the current version. Continued use of RateZit after an update means you're okay with the changes.
11. Legal stuff
This policy is governed by Indian law — the DPDP Act 2023, IT Act 2000, and Consumer Protection Act 2019. Any disputes go to courts in India.