Privacy Policy | RateInvite

1. Who We Are

RateInvite ("we", "us", "our") is a software platform that helps local businesses request Google reviews through QR codes and consent-based SMS messaging. Our website is rateinvite.com.

2. Information We Collect

From business owners (account holders)

Name, email address, and password when you register
Google account identifier, name, and email when you choose Google sign-in
Business name, address, and Google review URL
Google Business Profile and place information when you use Google Places-assisted setup
Billing information (processed securely by Stripe; we do not store card numbers)
SMS message templates and campaign preferences
Sign design, recipient, shipping address, and shipping contact details when you confirm a physical order

From customers of our business clients

Mobile phone number (provided voluntarily when scanning a QR code and completing the opt-in form)
Consent timestamp, consent text, and consent source, including a customer's web-form opt-in or an authenticated business owner's consent attestation
IP address hash (one-way anonymized) for fraud prevention
Link-click activity (whether the review link in the SMS was clicked)

From website visitors and prospective customers

Landing page and referring website hostname
Campaign tags such as UTM source, medium, campaign, term, and content
Page views and interactions with trial, pricing, demo, and lead-form calls to action when website analytics is enabled

RateInvite does not store arbitrary landing-page query strings for attribution. Campaign attribution is limited to the fields listed above.

3. How We Use Information

To operate and improve the RateInvite platform
To send automated SMS review request messages on behalf of business clients, where customers have explicitly opted in
To track campaign performance metrics (clicks, delivery status)
To process payments and manage subscriptions
To authenticate users through Google and help configure an accurate Google review destination
To create and fulfill Brand Shop orders after payment, customization, and shipping confirmation
To respond to support requests
To understand which public pages and campaigns lead to inquiries, registrations, and purchases
To comply with legal obligations

4. SMS Messaging, Consent and Opt-Out

This section applies to text messages sent via the RateInvite platform.

How consent is recorded

A customer may provide a mobile phone number and give explicit consent by checking a consent checkbox on the business's QR landing page. The consent language displayed is:

"Optional: I agree to receive SMS messages from [Business Name], powered by RateInvite, at the phone number provided. Messages may include a Google review link or review-request follow-up. Message frequency may vary. Message and data rates may apply. Reply HELP for help. Reply STOP to opt out."

Consent is never pre-checked. Submitting a phone number without checking the consent box will not schedule an SMS message.

An authenticated business owner may also enter a customer's phone number in the dashboard and affirm that the customer previously gave valid consent for the non-marketing review-request message. We record that owner attestation as the consent source. The business owner is responsible for obtaining and retaining adequate evidence of the recipient's consent before using this method.

Message frequency

Each customer web-form opt-in or owner-attested dashboard request schedules 1 SMS review-request message. Message frequency may vary based on how often a customer consents to messages from, or has a consented interaction with, a participating business.

How to stop receiving messages

Reply STOP to any message to opt out immediately. You will receive one final confirmation message and no further messages will be sent. For help, reply HELP to any message or contact us at support@rateinvite.com.

Message and data rates

Standard message and data rates may apply depending on your mobile carrier plan.

No sharing of mobile numbers for marketing

We do not sell, rent, trade, or share customer mobile phone numbers with third parties for marketing purposes. Customer mobile numbers collected or owner-attested for review-request messaging are used only to provide that business's messaging workflow, maintain consent and opt-out records, prevent abuse, and meet legal or carrier obligations. They are not aggregated for cross-business marketing campaigns. Shipping contact numbers submitted for a physical order are used separately for fulfillment and delivery.

5. How We Share Information

We do not sell personal information. We may share information with:

Twilio, our SMS delivery provider, for sending text messages
Stripe, our payment processor, for billing
Printify and its fulfillment partners, for producing and shipping confirmed physical orders, including the recipient name, shipping address, shipping contact details, order details, and artwork needed for fulfillment
Google, when you choose Google sign-in or Google Places-assisted business setup, for identity verification, account linking, place lookup, and review-destination configuration
Google Analytics, when enabled, for privacy-limited website acquisition and interaction measurement with advertising personalization signals disabled
Law enforcement or regulators when required by law

These providers process information under their own terms and privacy policies. We provide only the information reasonably needed for the selected service and do not authorize these providers to use customer mobile numbers for their own marketing.

6. Data Retention

Retention length depends on the record and why it is needed. We retain account and operational data while an account is active. We may retain billing, order, consent, opt-out, messaging, security, and audit records after account closure when reasonably necessary to document transactions and consent, honor suppression requests, prevent fraud, resolve disputes, enforce agreements, or meet legal, tax, accounting, and carrier requirements.

Deletion requests do not require us to remove information that we must keep for those purposes. When information is no longer reasonably needed, we delete or de-identify it through our operational and backup-retention processes. Service providers may retain records under their own legal obligations and retention policies. Business owners and other individuals may request access or deletion by contacting support.

7. Security

We use industry-standard security measures including HTTPS encryption, hashed credentials, and one-way IP hashing. No method of transmission over the internet is 100% secure, but we take reasonable steps to protect your information.

8. Your Rights

Depending on your location, you may have rights to access, correct, or delete personal information we hold about you. To exercise these rights, contact us at support@rateinvite.com.

9. Children

RateInvite is not directed at children under 13. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this policy periodically. We will post the updated policy on this page with a revised "Last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Contact us at support@rateinvite.com.