We handle customer feedback data with clear purpose and practical controls.

Information we collect

We collect the information needed to operate feedback campaigns, authenticate workspaces, deliver survey requests, and help teams understand feedback.

• Workspace account details such as company name, users, roles, and settings.
• Campaign data such as survey question, recipients, send attempts, delivery state, and campaign configuration.
• Survey responses, scores, comments, timestamps, and optional recipient metadata.
• Operational records such as audit logs, suppressions, API keys, billing status, data requests, and support context.
• Product usage, error, and diagnostic data that helps us maintain and improve the service.

How we use information

• Provide, secure, and support customer workspaces.
• Send survey invitations, reminders, and service emails.
• Calculate customer feedback metrics, response rates, follow-up queues, and campaign analytics.
• Prevent abuse, enforce limits, troubleshoot issues, and maintain audit history.
• Process billing, plan usage, upgrades, and customer support requests.

Service providers

whatsrating uses trusted service providers for hosting, database infrastructure, email delivery, billing, product analytics, and error monitoring. Current examples include Vercel, PostgreSQL/Supabase infrastructure, Resend, Stripe, PostHog, and Sentry. We use these providers to deliver the service; we do not sell customer feedback data.

Cookies and analytics

We use essential cookies for authentication and workspace sessions. We may also use product analytics to understand feature usage, improve onboarding, and diagnose reliability issues. Product analytics are used to improve whatsrating, not to sell personal information.

Retention

We retain workspace and campaign data while an account is active and as needed for legitimate business, security, billing, legal, and backup purposes. Workspace admins can export data or request workspace data deletion from Settings. Some records, such as audit logs, billing records, suppressions, and backup copies, may be retained for a limited period where needed to comply with obligations or preserve service integrity.

Customer controls

Workspace admins can manage users, export data, revoke API keys, manage suppressions, and request workspace data deletion from Settings. Respondents can use unsubscribe links in campaign emails where available. For privacy questions, email hello@whatsrating.com.

Your rights

Depending on your location, you may have rights to access, correct, delete, or receive a copy of personal information, and to object to or restrict certain processing. To make a request, contact us from the email associated with the workspace or survey response so we can verify the request.

Security and transfers

We use administrative, technical, and organizational safeguards designed to protect customer information and maintain service reliability. If data is processed outside your region, we rely on service providers and safeguards appropriate for delivering the service.

Children's Privacy

whatsrating is intended for businesses and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided personal information through the service, contact us so we can review and remove it where appropriate.

Changes to this notice

We may update this notice as whatsrating, our providers, or legal requirements change. When changes are material, we will update the date above and provide notice through the website, product, or email when appropriate.