Privacy

If you use Rateful as a creator

• Account: your name, email, TikTok handle, password (stored only as a hash) and the rate card you set.
• Brand emails: mail sent to your Rateful deals address, and, if you connect Gmail or Outlook, only the messages Rateful identifies as brand deals. We use them to draft and send replies, track deals and remind you of deadlines.
• Deals and payments: agreements, deliverables and payment status. Card and bank details are handled by Stripe; we never see full card numbers.
• Notifications: your phone number, only if you turn on text or WhatsApp approvals.

If you are a brand

We keep the emails you send a Rateful creator, the deal terms you agree, and payment records from Stripe, so the deal can be run and both sides have a record.

If we emailed or messaged you first

We contact TikTok Shop creators who publish a business contact, to offer a tool that is relevant to their work. For each creator we keep only:

• your public TikTok handle, display name and public profile numbers (followers, likes, videos);
• the business email you published on your TikTok profile or your link-in-bio page, with where and when we saw it;
• whether you replied, signed up or asked us to stop.

We never buy personal data, never sell it, and never text or call people we have not spoken to. If you don't reply or sign up, we delete your details 30 days after our last email. You can object at any time: reply "stop", click unsubscribe, or email privacy@rateful.ai, and we will stop contacting you and delete your details, keeping only your email on a do-not-contact list so it never happens again.

Where privacy law asks for a legal basis (for example the GDPR or Brazil's LGPD), ours is legitimate interest in telling professional creators about a product for their business, balanced by short retention and an easy way out.

How AI is used

Rateful uses AI models (currently from Anthropic) to read brand emails and draft replies. Your content is sent to the model provider only to produce those replies, and is not used to train their models.

Google and Microsoft data

Rateful's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We read only what is needed to find and answer brand deals, never use it for advertising, and never let people read it except with your permission, for security, or where the law requires. You can disconnect Gmail or Outlook at any time in Connections, and we stop syncing immediately.

Who processes data for us

Vercel (hosting), Neon (database), Stripe (payments and payouts), Postmark (email delivery), Anthropic (AI), Google and Microsoft (only if you connect your inbox), Twilio (texts, only if you turn them on) and Expo (push notifications in the mobile app). Each handles data only to provide its service to us.

Where data is stored

Data is stored in the United States. When we receive personal data from the EU, UK or Switzerland, we rely on the EU-US Data Privacy Framework where our providers are certified, and on standard contractual clauses otherwise.

How long we keep it

Account data is kept while your account is open and deleted within 30 days of closing it. Payment and tax records are kept as long as the law requires. Outreach contacts are deleted as described above.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it, by emailing privacy@rateful.ai. We answer within 30 days. You can also complain to your local data protection authority.

Children

Rateful is for people 18 and over. We do not knowingly contact or collect data from anyone younger.

Changes

If we change this page in a way that matters, we will tell account holders by email before it takes effect.