# Privacy Policy

> How RatingFlow collects, uses, stores and shares your data.

## 1. Information We Collect

We collect information you provide directly, including: name, email address, payment information, and business details. We also collect usage data such as IP addresses (hashed for privacy), browser type, and interaction data.

## 2. How We Use Your Information

We use collected information to: provide and maintain the Service; process payments; send notifications; improve user experience; detect and prevent fraud; and comply with legal obligations.

## 3. Data Storage and Security

Your data is encrypted in transit using TLS and at rest using AES-256 encryption. We use industry-standard security measures to protect your information. IP addresses are hashed before storage to protect reviewer privacy.

## 4. Data Sharing

We do not sell your personal information. We may share data with: payment processors (DodoPayments) to process transactions; email service providers to send notifications; and cloud providers (Cloudflare) for hosting and security.

## 5. Cookies

We use essential cookies for authentication and session management. Analytics cookies are optional and require your consent. You can manage cookie preferences in your browser.

## 6. Your Rights

You have the right to: access your personal data; request corrections; request deletion; export your data; and withdraw consent for optional processing. Contact us to exercise these rights.

## 7. Data Retention

We retain account data for as long as your account is active. Review data is retained for 3 years after collection. You may request deletion at any time.

## 8. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

## 9. Contact Us

For privacy-related inquiries, contact our Data Protection Team at privacy@ratingflow.co.