Privacy Policy
Last Updated: [Date]
Effective Date: [Date]
1. Introduction
Rate My Advisor ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
2. Information We Collect
Personal Information
- Email addresses (for authentication via magic link)
- .edu email addresses (for verification, stored as hash)
- IP addresses (for rate limiting and security purposes)
User-Generated Content
- Reviews and ratings submitted by users
- Reports submitted for moderation
- Moderation actions (admin users only)
Automatically Collected Information
- Browser type and version
- Device information
- Usage analytics (via Vercel Analytics)
- Error logs and performance metrics
3. How We Use Information
- Provide and improve our services
- Authenticate users and manage accounts
- Moderate content and prevent abuse
- Prevent spam and fraudulent activity
- Comply with legal obligations
- Analyze usage patterns to improve user experience
4. Information Sharing
We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:
- Service Providers: With trusted service providers (Vercel, Supabase/Neon) who assist in operating our platform
- Legal Requirements: When required by law, court order, or government regulation
- With Your Consent: When you explicitly consent to sharing
5. Data Security
- All data transmitted over HTTPS (encrypted in transit)
- Passwords hashed using bcrypt
- .edu email addresses hashed before storage
- Secure database connections with SSL
- Regular security audits and updates
6. Data Retention
- Reviews: Retained indefinitely unless deleted by user or removed for policy violations
- User Accounts: Retained while account is active; deleted upon account deletion request
- Logs: Retained for 90 days for security and debugging purposes
- Backups: Retained according to backup retention policy
7. Your Rights
You have the right to:
- Access your personal data
- Request deletion of your account and data
- Request export of your data
- Opt out of analytics tracking
- Withdraw consent for data processing
To exercise these rights, contact us at: privacy@ratemyadvisor.com
8. Children's Privacy
Our service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy, please contact us:
- Email: privacy@ratemyadvisor.com
- Data Requests: data@ratemyadvisor.com