Privacy Policy

Last updated: 16 September 2026

This Privacy Policy explains how RatingWall ("RatingWall," "we," "us") collects, uses, shares, and protects information when you use ratingwall.com, our dashboard, and the RatingWall service (together, the "Service"). RatingWall is operated by Hara Infotech Pvt Ltd, based in India.

By using the Service, you agree to the collection and use of information as described here. If you don't agree, please don't use the Service.

1. Who this applies to

This policy covers two kinds of people:

• Business users ("tenants") — the businesses and individuals who sign up for a RatingWall account to collect and publish testimonials.
• End customers — the people a tenant invites to leave a testimonial, reached over WhatsApp, a shared link, or a QR code, whose reply (text, voice note, or video) is submitted through RatingWall on the tenant's behalf.

If you're an end customer replying to a testimonial request, the business that sent it is the one responsible for how they use your testimonial — this policy explains what RatingWall itself does with the data as their service provider.

2. Information we collect

Account information: name, email address, phone number, password (stored as a salted hash, never in plain text), and business details you provide when signing up.

Testimonial content: the text, audio, or video a customer submits in response to a testimonial request, along with any name, photo, or business name they choose to include, and their WhatsApp phone number where applicable.

Derived content: automated transcripts of voice/video testimonials, machine translations into other languages, and AI-generated sentiment/category tags and summaries, produced using our transcription, translation, and AI providers.

Billing information: plan, billing cycle, and transaction history. Card and payment details themselves are collected and processed directly by our payment processor (Razorpay) — RatingWall does not see or store your full card number.

Usage and device data: log data (IP address, browser type, pages visited, timestamps), cookies and similar technologies used to keep you signed in and remember preferences, and analytics (including Google Analytics) on how the marketing site, dashboard, and Wall of Love embed/badge are viewed and clicked.

Communications: messages sent and received over WhatsApp through the Service (testimonial requests, replies, consent confirmations, broadcast campaign messages, and STOP/unsubscribe replies), and any correspondence you send us directly (e.g. support emails).

3. How we use information

• To provide the Service — collecting testimonials over WhatsApp, a web link, or a QR code; transcribing, translating, moderating, and publishing them; running your Wall of Love; generating AI summaries and marketing assets; sending WhatsApp messages you've configured.
• To operate your account — authentication, billing, plan limits, and customer support.
• To communicate with you — service notices, security alerts, and (if you opt in) product updates.
• To maintain and improve the Service — debugging, security monitoring, and understanding how features are used in aggregate.
• To comply with legal obligations and enforce our Terms of Service.

We do not sell personal information, and we do not use testimonial content to train third-party AI models beyond what's strictly needed to generate the transcript, translation, or tag for that testimonial.

4. Legal basis for processing (EEA/UK users)

If you're located in the European Economic Area or the UK, we rely on the following legal bases under the GDPR / UK GDPR to process your personal information:

• Performance of a contract — processing a tenant's account, testimonial, and billing data is necessary to provide the Service they signed up for.
• Legitimate interests — for security monitoring, fraud prevention, debugging, and improving the Service, balanced against your rights and interests.
• Consent — for optional communications (e.g. product update emails), non-essential analytics cookies, and an end customer's decision to reply to a testimonial request in the first place. You can withdraw consent at any time, as described in Section 9.
• Legal obligation — where we need to retain or disclose information to comply with applicable law.

5. WhatsApp and messaging

RatingWall sends and receives messages through the WhatsApp Business Platform (operated by Meta). When a tenant sends a testimonial request or broadcast campaign message, the recipient's consent is required before further messages are sent, consistent with WhatsApp's own policies. Every message we send on a tenant's behalf includes a way to stop receiving messages (replying STOP or UNSUBSCRIBE), which we honor immediately and permanently for that number. Message content passes through Meta's infrastructure as part of normal WhatsApp delivery; Meta's own privacy policy also applies to that transmission. WhatsApp is one of several ways a tenant can collect testimonials — a plain web link or QR code works without any WhatsApp involvement at all, for tenants or end customers who'd rather not use it.

6. Who we share information with

We share information only as needed to run the Service, with providers bound by their own confidentiality and data-protection obligations:

• Meta / WhatsApp Business Platform — to send and receive WhatsApp messages.
• Our transcription and translation providers (Sarvam AI and Google Cloud) — to convert voice/video testimonials into text and translate testimonial text into other languages.
• Anthropic (Claude API) — to generate AI sentiment/category tags, summaries, and on-request rewrites of testimonial text.
• Razorpay — to process subscription payments.
• Cloudflare — for tenants using a custom domain for their Wall of Love, to route and secure that domain's traffic.
• Google Analytics — to understand aggregate traffic and usage on the marketing site.
• Our hosting provider — to store data and run the Service.

We may also disclose information if required by law, to protect the rights and safety of RatingWall or others, or in connection with a merger, acquisition, or sale of assets (with notice to affected users where required).

7. Support access to your account

Our support team can, when needed to resolve an issue you've raised, temporarily access a tenant account in a read/write "impersonation" mode. Every such access is logged in an internal activity log tied to the staff member who performed it. We don't do this without a reason tied to supporting your account.

8. Data retention

We keep account and testimonial data for as long as your account is active, plus a reasonable period afterward for legal, accounting, and dispute-resolution purposes. If you delete your account, associated testimonials, walls, and media are permanently removed; some records (e.g. billing history) may be retained longer where required by law.

9. Your rights

Tenants can export or permanently delete their account and all its data directly from Dashboard > Settings; end customers can reply STOP to any WhatsApp message to opt out at any time. See our Data Deletion page for step-by-step instructions.

If you're located in the European Economic Area, the UK, or another jurisdiction with similar data-protection law, you additionally have the right to:

• Access the personal information we hold about you, and get a copy of it;
• Correct inaccurate or incomplete information;
• Request erasure of your information ("right to be forgotten"), subject to legal retention obligations;
• Restrict or object to certain processing, including processing based on legitimate interests;
• Receive your information in a portable, machine-readable format;
• Withdraw consent at any time where processing is based on consent, without affecting processing that already took place;
• Lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, contact us using the details in Section 14 below. We'll respond to verified requests within the timeframe required by applicable law (generally one month under the GDPR).

10. Security

We use industry-standard safeguards — including encryption of sensitive credentials at rest, hashed passwords, and access controls — to protect information. No method of transmission or storage is completely secure, and we can't guarantee absolute security.

11. Children's privacy

The Service is intended for business use and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we'll remove it.

12. International data transfers

Our infrastructure and service providers may process data outside your home country, including in India, where we are based, and in other countries where our providers (Section 6) operate — including the United States. Where personal information is transferred from the EEA or UK to a country that hasn't been recognized as providing an adequate level of protection, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (or the equivalent UK International Data Transfer Addendum), with the providers involved in that transfer.

RatingWall does not currently have a dedicated representative appointed in the EEA or UK under Article 27 of the GDPR / UK GDPR. If you're an EEA or UK data subject and this is required for your engagement with us, or you have any related question, please contact us using the details in Section 14 and we'll follow up directly.

13. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify tenants directly.

14. Contact us

Questions about this policy or your data — including GDPR/UK GDPR requests — can be sent to [email protected].

This policy is provided as a general description of our data practices and isn't a substitute for legal advice. If your business has specific compliance requirements (e.g. under the GDPR, UK GDPR, India's Digital Personal Data Protection Act, or other applicable law), we recommend having it reviewed by counsel.