Rate My Server

Privacy Policy — Rate My Server

Current as of the effective date below. This policy is pending final review by counsel; please contact us with any questions.

Operated by: Rate My Pro, LLC ("Rate My Pro," "we," "us") App / service: Rate My Server (the "Service") Effective date: July 2, 2026 · Last updated: July 2, 2026 Contact: privacy@rate-myserver.com

1. Who this applies to

The Service has two kinds of users:

  • Pros — hospitality professionals who create a profile (server, bartender, sommelier, host, barista, chef, and similar roles).
  • Guests — people who follow and endorse Pros.

This policy explains what we collect from each, why, and the choices you have.

2. Our core privacy commitments

  • We do not collect or store negative reviews, ratings, or complaints about any person. The Service is built to capture positive endorsements only.
  • Follower identities are private — even from the Pro. A Pro can see follower counts and aggregate endorsements, never the identity of who followed or endorsed them.
  • We do not sell your personal information.

3. Information we collect

From Pros (account holders):

  • Identity & sign-in: name, chosen handle, and the identifier from your sign-in method (Sign in with Apple, Google, phone number, or email). We store sign-in identifiers in hashed/limited form where practical.
  • Account recovery email (optional). If you add a recovery email, we store it to send you a one-time code should you lose access to your sign-in email. It is never shown in full to anyone but you (as a mask), never shared, and is deleted when you delete your account or complete a recovery.
  • Profile content you provide: photo, bio, city, role(s), specialties, work history (venues + dates), and awards.
  • Verification material (optional): receipt images or location signals you submit to verify employment or guest visits.
  • Device & technical: device identifiers, app version, and a push token (Firebase Cloud Messaging) if you enable notifications.
  • Usage: scans of your QR/Smart Link, profile views, and feature usage.

From Guests:

  • Minimal identity to make a follow durable and to deliver "your favorite Pro moved" notifications: one of a phone number, email address, or an Apple/Google sign-in identifier. We store this in hashed/limited form where practical. No password or guest profile is required.
  • Your follows and the positive endorsement tags you select.
  • Optional verification data: a receipt photo or approximate location, only if you choose to verify a visit.
  • Device & technical data and a push token, if you install the app and enable notifications.

We do not ask for or store: payment card numbers (any future payments are handled by a third-party processor), government IDs, or sensitive categories of data, except where you voluntarily submit a receipt image for verification.

4. How we use information

  • Provide and operate the Service (create profiles, enable following and endorsing).
  • Send notifications about Pros you follow (e.g., a job change) and service messages. Marketing or non-essential messages are opt-in where required.
  • Verify guest visits and employment to maintain trust in endorsements and scores.
  • Compute the Hospitality Score and aggregate, non-identifying statistics shown on profiles.
  • Protect the Service: prevent spam, fake endorsements, impersonation, and abuse.
  • Improve the Service through analytics.
  • Comply with law and enforce our Terms and Community & Content Policy.

5. Legal bases (EEA/UK users)

Where GDPR/UK GDPR applies, we rely on: performance of a contract (operating your account), consent (push/SMS/email where required, and optional verification data), legitimate interests (security, anti-abuse, product improvement), and legal obligation. You may withdraw consent at any time.

6. How we share information

We share personal information only with:

  • Service providers acting on our behalf. Currently active: Supabase (database, authentication, storage), Vercel (web hosting), Resend (transactional email), Google Maps Platform / Places (venue search), and Sentry (error/crash monitoring, when enabled). Planned but not yet active: Firebase Cloud Messaging (push notifications), Twilio (SMS), RevenueCat (subscriptions, Phase 2), and PostHog (product analytics, EU-hosted and only after you opt in — see our Cookie Policy). Each may process data only to provide services to us.
  • Future employer/recruiter features (Phase 2+): we may display a Pro's public profile, aggregate endorsements, and Hospitality Score to employers searching for talent. We will never disclose follower or endorser identities. Pros control the visibility of their profile.
  • Legal & safety: to comply with law, respond to lawful requests, or protect rights, safety, and the integrity of the Service.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy.

We do not sell personal information and do not share it for cross-context behavioral advertising.

7. Your choices and rights

Depending on where you live (including under CCPA/CPRA in California and GDPR/UK GDPR), you may have the right to: access the personal information we hold, correct it, delete it, port it, restrict or object to certain processing, and not be discriminated against for exercising these rights. Because we do not sell personal information, there is no sale to opt out of.

  • Pros and Guests can edit or delete their account and request data export from in-app Settings, or by emailing privacy@rate-myserver.com. You can permanently delete your account and all associated data at any time at rate-myserver.com/account/delete — this is immediate and irreversible.
  • Notifications: manage push in your device settings; unsubscribe from email via the link in each message; reply STOP to opt out of SMS.

We will verify requests and respond within the time required by applicable law. You may also have the right to lodge a complaint with your data protection authority.

8. Data retention

We keep personal information for as long as your account is active and as needed to provide the Service, then delete or anonymize it within a reasonable period, unless a longer period is required for legal, security, or fraud-prevention purposes. Aggregate, non-identifying data may be retained.

9. Children

The Service is intended for users 17 and older. We do not knowingly collect personal information from anyone under 17. If you believe a minor has provided us information, contact privacy@rate-myserver.com and we will delete it.

10. Security

We use administrative, technical, and organizational safeguards (including access controls and row-level security in our database, and encryption in transit) designed to protect personal information. No system is perfectly secure; we cannot guarantee absolute security.

11. International transfers

We may process and store information in the United States and other countries. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

12. Changes to this policy

We may update this policy. We will post the new effective date and, for material changes, provide additional notice. Continued use after changes means you accept the updated policy.

13. Contact

Questions or requests: privacy@rate-myserver.com · Rate My Pro, LLC, Greer, South Carolina.

Terms of Service · Rate My Server home