Privacy Policy

Version: 2026-10-18.2. Updated 18 October 2026.

RateIt provides business listings and user reviews at rateit.pk. The published contact addresses are info@rateit.pk for data questions and complaints@rateit.pk for content reports. Delivery and response times are not guaranteed by the website.

Account data

Authentication uses an email address or phone number and a one-time code where delivery is configured. A code establishes access to that address or number, not a person's legal identity. New accounts declare that they are 18 or older and accept the stated policy version. The server records the acceptance time. This is self-attestation, not verified age.

The current signup form does not ask for a date of birth. Dates collected by the earlier form remain private pending an individual retention review. Signing in does not overwrite policy acceptance. Older accounts without a versioned record are not treated as having accepted a later policy; they can explicitly record acceptance in their account settings.

Profiles contain a public handle and optional profile information such as an avatar, city and language preference. Private fields can include a phone number, real name, birth date and an identity hash where previously supplied.

Contributions and evidence

We store submitted reviews, ratings, revisions, replies, complaints, appeals and associated moderation decisions. Published eligible reviews and approved media can be public. Drafts and held content have restricted visibility. Complaints and their timelines are private to permitted participants and staff; filing one does not automatically publish an allegation.

Receipts, payment references, tracking references and claim documents can contain personal data. Access is restricted. Do not include unnecessary third-party information. Uploading evidence or having it inspected does not establish provider confirmation or prove every statement in a review.

Technical records include request budgets, upload reservations, processing jobs, moderation outputs, audit records and operational logs. These support service delivery, abuse prevention and troubleshooting. Automated assessments can be wrong and are not findings of fraud.

Processing and access

RateIt uses Supabase for authentication, database and file storage, and Vercel for the website. The moderation code can send content to configured AI providers. Authentication delivery depends on the configured provider. Processing can occur outside your country. Provider configuration, contractual arrangements and applicable transfer requirements need to be assessed separately; this page does not assert that every transfer is legally permitted.

Database permissions and scoped application routes restrict private data. Some staff decisions are audited. We do not claim that every sensitive read is logged or that privileged access is tamper-proof. Files deliberately made public can be copied by others. Short-lived playback links can remain usable until they expire.

Access, retention and erasure

At Your account data, signed-in users can download selected personal records in bounded pages and request a wider access review. These downloads are not a complete archive: evidence files, provider-held records and records involving other people require separate review.

You can record an erasure request. A receipt confirms intake only. Automatic account erasure is unavailable. Review text, evidence files, business ownership, private cases, audit attribution and provider records need individual decisions before deletion or redaction. We do not promise that closing an account automatically anonymizes all content or preserves anonymous reviews publicly.

A final category-specific retention schedule has not been approved. This is an unresolved limitation, not a claim of a legal right to retain data indefinitely. Backup and provider copies require separate handling. Contact info@rateit.pk to raise an access, correction or erasure concern, including if you cannot sign in.

Security and updates

We use access controls and encrypted transport. No service can guarantee absolute security. Applicable incident-response duties require assessment of the incident and jurisdiction; this page does not state that notification is legally unnecessary.

The 18+ threshold is RateIt's existing product eligibility rule. If an account may belong to a younger person, report it for review. Do not submit an identity document through a public review. This policy does not promise automatic deletion before review.

Future material changes receive a new version. Operator identification, retention decisions, provider arrangements and qualified legal review remain outstanding; this notice is not legal certification.