Privacy Policy

1. Overview

Rate My Agency is built around reviewer anonymity. This policy explains what information we collect, how we use it, and the specific ways your identity is protected. It applies to everyone who uses the Service.

2. What We Collect

• Account data: your email address and a securely hashed password, managed by our authentication provider.
• Content: reviews, ratings, flags, and agency or supervisor submissions you create.
• Technical data: standard server logs such as IP address and browser type, processed by our infrastructure providers to operate and secure the Service.

3. How We Use It

• Signing you in and securing your account.
• Enforcing the one-review-per-agency and one-review-per-supervisor limits.
• Moderation, abuse prevention, and protecting the integrity of scores.
• Computing the aggregate ratings and rankings displayed on the site.

We do not use your data for advertising and we do not sell personal information.

4. How Anonymity Works

Public pages never display who wrote a review. This is enforced in the database itself: public reads go through views that physically exclude author identity, and row-level security prevents users from reading the link between accounts and reviews. That internal link exists only to enforce review limits and support moderation, and is accessible only to the service infrastructure and site moderators acting under our moderation policy.

5. Sharing

We share data only with the infrastructure providers that run the Service (currently Supabase for database and authentication, and Vercel for hosting), and when required by valid legal process such as a subpoena or court order. Where feasible and lawful, we will object to requests that are overbroad. See the Terms of Service for more on the limits of anonymity.

6. Retention and Deletion

Account data is kept while your account is active. If your account is deleted, published reviews may be retained in anonymized form to preserve the integrity of agency scores, or removed at our discretion. To request deletion of your account or content, contact us via the About page.

7. Security

Data is encrypted in transit, passwords are hashed, and access to identity data is restricted as described above. No system is perfectly secure; use a strong, unique password.

8. Cookies

We use only the session cookies required to keep you signed in. There are no third-party advertising or tracking cookies.

9. Children

The Service is not directed to anyone under 18, and we do not knowingly collect their data.

10. Changes and Contact

We may update this policy; material changes will be reflected by the date above. Questions: use the contact information on our About page.