Privacy Policy
Application name: RateHub · Domain: ratehub.com.ar · Last updated: September 22, 2025
1. Introduction
RateHub ("we," "our," "the application") is a reputation management platform for local businesses with multiple locations, operated from Argentina. This Privacy Policy explains what personal data and third-party data (in particular, Google data) we collect, how we use it, how we protect it, and what rights users have.
By using RateHub, the user agrees to the practices described in this policy. If you do not agree, you must refrain from using the service.
2. Google Business Profile Data We Access
RateHub accesses users' Google Business Profile data through the Google Business Profile API, and only after the user explicitly authorizes it via the official Google OAuth 2.0 authorization protocol. The data we access includes:
- Business locations: name, address, category, and details of each location associated with the user's Google Business Profile account.
- Reviews: text, rating (1–5 stars), date, and author of each review published on the user's locations.
- Ratings: average score and rating distribution per location.
- Review replies: responses the business owner has published in reply to reviews, and the ability to post new replies on behalf of the user (subject to the user's confirmation within the platform).
We do not access end-user data from Google that does not belong to the business itself, nor do we access the user's personal Google account information (personal email, contacts, calendars, Drive, etc.).
3. How We Use the Data
Google Business Profile data is used exclusively to provide the user with RateHub's service features:
- Displaying a consolidated dashboard with reviews and ratings across all locations.
- Sending alerts when a new review or low rating is received.
- Assisting in drafting review responses (using AI technology) and publishing them when confirmed by the user.
- Facilitating the sending of review request invitations to customers on Google.
- Generating monthly reputation evolution reports per location.
Google data is NOT used for advertising, profiling, or any purpose unrelated to the reputation management features described herein. Data is never sold to third parties under any circumstances.
4. Data Sharing with Third Parties
RateHub does not sell or transfer user data to third parties. Data may be shared only with technical sub-processors strictly necessary to operate the service, including:
- Cloud infrastructure providers (e.g., servers, databases) that process data on behalf of RateHub.
- AI providers for AI-assisted review response generation. These providers do not retain data beyond the processing of the specific request.
All sub-processors operate under confidentiality agreements and only access the minimum data required to fulfill their function.
We may disclose personal data if required by a competent judicial or legal authority, in which case we will notify the user to the extent permitted by law.
5. Data Storage and Security
Collected data is stored on servers hosted in trusted cloud infrastructure. We apply the following security measures:
- Encryption in transit: all communications between the user and RateHub, and between RateHub and Google's API, are conducted using TLS 1.2 or higher (HTTPS).
- Encryption at rest: sensitive data stored in databases is encrypted at rest.
- Access control: only RateHub personnel with an operational need may access data, under authentication and access logging.
- OAuth tokens: Google access and refresh tokens are stored in encrypted form and are never exposed in logs or user interfaces.
6. Data Retention and Deletion
Google Business Profile data is retained for as long as the user's account is active on RateHub and the OAuth authorization remains in effect.
Data deletion occurs in the following cases:
- Revocation of OAuth access: if the user revokes access from their Google account (at myaccount.google.com/permissions), RateHub immediately loses access to that user's Google data. Data already stored will be deleted within a maximum of 30 days from the revocation.
- Deletion request: the user may request deletion of all their data by emailing privacy@ratehub.com.ar. We will process the request within 30 days.
- Account closure: upon account deactivation, all personal data and Google Business Profile data will be deleted within 30 days, unless there is a legal obligation to retain it.
Data that has been irreversibly anonymized (with no possibility of re-identification) may be retained for longer for internal analytics purposes.
7. User Rights
In accordance with Argentina's Personal Data Protection Act (Law 25.326) and applicable regulations, users have the right to:
- Access: request information about what personal data we hold about you.
- Rectification: ask us to correct inaccurate data.
- Erasure: request deletion of your personal data (see Section 6).
- Objection: object to the processing of your data in certain circumstances.
- Portability: receive your data in a structured and commonly used format.
To exercise any of these rights, contact us at privacy@ratehub.com.ar. We will respond within a maximum of 30 business days.
The Agencia de Acceso a la Información Pública (AAIP) is the data protection supervisory authority in Argentina.
8. Compliance with Google API Services User Data Policy
RateHub's use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- Access to Google API data is limited to the uses described in this policy and to the features explicitly requested by the user.
- Google API data is not transferred to third parties except as necessary to provide the service features, for security purposes, or as required by law.
- Google API data is not used to develop, improve, or train generalized AI/ML models without the user's explicit consent.
- Google API data is not used for advertising or for purposes that violate Google's policies.
- Humans at RateHub do not read Google API data unless required for security purposes, to comply with applicable law, or with the user's explicit consent.
RateHub's use of Google API data adheres to the Google API Services User Data Policy, including the Limited Use requirements.
9. Cookies and Similar Technologies
RateHub may use strictly necessary session and authentication cookies for the operation of the service. We do not use third-party advertising or profiling tracking cookies.
10. Changes to This Policy
We may update this policy periodically. When we do, we will update the "Last updated" date shown at the top. Material changes will be communicated by email to registered users at least 15 days in advance.
11. Contact
For questions about this privacy policy or to exercise your rights:
- Privacy email: privacy@ratehub.com.ar
- General email: hola@ratehub.com.ar
- Website: ratehub.com.ar