Privacy Policy

Your identity is never revealed. We hash your email before storing it — meaning we cannot read it, even if we wanted to. We never sell your data. We never display your personal information publicly.

Email address — Required when submitting a review to prevent duplicates and verify employment. Your email is immediately converted into a one-way SHA-256 hash before being stored. The original email address is never saved anywhere in our system. Not even we can recover it.

Email domain — The part after the @ symbol (e.g. google.com) is stored separately and used only to display the "Verified Employee" badge when your domain matches the company's registered domain.

Review content — Your ratings, pros, cons, job title, employment type, and tenure. This is the content you explicitly choose to submit.

IP address — Temporarily checked against a rate limit (5 submissions per hour) to prevent spam. Not stored in our database.

We do not collect your name, phone number, location, browser fingerprint, or any social media identifiers. We do not use tracking cookies or advertising pixels. We do not build profiles on individual users.

Data is stored in Supabase (PostgreSQL), hosted on AWS infrastructure in the United States. Access is restricted to the site administrator only. Row-level security policies ensure that only approved, anonymous review content is publicly accessible.

Public — Your review content (ratings, pros, cons), job title, employment type, and how long ago the review was submitted. Nothing that identifies you personally.

Admin only — Hashed email (unreadable), email domain, and review status (pending / approved / flagged).

No one — Your original email address. It is mathematically destroyed the moment you submit.

Review content is retained indefinitely unless you request removal or it is removed by our moderation team. Because emails are hashed, we cannot identify or delete data tied to a specific email after submission. If you wish to remove a review you submitted, contact us with enough identifying detail about the review (manager name, company, approximate date) and we will remove it.

Because we do not store recoverable personal data (emails are irreversibly hashed), we are unable to fulfil subject access requests for email-linked data. Review content can be removed upon request. If you are an EU resident and have concerns, contact us at the address below.

Cloudflare Turnstile — Used on the review form to verify you are a human. Turnstile is privacy-friendly and does not use cookies or track individuals. See Cloudflare's privacy policy.

Vercel — Hosts the application. Vercel may log request metadata (IP, URL, timestamp) for up to 30 days for infrastructure purposes.

We may update this policy as the platform evolves. Significant changes will be noted at the top of this page with an updated date.

Questions about this policy? Reach us at privacy@ratemymanager.com