Privacy Policy
Effective date: 19 July 2026
RatingEcho ("we", "us") is a restaurant feedback, ordering, and loyalty platform. This policy explains
what information we collect, why, and what happens to it — whether you are a restaurant owner using the
RatingEcho dashboard or a diner interacting with a restaurant through a RatingEcho QR code.
Information we collect
- Restaurant owners: your name and email address (from Google Sign-In or phone
authentication), restaurant profile details (name, address, phone, cuisine, logo), and your
subscription plan.
- Diners: the name and phone number you choose to provide when leaving feedback,
joining a table, or enrolling in a restaurant's loyalty program; your star ratings and review text;
and the items you order at a table.
- Automatically: basic technical data needed to run the service (authentication
tokens, timestamps). We do not collect precise location, contacts, or advertising identifiers.
How we use it
- To operate table ordering, billing, feedback collection, and loyalty rewards for the restaurant
you're visiting.
- To let restaurants send you a review invitation by WhatsApp or SMS after your visit, using the
phone number you provided. You can ask the restaurant or us to stop these at any time.
- To provide optional AI features: if you tap "Polish with AI", your review text is sent to an AI
model provider to improve grammar and flow, and review text may be analysed to help the restaurant
understand feedback. AI providers process this text to provide the feature and do not receive your
name or phone number alongside it.
- To process restaurant subscription payments through Razorpay. We never see or store card numbers —
payment details go directly to Razorpay.
Where your data lives
RatingEcho runs on Google Firebase (Firestore, Authentication, Cloud Functions, Hosting). Data is
stored on Google Cloud infrastructure. Messages are delivered via Twilio. Payments are processed by
Razorpay. Each of these providers processes data under their own security and privacy commitments.
Retention and deletion
- Detailed order items are automatically deleted 30 days after an order; only a summary (total,
date, table) is kept for the restaurant's records.
- Feedback, loyalty, and profile data are kept while the restaurant's account is active.
- You can request deletion of your personal data at any time by emailing us (below). Restaurant
owners can delete their account and its data from the app's settings.
What we don't do
- We do not sell personal data.
- We do not show ads or share data with advertisers.
- We do not knowingly collect data from children under 13. The service is intended for adults.
Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal
data. To exercise any of these, contact us and we will respond within 30 days.
Changes
If this policy changes materially, we will update the effective date above and, for restaurant
owners, note the change in the app.
Contact
Email: help@ratingecho.com