Privacy Policy

Overview

RateMyBuilding (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

Information We Collect

Account Information

When you sign in with Google, we receive your name, email address, and profile picture from Google. This information is used solely for authentication and is never displayed publicly alongside your reviews.

Review Content

When you submit a review, we store the ratings, text, and tags you provide. Reviews are displayed anonymously—no identifying information is attached to your public reviews. Written review text is subject to moderation before publication; star ratings and tags are displayed immediately.

Usage Data

We collect standard server logs including IP addresses, browser type, and pages visited. IP addresses associated with reviews are stored for abuse prevention and are only accessible to administrators.

Activity Logs

We maintain internal activity logs that record key account and content events (such as review submissions, account deletion requests, and administrative actions). These logs contain your user ID and event metadata but do not contain review text or personal information. Activity logs are used for security, abuse prevention, and compliance purposes and are only accessible to administrators.

How We Use Your Data

• To authenticate your identity and prevent spam
• To display anonymous reviews on building pages
• To moderate review content for compliance with our Terms of Service
• To detect and prevent abuse (rate limiting, ban enforcement)
• To improve the service and fix bugs

We do not sell your personal data. We do not use your data for advertising. We do not share your data with third parties except as described below.

Content Moderation

Written review text is reviewed by our team before publication. During this process, administrators may access the review text and associated metadata (submission time, IP address) to assess compliance with our guidelines. We do not share review content with third parties for moderation purposes, though we may use automated tools in the future to assist with content review.

Third-Party Services

• Google— for authentication (OAuth) and address autocomplete (Places API). Subject to Google’s Privacy Policy.
• Supabase— for database hosting and authentication infrastructure.
• Cloudflare Turnstile— for bot protection on form submissions.
• Vercel— for application hosting.

Data Retention

Your account data is retained as long as your account is active. While your account is active, reviews and their edit history are retained indefinitely to maintain the integrity of building rating data. If you delete your account, see Account Deletion below for the retention schedule. Rejected review text may be retained for abuse prevention purposes.

Account Deletion

You may delete your account at any time from your account settings. When you delete your account:

• Your profile and personal data (name, email address, profile picture) are deleted immediately
• Your helpfulness votes and any reports you submitted are deleted immediately
• Tag suggestions you submitted are anonymized immediately (no longer linked to you)
• Your reviews are anonymized—all identifying information (user ID, IP address) is removed so the reviews can no longer be linked back to you. Any written text in your review edit history is also scrubbed immediately; only aggregate ratings are retained
• Anonymized reviews are retained for 90 days to maintain the integrity of building ratings, after which they are permanently deleted along with their edit history, tags, and votes on them
• Your authentication record is soft-deleted immediately (disabling access) and permanently purged after 90 days
• Feedback you submitted (bug reports, feature requests) is anonymized when your authentication record is purged after 90 days

Admin accounts cannot be deleted through the self-service flow; contact another admin if needed.

This process is irreversible. Once your account is deleted, it cannot be recovered.

If your account is restricted or suspended, your account data and review content are retained but your reviews are hidden from public view. You may still delete your own reviews if your account is restricted (review-banned). If your account is fully suspended, your data is retained for abuse prevention and may be deleted upon request by contacting us.

Cookies

We use essential cookies for authentication session management. We do not use tracking cookies or third-party advertising cookies.

Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Delete your account and personal data at any time from your account settings (see “Account Deletion” above)
• Object to processing of your data

For access, correction, or other requests, contact us at privacy@ratemybuilding.com.

Changes

We may update this policy from time to time. Material changes will be communicated through the platform. Continued use of the service after changes constitutes acceptance of the updated policy.