Privacy Policy

Last updated: October 21, 2026

This policy explains how Rated101 handles personal information when business owners use the service and when customers submit feedback through a Rated101 QR code or link. Rated101 is an early-stage service. The individual or legal entity operating it is not currently identified by name on this site. For privacy questions or requests, email support.rated101@gmail.com.

Information that may be collected

• Business owner accounts: email address, password, and authentication information needed to create, verify, sign in to, and recover an account. The sign-up and sign-in forms send credentials to Supabase Auth; passwords are not stored in business profile records.
• Business profiles: business name, category, and identifiers used to create and manage the business feedback page and its QR code or link.
• Customer feedback: the rating, optional feedback topic, optional comment, and optional name entered on the form. Customers do not need to create an account, and the form does not ask for an email address or phone number.
• Technical information: Cloudflare, Supabase, and other services involved in delivering the site or processing a request may receive connection information such as an IP address, browser or device details, and request timestamps. The exact fields and retention depend on provider and project configuration.

How information is used

Information is used to create and authenticate business owner accounts, maintain business feedback pages, receive and route customer submissions to the relevant business, show feedback and rating summaries in the owner's dashboard, enable owners to export their feedback, operate and protect the service, and respond to support or privacy requests. Rated101 does not use customer submissions as a public review listing.

Storage, service providers, and access

Rated101's website and request handling use Cloudflare Workers. The application uses Supabase Auth for owner sign-in, Supabase database services for account-related business and feedback records, and a Supabase-hosted public-feedback function for the public feedback form. The browser communicates with these services to provide the features described above.

A customer's submission is available to the signed-in owner of the business through the dashboard; it is not shown on the public feedback page. Cloudflare, Supabase, and their authorized personnel may process information as needed to provide, maintain, secure, or support their services. Access to a business's feedback is also subject to the project's account and database access configuration.

The site loads fonts from Google Fonts and client libraries from public CDNs, including jsDelivr and cdnjs (a Cloudflare service). When a browser requests those resources, the provider may receive technical request information. See the providers' Cloudflare Privacy Policy, Supabase Privacy Policy, and Google Privacy Policy.

Provider infrastructure or support may process information outside the Philippines, depending on provider locations and configuration. The active hosting regions, data-transfer arrangements, and provider log settings should be checked in the production Cloudflare and Supabase accounts.

Retention and deletion

We plan to delete customer feedback when its business page is deleted. If a business page is paused, we plan to retain its feedback for up to 60 days after the pause and then delete it. These deletion rules are planned and are not yet enforced automatically, so feedback may remain in the service longer until the process is implemented. Business owner account and business profile information is kept while the account is in use. An owner can request account and associated business-data deletion by emailing support.rated101@gmail.com; requests are handled manually.

Deletion from the live application may not immediately remove copies held in provider backups, security logs, or records that must be retained by law. Their retention periods depend on provider settings and applicable requirements. A business owner's downloaded CSV export is stored outside Rated101 and is not deleted by Rated101's feedback-retention process.

Protecting information

Rated101 relies on its hosting and database providers and the access controls configured for the service. No website or transmission method can be promised completely secure, and the configuration of the live infrastructure has not been independently audited. Customers should avoid including passwords, financial details, government identifiers, health information, or other sensitive personal information in an optional comment.

Your privacy rights

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), individuals may have rights to be informed, access or correct personal information, object to certain processing, request erasure or blocking where applicable, seek damages, file a complaint with the National Privacy Commission, and exercise data portability, subject to legal conditions and exceptions.

To ask a question or make a request, email support.rated101@gmail.com. Please identify the account or submission concerned and the request you are making; we may need to verify your identity before acting. A customer may also contact the business that received their feedback. Read the Data Privacy Act of 2012 or visit the National Privacy Commission for more information.

Changes and related pages

This policy may be updated as the MVP and its providers or practices change. The current version will be posted on this page with an updated date. See also the About Rated101, Terms of Service, and home page.