Privacy Policy

Introduction:
This Privacy Policy explains how Rating Sky, operated by RATING SKY SL, collects, processes, and protects your personal data. Our goal is to manage online reviews effectively and operate our SaaS platform in compliance with applicable data protection laws, including the GDPR.

Data Controller Information:

• Legal Company Name: RATING SKY SL
• CIF: B40658189
• Registered Address: Urb. Tancat del alter 21-7B, 46220, Picassent, Spain
• Contact Email: [email protected]

Data Collection & Processing:
We collect and process the following types of data:

• User Details: Information provided during account registration and profile updates.
• Integration Data: Details regarding ecommerce platform integrations (e.g., WooCommerce, Shopify) used to facilitate review management.
• Orders: Data related to customer orders from our users’ ecommerce platforms.
• Campaigns: Information about review request campaigns and associated email communications.
• Feedback: Data from customer reviews and feedback events.
• Subscriptions: Information about subscription status, billing, and credits.

This data is collected via our service—primarily from our customers’ ecommerce platforms—and stored in our database structured around key entities such as users, integrations, orders, campaigns, feedback threads, feedback messages, and subscriptions. The purpose of collecting this data is to manage online reviews proactively and to operate our SaaS platform efficiently.

Legal Basis for Processing:
Our processing of personal data is based on:

• User Consent: Where users have explicitly agreed to the processing of their data.
• Contractual Necessity: Processing that is required to fulfill our contractual obligations to our users.
• Legal Compliance: Adherence to applicable data protection laws and regulations.

User Rights:
Under the GDPR, you have the right to:

• Access: Obtain information about your personal data.
• Rectification: Correct any inaccurate or incomplete data.
• Deletion: Request the deletion of your personal data.
• Restriction: Restrict the processing of your data.
• Data Portability: Receive your data in a structured, commonly used format.
• Objection: Object to the processing of your data.

To exercise any of these rights, please contact us using the information provided below.

Data Retention & Security:
We retain your personal data for as long as necessary to fulfill the purposes described in this policy, based on legal, contractual, and business requirements. We implement robust security measures—including encryption and access controls—to protect your data against unauthorized access, alteration, or disclosure.

Contact Information:
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
Email: [email protected]