Privacy Policy

If you're a creator:

• Account details: your email, password (stored hashed by our auth provider) and, if you sign in with Google, your name and profile photo from Google.
• Your public page: name, username, bio, photos, prices and offers.
• Payout details: your legal name, country and bank account, which go to our payment partners to verify you and pay you.

If you're a fan:

• Your name, email and anything you write in a booking or video request.
• Payment details, which you enter on Bachs' or Stripe's checkout page. We only receive a payment reference and status, never your full card number.

Everyone:

• Calls and video replies: video and audio are streamed during a call but we don't record calls. Video replies a creator uploads are stored so the fan can watch them.
• Usage data: pages viewed, buttons clicked, device and browser type and approximate location, used to understand how Ratecard is used and fix problems.

• To run your account, show your public page and process bookings and payments.
• To send emails about your account and bookings, such as confirmations, reminders and refunds.
• To prevent fraud, enforce our Terms and meet legal and tax obligations.
• To improve Ratecard. We may send you product updates; you can unsubscribe from those at any time.

We process your data to perform our agreement with you, to meet legal obligations, and for our legitimate interest in running and protecting the service.

We share data only with the services that help us run Ratecard, and only what each needs:

• Supabase — database, file storage and login.
• Bachs and Stripe — payments, payouts and identity checks.
• Daily — video calls.
• Resend — sending emails.
• PostHog — product analytics.
• Google — only if you choose to sign in with Google.
• Vercel and Render — hosting.

Creators see the name, email and booking details of fans who book them. We may also share data if the law requires it, to protect someone's safety, or as part of a sale or merger of Ratecard.

Some of these providers store data outside Nigeria, including in the United States and the European Union. We rely on their contractual safeguards when data is transferred.

We use storage in your browser to keep you logged in and remember your preferences, and PostHog uses cookies to measure how the site is used. You can block cookies in your browser, but logging in may stop working.

We keep your account data while your account is open. When you close it we delete or anonymise it within 30 days, except payment and booking records, which we keep for up to 6 years for tax and legal reasons.

You can ask to see, correct, export or delete your data, or object to how we use it. Email hello@tryratecard.com and we'll reply within 30 days. If you're unhappy with our response, you can complain to the Nigeria Data Protection Commission or the data protection authority where you live.

Data is encrypted in transit, access to it is limited, and payments are handled by PCI-compliant providers. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.

Ratecard isn't meant for anyone under 18, and we don't knowingly collect data from children. If you think a child has given us data, email us and we'll delete it.

If we make significant changes to this policy we'll email you or post a notice on the site before they take effect.