Privacy Policy

RHAWK is a product of RHAWK ("RHAWK", "we", "us", "our"). This policy explains what personal data we collect, why we collect it, and what rights you have. It applies to the RHAWK website, the customer dashboard, our public review widgets, and any related services (the "Services").

• Account data — name, work email, business name, industry, phone, and address entered during signup or onboarding.
• Business listing data — publicly available information from directories you ask us to monitor (Google, Yelp, Facebook, Angi, HomeAdvisor, Houzz, BBB, YellowPages, BuildZoom and others).
• Review content — public reviews, star ratings and reviewer display names on those directories.
• Customer contact data — the names, emails and phone numbers you upload to send review-request messages.
• Usage data — pages visited inside the app, widget impressions and clicks, and diagnostic logs.
• Payment data — handled by Stripe. We never store full card numbers on our servers.
• Support data — messages you send us and any attachments you include.

• Deliver the dashboard, scans, review inbox, widgets, badges and any other features you sign up for.
• Send transactional messages (auth, receipts, alerts, review notifications).
• Detect abuse, secure the platform and prevent fraud.
• Improve accuracy of scans, listing matching and AI-drafted replies.
• With your consent, send occasional product news. You can unsubscribe from any message.

We process personal data under the following bases: (a) performance of a contract (delivering the Services you signed up for); (b) legitimate interests (security, product improvement, direct marketing to existing customers); (c) consent (marketing to prospects, non-essential cookies); (d) legal obligation (tax, accounting, responding to lawful requests).

We share the minimum data needed with the vendors that power the product:

• Hosting and database — Cloudflare and Supabase (data hosted in the US).
• Payments — Stripe.
• Email delivery — Resend / Postmark.
• Scanning and AI — Firecrawl, Google / Gemini, OpenAI for extraction and reply drafting.
• Google Business Profile API — only when you explicitly connect your Google account.

We do not sell personal data.

Account data is retained for the life of your account and for up to 24 months after cancellation. Diagnostic logs are retained for 90 days. You can request earlier deletion at any time (see "Your rights" below), subject to legal or accounting obligations.

Depending on where you live, you have the right to access, correct, port, restrict, object to, or delete your personal data, and to withdraw consent. To exercise any of these, email privacy@ratehawk.app. We respond within 30 days. If you're in the EEA/UK you can also complain to your local supervisory authority. See our GDPR page and CCPA page for jurisdiction-specific detail.

We use essential cookies for authentication and security, and analytics cookies (only with consent, where required) to understand how our site is used. You can control cookies from your browser settings.

RHAWK is a B2B product and is not directed to children under 16. We do not knowingly collect their personal data.

Our servers are in the United States. When we transfer personal data from the EEA / UK / Switzerland to the US, we rely on Standard Contractual Clauses.

We'll post any material changes here and update the "Last updated" date at the top. Continued use of the Services after a change means you accept the updated policy.

Data Protection contact: privacy@ratehawk.app. Postal: RHAWK, Attn: Privacy, [company address].