Legal
Privacy policy
RateNest is a tool you host or a service that keeps your records in its own database. This policy describes that service.
The controller is the operator of the RateNest deployment you are using. The contact address is the support email shown on the contact page. If you installed RateNest yourself, you are the controller for the data in that database.
What we store
An account stores your name, email, password hash, optional company details, and a session cookie. Invoices, clients, logos, and saved calculations are stored so you can reopen them. Contact messages and payment references are stored so billing and support can be completed. Server logs may keep IP addresses for a short period to operate and secure the service.
Why
We process account and invoice data to perform the contract with you. Security logs and rate limits are a legitimate interest in keeping the service reliable. We do not sell personal data and we do not use it for advertising. Payment card numbers are handled by Stripe, not stored by RateNest. Bitcoin payments are references and amounts, not a wallet history beyond what BTCPay or an administrator needs to confirm the plan.
How long
Account data stays until you ask for deletion or the operator closes the account. Invoices may be retained longer where tax law requires the operator to keep billing records. Contact messages are kept until the conversation is finished and then deleted or archived for up to two years. Session cookies expire after 30 days.
Your rights
If the GDPR applies, you can ask for access, correction, deletion, restriction, or a copy of your data, and you can object to processing based on legitimate interests. You can also complain to your supervisory authority. Write to the support email to exercise a right. We may need to confirm it is you.
Transfers and processors
If card payments are enabled, Stripe processes the subscription in its role as a payment processor. If Google sign-in is enabled, Google processes the login. If BTCPay is enabled, that server processes the Bitcoin invoice. The application itself does not send invoice contents to a tax-rate API.
Transactional messages (welcome, invoice ready, subscription confirmation, password reset, team invites) are sent through the operator’s SMTP server. Message content stays between RateNest and that mail host. We do not sell your address to marketers.
Analytics
RateNest can store anonymous or account-linked product events (page views, tool use, conversion to paid) in its own database for the operator’s admin panel. There is no advertising pixel and no sale of that data.
Feedback and suggestions
If you use the feedback widget or Suggest a Tool form, we store the message you send, optional contact details, and the page path so the operator can reply or plan features.