Privacy Policy

Updated: May 24, 2025

Introduction

Welcome to Read & Rate. Your privacy is very important to us, and we are committed to safeguarding your personal data. This Privacy Policy outlines the types of information we collect, how we use and share that information, and your rights regarding your data, including any data collected through third-party services like Amazon.

By using our platform, you agree to the collection and use of your information in accordance with this policy.

Information We Collect

Personal Data

We collect personal data necessary for the performance of our services and to comply with legal obligations:

Contact Information: Name, email address, and optional phone number.
Account Credentials: Username and password.
Communication Data: Information you provide when contacting us via forms or email.
Usage Data: IP address, browser type, pages visited, time and date of visits, and other diagnostic data.
Cookies and Tracking Technologies: We use cookies to enhance your experience and analyze website performance.

Data from Amazon

With your explicit consent, when you sign up or log in using your Amazon account, we may collect the following data in accordance with Amazon's Data Portability policies:

Category 1 Scopes:

Customer Profile: Basic user profile data (name, email, user ID)
Product Reviews: Reviews you've written on Amazon
Seller Feedback: Feedback submitted to Amazon sellers

Category 2 Scopes:

Advertising Preferences and Clicked Ads
Contact Information
Customer Attributes
Digital Orders and Subscriptions
Physical Orders and Product Subscriptions
Search History and Shopping Basket Data

Please note that Amazon reserves the right to remove our access to these scopes at any time.

How We Use Your Information

To Provide and Improve Our Services (Contract Necessity and Legitimate Interests):

Manage your subscription and account
Provide personalized recommendations and insights
Facilitate user interactions and content sharing
Analyze trends and usage to improve our platform

To Communicate with You (Consent):

Send newsletters, marketing materials, and other information you have opted in to receive
Respond to your comments, questions, and requests

To Comply with Legal Obligations:

Meet legal and regulatory requirements
Prevent fraud and enhance security

We do not use automated decision-making or profiling that produces legal effects concerning you.

Legal Bases for Processing

We process your personal data based on the following legal grounds:

Contract Necessity: Processing is necessary for the performance of a contract with you.
Consent: You have given clear consent for us to process your personal data for specific purposes.
Legitimate Interests: Processing is necessary for our legitimate interests, and your interests and fundamental rights do not override those interests.
Legal Obligations: Processing is necessary to comply with legal obligations.

How We Share Your Information

We respect your privacy and do not sell or share your data with third parties for marketing purposes. We may share your data with:

Third-Party Service Providers

Stripe: For payment processing. Privacy Policy
Bubble.io: For hosting and data storage. Privacy Policy
Rickert Rechtsanwaltsgesellschaft mbH and Rickert Services Ltd UK: For GDPR compliance and representation.

All service providers are bound by data processing agreements ensuring compliance with GDPR and other applicable laws.

Legal Compliance and Security

We may disclose your information if required by law or in response to valid requests by public authorities.
To protect the rights, property, or safety of our company, our users, or others.

International Data Transfers

When transferring personal data outside the EU/EEA, we implement appropriate safeguards such as Standard Contractual Clauses.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption: Data is encrypted in transit and at rest.
Access Controls: Strict access controls and authentication mechanisms.
Secure Servers: Hosting on secure servers compliant with industry standards.
Monitoring: Regular security assessments and monitoring for vulnerabilities.

Data Breach Notification: In the event of a data breach, we will promptly notify affected users and relevant authorities as required by applicable laws.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance user experience and analyze website performance.

Types of Cookies Used:

Essential Cookies: Necessary for the website to function properly.
Analytics Cookies: Help us understand how you use our services.

Consent and Control:

You will be prompted to consent to the use of non-essential cookies upon your first visit.
You can manage your cookie preferences through your account settings or browser settings.

Your Rights

Under GDPR and other applicable laws, you have the following rights regarding your personal data:

Right of Access: Obtain confirmation as to whether or not personal data concerning you is being processed, and access to the data.
Right to Rectification: Request correction of inaccurate personal data.
Right to Erasure: Request deletion of your personal data under certain conditions.
Right to Restrict Processing: Request limitation of processing your personal data.
Right to Data Portability: Receive your personal data in a structured, commonly used format.
Right to Object: Object to processing of your personal data based on legitimate interests.
Right to Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Exercising Your Rights: You can exercise these rights by contacting us at support@readnrate.com or through your account settings.

Account Deletion and Data Retention

Account Deletion:

You can delete your account via your profile page once your subscription has ended.
Upon deletion, we will erase your personal data, including Amazon data, unless retention is required by law.

Data Retention:

We retain your personal data only as long as necessary to fulfill the purposes outlined or as required by law.
Data may be retained for up to 3 months after account deletion to address disputes or legal obligations.

Children's Privacy

Our services are not intended for individuals under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete the information promptly.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on this page.

Effective Date: Changes become effective after being posted.
Notification: For significant changes, we will notify you via email at least 30 days before the changes take effect.