Privacy Policy

1. Who we are

rating.so (“the Service”) is a Domain Rating monitoring service operated by DMA Labs (“we”, “us”). This policy explains what we collect, why, who we share it with, and the choices you have. We aim to collect the minimum needed to run the Service. For privacy matters contact privacy@rating.so.

2. What we collect

• Account data — name, email address and authentication identifiers (including OAuth identifiers if you sign in with GitHub or Google).
• Domain data — the domains you add or watch, their Domain Rating history, backlink and referring-domain metrics, goals, milestones and alert settings.
• Integration data — a Slack incoming-webhook URL if you connect Slack alerts, a Telegram chat ID if you connect Telegram alerts; client email addresses you configure for monthly reports (see Section 5).
• Billing data — subscription plan and billing status. Payments are processed by Stripe; we never receive or store full card numbers.
• Usage data — server logs (IP address, user agent) for security and rate limiting, and privacy-first, cookieless product analytics if enabled. Our analytics does not use cookies and does not collect personal data.
• Affiliate data — if you join the affiliate program, your referral link activity and payout details.

3. Public domain metrics

The Service displays SEO metrics (Domain Rating, backlink counts) for publicly registered domain names, including domains you do not own — on public report pages, leaderboards, comparisons and the directory. These metrics describe websites, not individuals, and are sourced from third-party SEO data providers. Domain names appear in our sitemap and public pages by design. If you believe a domain listing causes harm, contact us and we will review removal.

Domain Rating by Ahrefs, used under the Ahrefs Domain Rating License. We send only the domain name (no personal data) to Ahrefs to retrieve its public Domain Rating.

4. How we use your data

• To provide monitoring, alerts (Email, Slack, Telegram), digests, reports, badges and embeds.
• To send transactional email: account confirmations, DR-change and backlink alerts, milestone notifications, weekly digests.
• To process subscriptions and prevent fraud or abuse (including rate limiting by IP).
• To improve the product based on aggregate usage.

We do not sell personal data. We do not use third-party advertising trackers.

5. Client report recipients

Agency users may configure a client email address per domain to receive a monthly report. If you add a recipient, you confirm you are entitled to have us email them on your behalf. Recipients can stop these emails at any time by contacting us or asking the sender to remove the address.

6. Cookies

We use essential cookies to keep you signed in, and a first-party referral cookie (60 days) for the affiliate program. Our product analytics is cookieless and sets no tracking cookies.

7. Data retention

We keep your data while your account is active. When you delete your account, your domains, settings and personal data are removed; residual copies in backups are purged on a rolling schedule. Aggregated, non-identifying metrics (e.g. a domain's public DR history) may persist, as they are not personal data.

8. Your rights

• Access, export (CSV) or correct your data.
• Delete your account and associated personal data at any time from Settings.
• Opt out of non-essential email (digests can be disabled in Settings; alerts per domain).
• EU/EEA and UK users: rights under GDPR including complaint to a supervisory authority. Legal bases: contract performance (the Service), legitimate interest (security, public metrics), consent (analytics where required).

9. International transfers

We may process data outside your country. Where required, we rely on standard contractual clauses or equivalent safeguards.

10. Security

Data is encrypted in transit (TLS). Database access is restricted and protected by row-level security; service credentials are server-only. No method is 100% secure, but we work continuously to protect your information.

11. Children

The Service is not directed at children under 16, and we do not knowingly collect their data.

12. Changes

We may update this policy. Material changes will be announced by email or in-app notice; the date above reflects the latest revision.

13. Contact

DMA Labs · privacy@rating.so (privacy) · hello@rating.so (general).