Privacy

Who is responsible

The person or organisation operating this website (the operator) decides how your personal data is used and is the data controller for that processing. If you are unsure who that is for this deployment, check with whoever gave you access or hosts the product.

What we collect

• Account data — When you sign in (for example via email magic link), we store identifiers and profile fields needed for authentication, such as email and optional name or avatar, using Convex Auth on infrastructure provided by Convex (Convex privacy policy).
• Structured submissions — Category, pricing model, amount (stored in pence), geography, experience band, seniority, client type, optional gender cohort for aggregates, typical project length where collected, and effective date. This powers your dashboard, private snapshot, and (where you opt in) public aggregates.
• Reminder preferences — Whether you want annual check-ins and/or median-shift notices at national, regional, or city level.
• Transactional email — Sign-in and operational emails are sent through providers such as Resend. Message metadata may be processed under their terms.
• Product analytics — We use PostHog to monitor usage events (for example page views and in-product actions). After you sign in, we may associate events with a stable account identifier and optional person properties (such as email) so we can understand product usage across sessions.

Why we use your data

• Service delivery — To run accounts, store submissions, show your private snapshot, send reminders you ask for, and maintain security.
• Aggregates — To compute anonymous benchmarks from pooled submissions (with minimum samples and quality checks), only as described below.
• Analytics — Where enabled, to measure how the product is used and improve it (legitimate interests, balanced against your rights; you can use browser or device controls that limit third-party analytics).

Public benchmarks

Explorer views show aggregates only (for example median, spread, sample size, freshness, and confidence). We do not list which individual submitted which rate. Rows can be excluded from public aggregates if they fail duplicate, bounds, or quality checks; you can still see your own figures in your dashboard and private snapshot when signed in.

Gender

Gender is optional and used only for cohort breakdowns in aggregate statistics. It is not displayed on public benchmark pages at an individual level.

Storage, security, and retention

Data is held on Convex-managed infrastructure and, for analytics, on PostHog where enabled. We retain submissions and account data while your account is active and as needed to operate the service, resolve disputes, or meet legal obligations. Retention details may vary by deployment; ask the operator if you need specifics.

International transfers

Subprocessors may process data outside the UK or EEA. Where required, operators should rely on appropriate safeguards (such as standard contractual clauses). The operator is responsible for documenting that for their deployment.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing, and to port data or complain to a supervisory authority. To exercise rights against this deployment, contact the operator. You can also ask the operator how to delete your account and associated submissions.

Children and sensitive data

Rate Mate is not directed at children. Do not submit special-category or unnecessary sensitive personal data beyond what the forms ask for.

Changes to this policy

We may update this page when the product or legal context changes. The "Last updated" date at the top will change when we do.