RateThatJob.com

Privacy policy

Effective: 10 October 2026

1. Controller

ABOVO JOBS MENA L.L.C-FZ (Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates, business license number: 2648676.01 (Meydan Free Zone, Dubai)). Privacy questions: privacy@ratethatjob.com.

2. The most important rule: anonymity

Employers never learn who wrote a review or who responded to their invite. Public pages only show the display name you choose. Every review goes live 3 to 12 days after it is sent, on a random day and time (reviews from the same invite go live together), so the timing doesn't reveal who wrote it. Apart from the published reviews themselves, employers only see aggregate numbers; invite results and statistics only from 5 reviews.

Early signals. An employer with Pro (or a Pro trial) may see anonymous, aggregated themes from all reviews of its location sent in the last 30 days, whether already live or still waiting to go live (for example “incoming reviews about pay point downward”). This needs at least 5 reviews in the last 30 days; a theme only shows when at least 3 different reviewers mention it; and the employer never sees the text, quotes, scores, dates or counts of single reviews. It doesn't affect publishing: an employer can't hold back or delay any review.

3. What we process and why

  • Account: email address, display name, language. Purpose: sign-in and providing the service. Legal basis: providing the service (contract).
  • Job alerts (optional): if you tick “Email me about jobs near me” when sending a review, we store that consent and when you gave it, so we may email you about jobs near you. We don't send these emails yet. Off by default; turn it off any time on your account page. Legal basis: your consent.
  • Reviews: the workplace, your relationship to it (employee, former employee, trial shift, applicant), period, position, ratings, facts and text. Purpose: publishing, computing scores, moderation. Legal basis: contract and legitimate interest (keeping reviews trustworthy).
  • Verification document (optional): payslip, contract and similar. Used only to check the review. We keep the document for 30 days after the decision, then delete it.
  • Applications: name, email and/or phone, your answers, start date, experience, your message, your CV if you upload one, follow-up answers and messages with the employer. They go to the employer you apply to. Legal basis: your request (contract).
  • Invited employees: the email address an employer gives us, stored encrypted and only used to send the invite and one reminder; deleted after the reminder, once used, or after 7 days at the latest. A one-way code of the address is kept so the same person isn't invited to the same workplace again within 90 days; if you unsubscribe, only that code is kept.
  • Employer accounts: team members' names, email addresses and roles.
  • Employer access requests: name, role, phone number, company website, the signed-in email address, a photo ID (ID card or passport) of the person requesting access and, depending on the method, a company registry extract (trade license) or a letter of authorization. Purpose: checking that you may act for the workplace (legitimate interest: protecting reviewers and employers from impersonation). You may cover the ID document number and everything except your photo and name. The files are kept in a private store that only our administrators can open (through links that expire after 60 seconds; every opening is logged with who opened which file and when) and are never shown to anyone else. We keep them for 30 days after the decision, then delete them; after that we only keep a short record without the file or your personal data: the type of document, who checked it, when and the result.
  • Follows, notifications, helpful votes, reports: to run the service.
  • Your area (home page “near you”): the approximate city from your connection (provided by our host, Vercel, not stored), or the city you pick, kept only in a cookie on your device (see Cookies). Your exact location is only used if you choose “My location”, rounded to about 1 km.
  • Technical data: logs needed for security and fraud prevention (for example when an account was created and when reviews were posted).

4. Automated checks and translation

Review text is checked by an AI model (Anthropic Claude) for personal data, threats and similar content. Review and employer reply text is translated into other languages by the same service. The model only receives the text, not your account details. When a review is held, a person decides.

If an employer uses the Basic or Pro job ad package, an AI model (Anthropic Claude) summarizes your application for the employer (your answers and, if you uploaded one, your CV) and, with Pro, asks you 2–3 follow-up questions. The summary only supports the employer; the decision is made by a person.

The themes of early signals (see section 2) are summarized from review text by the same service, with only an anonymous label per reviewer (no account details). Numbers, quotes, dates, job titles and copied wording are filtered out of the result afterwards.

5. Processors

  • Supabase (database, sign-in, file storage)
  • Vercel (hosting, serving the website)
  • Anthropic (machine translation, content checks, application summaries)
  • Google (Google Maps based workplace search, when you use it)
  • OpenStreetMap services: Photon by komoot GmbH (workplace search) and Nominatim by the OpenStreetMap Foundation (details of the picked place), when the workplace search runs on OpenStreetMap. They receive only the search text and the approximate area (a city, or your location rounded to about 1 km if you chose it), not your account details.
  • Resend (sending emails, for example messages from employers)
  • Stripe (payment provider for employers: card payments, subscriptions, invoices; receives the company name, billing address, tax ID, email and payment details; we never see full card details)

We update this list before adding a new provider.

6. How long we keep data

  • Account data until you delete your account.
  • Reviews until you delete your account, or, if you choose, kept as "Former member" without any link to you.
  • Verification documents (review proofs and access-request documents) for 30 days after the decision, then deleted automatically; only a short record stays (type of document, who checked it, when, result).
  • Applications until you delete your account. Uploaded CVs are deleted on request (write to privacy@ratethatjob.com). Data you sent to an employer is also the employer's responsibility.

7. Your rights

  • Access and portability: download your profile and reviews (JSON) on the My account page; for any other data write to privacy@ratethatjob.com.
  • Erasure: delete your account on the My account page.
  • Rectification, restriction, objection: write to privacy@ratethatjob.com.
  • Complaints: to the UAE Data Office (the operator is registered in the Meydan Free Zone, Dubai), or to the data protection authority where you live (for example in Hungary: NAIH, naih.hu).

8. Cookies

See the Cookies page.