Privacy Policy

1. Information We Collect

Business information (DMC details, contact info).
Uploaded files (rate sheets, policies, data).
Usage data (how you interact with the platform).

2. How We Use Your Data

To provide and improve RateGen services.
To personalize pricing and itinerary generation.
For customer support and product updates.

4. Data Security

All data, including Gmail content, is encrypted in transit using TLS and encrypted at rest.
OAuth tokens are stored encrypted.
Access is restricted to authorized systems and personnel on a need-to-know basis, following the principle of least privilege for all access to Google user data.

5. Your Rights

Access, update, or delete your data on request.
Opt-out of marketing communications anytime.

6. Google User Data (Gmail)

RateGen integrates with Gmail to help you manage travel-related emails inside your workspace. To do this, we request access to your Gmail account through Google OAuth.

Scopes we request and why

https://www.googleapis.com/auth/gmail.modify — read your inbox to detect travel-related emails, apply labels, mark as read, and organize threads inside RateGen.
https://www.googleapis.com/auth/gmail.send — send emails on your behalf for features like AI auto-reply and send-later.
https://www.googleapis.com/auth/gmail.metadata — read message headers (sender, subject, thread ID) for classification and inbox organization.
https://www.googleapis.com/auth/userinfo.email and https://www.googleapis.com/auth/userinfo.profile — identify which Gmail account you connected and display your name and email inside RateGen.

Limited Use of Google User Data

RateGen's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the user-facing features described above. Gmail message content may be sent to our AI processing providers (OpenRouter and OpenAI) solely to power the classification and reply features described above. These providers process the data on our behalf and do not use it to train their models. We do not:

Use Gmail data to train generalized AI or machine learning models.
Sell Gmail data to any party.
Transfer Gmail data to third parties except as necessary to provide the service, comply with law, or on your explicit request.
Use Gmail data for advertising.

How Gmail data is stored

Gmail message content and metadata are stored on our infrastructure hosted on AWS (Mumbai, India region) and Supabase (Northeast Asia region). All Gmail content is encrypted in transit and at rest, and OAuth tokens are stored encrypted. Access is restricted to authorized RateGen systems and personnel.

How long we keep Gmail data

We retain Gmail data for as long as your account is active. When you disconnect Gmail from RateGen, all associated Gmail message content and tokens are deleted from our systems within 90 days. When you delete your RateGen account, all Gmail data is deleted within 90 days.

How you can disconnect

You can disconnect Gmail from RateGen at any time by going to Settings → Integrations → Gmail → Disconnect. You can also revoke RateGen's access directly from your Google Account at https://myaccount.google.com/permissions.

7. Subprocessors

We use the following third-party services that may process your data:

Amazon Web Services (AWS) — infrastructure hosting.
Supabase — database and authentication.
Vercel — frontend hosting.
OpenRouter and OpenAI — AI processing of travel-related content.
Google (via Gmail API) — email integration.
Cloudflare — DNS and CDN.

8. Contact

If you have any questions about this Privacy Policy, please contact us at:

Company: Urban Ventures
Email: hello@rategen.ai
Phone: +91 98002 40007 • +91 9144400522
Address: Space Town, 5th Floor, Sevoke Road, 2.5 Mile, Near Check Post, Siliguri, West Bengal, 734001

Back to Home