Privacy Policy

This policy explains what Rate My Booth ("Rate My Booth", "we") collects when you use this website, why, who we share it with, how long we keep it, and the choices you have. We've tried to write it in plain language. If anything is unclear, contact us at the contact address listed in our footer.

The short version

• You can get a grade without an account or an email address.
• You can upload up to 3 photos of one booth. Your photos are analyzed together by our photo-analysis provider (Anthropic) to produce one grade and your recommendations. Everything on this page about "your photo" applies to each photo you upload.
• We keep your photo privately for up to 30 days and your written report for up to 180 days, so you can revisit it. If you feature your photos on the leaderboard, we keep them as long as the report (up to 180 days) so they stay on past months' boards; withdrawing that puts them back on the 30-day schedule. You can delete both at any time from your report page.
• We extract selected, non-identifying observations — merchandise categories, styles, materials, colors, display patterns, how visible price tags are, and readable prices — to produce aggregated resale-industry trend reports. These observations are stored separately from your email address and never include your photo.
• We never display your photo publicly unless you choose to feature it on the leaderboard — by leaving the photo box beside the upload button ticked, or from your report page. Sharing a grade creates a card with only your letter grade and score. The downloadable social image (for Facebook or Instagram) includes your photo, but we make it only for you, on request, and never post or store it — you decide where it goes.
• Every report starts private: your booth appears on the leaderboard only if you choose to post it — with the photo box beside the upload button, or later from your report page. You choose whether to appear anonymously or with a booth name, together with your photos — and can change or withdraw that at any time.
• We only email you if you ask us to, and the newsletter requires its own opt-in and confirmation.

1. Information we collect

When you upload booth photos

• The photo. Before analysis we re-encode it, which removes embedded metadata such as camera details and GPS location. While it waits to be graded (usually under a minute, at most a few minutes), it's held in a private processing queue and deleted from there as soon as grading finishes. We ask you not to include people, but if a photo contains people, names on signs, or other personal information, that information is in the image we process.
• A broad region, only if you choose one (for example "US — Midwest"). We never infer location from your photo.
• Technical and usage-limit data. To keep the service free and prevent abuse, we record a keyed one-way hash of your IP address (not the IP itself), a hash of the photo file (to avoid re-charging for duplicate uploads), timestamps, and request outcomes. We set a first-party cookie (rmb_iid) containing a random identifier, which we store only as a hash. It's used for usage limits and to rotate recommendations so returning visitors don't see the same advice every time. We do not use browser fingerprinting.

What your report contains

Your report: dimension scores, a summary, strengths, opportunities, recommendations, and structured observations about the photo. The overall score and letter grade are calculated by our own server from the dimension scores.

When you give us your email address

• Report copy (one-time). If you enter your email and press "Send my full report", we send that one email with your report. We don't keep your address for this — we keep only a one-way hash with a delivery record, to prevent repeated or abusive sends. It does not subscribe you to anything.
• Resale Radar newsletter. If you tick the newsletter box or sign up on our newsletter page, we store your email address, the time and place you signed up, the wording you agreed to, and a hash of your IP address as a record of your consent. You're not subscribed until you click the confirmation link we email you.

Product analytics

We count events such as "analysis completed" or "newsletter sign-up started" on our own servers, with no cookies, IP addresses, or identifiers attached, and we never include photos, email addresses, report contents, or report links. You can switch this off under "Cookie & tracking choices" in the footer.

2. How we use information

We do not sell your personal information, use your photos for advertising, sell your photos, or use them to train AI models. We do not use facial recognition, attempt to identify people in images, or infer sensitive characteristics.

3. Aggregated trend research

From each analyzed photo we store a structured record drawn from fixed lists — for example "furniture, lighting", "mid-century modern", "tiered shelving", "few price tags visible" — plus any prices readable on tags. Free text, names, and business details aren't stored in this record. It's linked to your report only so that we can delete it if you delete your report; when your report expires, the link is removed and the observation is kept for trend research.

We publish only aggregates: a weekly figure requires at least 30 eligible photos, any individual category needs at least 5, and regional breakdowns need at least 30 photos from that region. Trend findings describe what appears in submitted booth photos — not what sells. We don't describe these observations as anonymous, because a photo can contain identifying details even though our structured records are designed not to.

4. The public leaderboard

Two separate things happen to a completed grade, and neither depends on the other:

• Eligibility (moderation). Eligibility is decided automatically. The only checks are automated: a grade doesn't count if its photo duplicates one already counted, or if the AI detects explicit content in it. A person on our team may view a photo only to correct one of those checks or to remove an entry. Approval makes nothing public.
• Public display (your choice). Nothing is listed unless you post it, with the photo box beside the upload button or from your report page. You can keep your booth private (the default — not listed), show it anonymously with your photos, grade and score, or show it with a booth name you choose, your photos, grade and score. Either way your photos are shown only with your explicit permission (visitors can enlarge them; permission given before October 2026 covers your first photo only); if we no longer store them, you appear with your grade and score only. Please don't use your personal name or contact details as a booth name.

The leaderboard has monthly rankings (reset on the 1st of each month, UTC) and an all-time ranking. If you feature your photos, they're shown while your report exists (see retention below). You can withdraw permission from your report page at any time; the photo stops being served immediately. We don't publish email addresses, report links, or location. Copies others made while your photo was public are outside our control.

5. Who we share information with

We use service providers who process data on our behalf:

• Anthropic (Claude API) analyzes your photo and returns the structured observations your report is built from. Under Anthropic's commercial terms, content sent through its API isn't used to train its models. Anthropic may retain inputs and outputs for a limited period, including to detect misuse. If Anthropic's safety systems decline a request, it may be re-run on another Claude model.
• Netlify hosts the website and runs the background job that grades your photo.
• Supabase hosts our database (reports, scores, newsletter subscriptions) and stores report photos (in the database or a private storage bucket) where only our server can access them.
• Resend delivers the emails you request.

We may also disclose information if required by law, to protect our rights or users' safety, or as part of a business transfer, in which case this policy would continue to apply.

6. How long we keep information

7. Cookies and tracking

• rmb_iid — necessary; usage limits and recommendation rotation. Expires after one year.
• rmb_consent — necessary; remembers your tracking choices.
• Advertising cookies (Meta Pixel) are not used on this site.

Your choices about cookies are separate from the photo-use notice next to the upload button. You can change them any time from "Cookie & tracking choices" in the footer.

8. Security

Reports are reachable only through a long, random private link. Photos are stored privately (in our Supabase database or a private storage bucket), served only through our site to someone with that link, and never cached publicly or indexed. Our database isn't reachable through Supabase's public data API. Uploads are validated and re-encoded on our server; secrets are kept server-side; administrative access is password-protected. No system is perfectly secure, so please treat your report link like a password and don't share it if you don't want others to see the report.

9. Your choices and rights

• Delete your report and photo at any time with the "Delete this report and photo" link on your report page. This also removes you from the leaderboard.
• Change or withdraw leaderboard display, including photo permission, from your report page at any time.
• Unsubscribe using the link in any newsletter, or on our unsubscribe page, which can also erase your stored address.
• Access, correction, deletion, or other requests: email the contact address listed in our footer. Because we don't require accounts, we may ask for your report link or email address to locate your data. We won't discriminate against you for exercising your rights.

Deleting your report removes the photo, report, recommendation history, and the trend observations taken from it. Aggregate statistics that were already calculated or published can't be individually reversed, since they don't identify any single booth.

Depending on where you live

Residents of some US states (such as California, Colorado, Connecticut, Virginia, and others with consumer privacy laws), and people in the UK, EU, and other regions, may have rights to access, correct, delete, or receive a copy of personal information, to object to or restrict certain processing, and to appeal our decision on a request. If you're in the UK or EU, we rely on the following legal bases: performing the service you request (analysis and reports); our legitimate interests in preventing abuse, controlling costs, and producing aggregate trend research, balanced against your interests; and your consent for the newsletter and optional advertising cookies, which you can withdraw at any time. You can also complain to your local data protection authority. Contact us at the contact address listed in our footer to make a request.

Children

Rate My Booth is a tool for businesses and isn't directed to children under 16. We don't knowingly collect their information.

International transfers

Our providers may process data in the United States and other countries, which may have different data protection rules than where you live.

10. Changes and contact

If we change how we use photos or personal information in a meaningful way, we'll update this page and its date, and won't apply the change retroactively to the purposes you agreed to without your permission where the law requires it. Questions or requests: the contact address listed in our footer.