Privacy Policy

Last updated: 10 August 2026

Draft. This document is being finalised ahead of our public launch and has not yet been reviewed by legal counsel. It is provided for transparency and will be updated before paid plans begin.

This policy explains what personal data RateOwl collects, why, and the choices you have. We handle personal data in line with the Personal Data Protection Act 2010 (Malaysia).

Who this applies to

RateOwl is a rate-intelligence tool for independent hotels. This policy covers people who visit our site, create an account, or use the app. It does not cover the public booking sites we read prices from — those have their own policies.

What we collect

Information you give us

  • Account details — your email address, and (if you sign in with Google) your name and profile photo.
  • Property and competitor details — the hotel name and the booking-site URLs you choose to track. These describe businesses, not individuals.
  • Anything you send us — for example when you email support or report an inaccurate rate.

Information we collect automatically

  • A sign-in session cookie — strictly necessary to keep you logged in. We do not use advertising or cross-site tracking cookies.
  • Basic technical logs — IP address, browser, and error diagnostics, used to keep the service secure and working.

Rate data we collect for you

To do its job, RateOwl collects the publicly listed nightly rates of the hotels you choose to track from online travel agents (such as Booking.com). This is public business pricing information, not personal data about individuals.

How we use your data

  • To create your account and sign you in.
  • To provide the rate comparisons, demand signals, and alerts you ask for.
  • To send you essential service email (sign-in links, account and billing notices).
  • To keep the service secure, debug problems, and improve it.
  • To offer account support — our staff (currently just the founder) may open your account in a read-only “view as” mode to help you. This changes nothing in your account, and every such access is recorded in an internal log.
  • To meet our legal obligations.

Our lawful bases are your consent and the performance of our contract with you. You can withdraw consent at any time by deleting your account.

Who we share it with

We do not sell your personal data. We share it only with the service providers that help us run RateOwl, each bound to protect it and use it only on our instructions:

ProviderPurposeRegion
HetznerApplication + database hostingSingapore
CloudflareDNS, CDN, and encrypted off-site database backupsGlobal / US
GoogleOptional sign-in (OAuth)Global
ResendTransactional email (sign-in links, account notices)US
ApifyCollection of publicly listed OTA ratesUS / EU
SentryError and performance monitoringUS
Curlec (Razorpay)Payment processing for subscriptions (card / FPX / DuitNow)Malaysia / India

We may also disclose data if required by law, or to protect our rights, users, or the public.

Where your data is stored

Your account and application data are hosted in Singapore. Some of the providers above process limited data in other regions (for example email delivery and error monitoring). Where data crosses borders, we take reasonable steps to ensure it remains protected to a comparable standard.

How long we keep it

We keep your account data for as long as your account is active. When you delete your account, we erase your personal data (account, properties, competitors, sessions) within 7 days.

The public rate historywe collect is shared market data keyed to a hotel’s public listing, not to you. Because other customers may track the same hotels, this market data is retained even after you leave — it contains no personal information about you.

Your rights

Under the Personal Data Protection Act 2010 (Malaysia), you may:

  • Access the personal data we hold about you.
  • Correct data that is inaccurate or out of date.
  • Withdraw consent and delete your account at any time by emailing privacy@rateowl.io.
  • Ask us to limit how we use your data.

To make a request, email privacy@rateowl.io. We respond within 30 days. You also have the right to complain to the Personal Data Protection Commissioner of Malaysia.

Security

We protect your data with encryption in transit, encrypted off-site backups, access controls, and monitoring. No system is perfectly secure, but we work to keep your data safe and will notify you and the relevant authority of a material breach without undue delay.

Children

RateOwl is a business tool and is not directed at anyone under 18. We do not knowingly collect data from children.

Changes to this policy

We may update this policy as the service grows. We will revise the “last updated” date above and, for material changes, tell you by email or in the app.

Contact us

Questions about your privacy? Email privacy@rateowl.io or support@rateowl.io.

RateOwl Sdn. Bhd., Company No. 202601023634 (1685731-X), operating as RateOwl.