RatedistPrivacy Policy
How Ratedist handles the data of the hotels and restaurants that use our products, and of their guests.
Last updated: 12 October 2026
Who we are
Ratedist provides two products: a channel manager for hotels and a point-of-sale (POS) system for restaurants, cafés and hotel food & beverage. This policy covers both products and the website ratedist.com.
For guest data that a hotel or restaurant enters or receives in Ratedist, the hotel or restaurant decides why and how it is used, and Ratedist processes it on their behalf.
Data we process
Account data: the name, email address, role and language of the staff who use Ratedist, plus sign-in records needed to keep accounts secure.
Business data: hotel and restaurant details, rooms, rate plans, prices, menus, stock and invoices.
Guest data: name, email address, phone number, stay dates, booking details, special requests and payments, received from OTAs or entered by staff. POS keeps customer contacts and purchase history when the business chooses to record them.
Demo requests: the name, business, WhatsApp number, email, city and message you send through the form on this website.
Guest credit cards
Credit card details that OTAs send with a booking are kept by a PCI-certified provider, not on Ratedist servers. Staff with permission can open them in a secure window that closes by itself, and every view is recorded.
Payments
Subscription invoices and QRIS or card payments go through Midtrans. Ratedist never stores card numbers.
How we use data
To run the service: sending rates and availability to the OTAs a hotel connects, receiving bookings, sending booking emails and vouchers, notifications to staff, invoices and receipts.
To support you and keep the service secure and working. We do not sell data and do not use guest data for advertising.
Who we share it with
Only with the services needed to run Ratedist: the OTAs and channels a hotel chooses to connect (through our connectivity provider), Midtrans for payments, our email delivery provider, and the providers of the servers we run on. Each receives only what it needs for its task.
We disclose data to authorities only when Indonesian law requires it.
How long we keep it
We keep data while the account is active. Guest personal data on old bookings can be removed automatically after a period the hotel and Ratedist agree on; the booking itself stays for reports, without the guest’s personal details.
When an account ends, you can ask us to delete its data. Backups are rotated and overwritten within about two months.
Security
Each hotel and restaurant can only see its own data. Accounts can use two-step sign-in, staff access is limited by role, connections are encrypted, and the database is backed up daily.
This website
ratedist.com does not use cookies or advertising trackers. We count page visits per day, page and referring website only, without IP addresses or visitor identifiers. Fonts are loaded from Google Fonts, which receives your IP address when the page loads.
Your rights
You can ask to see, correct or delete personal data we hold about you. Guests should contact the hotel or restaurant they booked with first; we help them fulfil the request.
Changes and contact
If we change this policy, we update the date above. For questions, use the contact page.