Data & security

Where your data lives and how we handle GDPR

Stored in the EU, row-level security per agency, full export, deletion on request.

Last updated

All proposal data, client records and Terms of Business templates are stored in the EU on Supabase, which runs on AWS infrastructure. A few services we use, such as our hosting provider and the AI features, process some data in the US under UK GDPR transfer safeguards. Our privacy policy lists every one.

Tenant isolation

Every customer table uses Postgres row-level security tied to your agency ID. Other agencies on the platform cannot read your data even if they try to. The database enforces it, not just the application code.

GDPR

We're a data processor under GDPR; you're the controller of your data. We have a Data Processing Agreement in place with Supabase. You can request a copy of your data, export everything to CSV from the dashboard, or request full deletion of your account.

Who runs RateCalc.io

The platform is operated by MCR Labs Ltd (company number 17228923), registered office 89 Chorley Road, Manchester, England, M27 4AA.