1. Introduction
At Revlio ("we," "our," or "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our billing automation platform and related services (collectively, the "Service").
Your Privacy Matters: We are committed to protecting your personal information and being transparent about what data we collect and how we use it.
2. Information We Collect
2.1 Information You Provide
We collect information you voluntarily provide when using our Service:
- Account Information: Name, email address, password, company name
- Billing Information: Payment card details, billing address (processed by our payment provider)
- Business Data: Buyer information, traffic source data, invoice details, call records
- Communications: Support requests, feedback, and correspondence with us
2.2 Information Collected Automatically
When you access our Service, we automatically collect:
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, features used, time spent, click patterns
- Log Data: Access times, error logs, referral URLs
- Cookies: Session cookies, preference cookies, analytics cookies
2.3 Information from Third Parties
We receive information from integrated services you connect:
- TrackDrive: Call data, campaign information, revenue data
- QuickBooks: Customer records, invoice status, payment information
- Call Platforms: Call records from Ringba, CallRail, Retreaver for verification
- OAuth Providers: Basic profile information if you sign in with Google, GitHub, or Microsoft
3. How We Use Your Information
| Purpose | Data Used |
|---|---|
| Provide the Service | Account info, business data, integration data |
| Process Payments | Billing information, subscription details |
| Send Invoices & Reminders | Email addresses, invoice data |
| Customer Support | Account info, communications, usage data |
| Improve the Service | Usage data, feedback, analytics |
| Security & Fraud Prevention | Device info, log data, usage patterns |
| Legal Compliance | As required by applicable laws |
4. How We Share Your Information
We do not sell your personal information. We may share your information in these circumstances:
4.1 Service Providers
We share data with trusted third parties who assist in operating our Service:
- Payment Processing: Paddle, Stripe
- Email Services: SendGrid
- Cloud Hosting: Our infrastructure providers
- Analytics: Usage tracking services
4.2 Integrated Services
When you connect third-party services, we exchange necessary data to enable the integration (e.g., syncing invoices to QuickBooks).
4.3 Legal Requirements
We may disclose information if required by law, court order, or to protect our rights, safety, or property.
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
5. Data Security
We implement industry-standard security measures to protect your data:
- Encryption in transit (TLS/SSL) and at rest
- Secure password hashing (bcrypt)
- Two-factor authentication (2FA) option
- Regular security audits and monitoring
- Access controls and authentication
- Secure data centers with physical security
While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. After account deletion:
- Account data is deleted within 30 days
- Backups are purged within 90 days
- Anonymized analytics data may be retained indefinitely
- Data required for legal compliance is retained as required by law
7. Your Rights and Choices
7.1 Access and Portability
You can access and export your data through your account settings or by contacting us.
7.2 Correction
You can update your account information at any time through the Settings page.
7.3 Deletion
You can request deletion of your account and associated data by contacting support.
7.4 Marketing Communications
You can opt out of marketing emails by clicking "unsubscribe" in any marketing email or updating your preferences.
7.5 Cookies
You can control cookies through your browser settings. Note that disabling cookies may affect Service functionality.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where applicable.
9. Children's Privacy
Our Service is not directed to children under 18. We do not knowingly collect personal information from children. If we learn we have collected such information, we will delete it promptly.
10. California Privacy Rights (CCPA)
California residents have additional rights under the CCPA:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt out of the sale of personal information (we do not sell your data)
- Right to request deletion of personal information
- Right to non-discrimination for exercising privacy rights
11. European Privacy Rights (GDPR)
If you are in the European Economic Area, you have rights under the GDPR including:
- Right of access to your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
To exercise these rights, please contact us at privacy@revlio.com.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
- Email: privacy@revlio.com
- Address: Revlio Inc., United States
For GDPR-related inquiries, you may also contact your local data protection authority.