Privacy Policy

For information associated with your Revsi account, such as your name, email address, login information, billing information, and business details, Webb Consulting generally acts as the controller because we determine how that information is used to operate and administer the Service.

For personal information that a business user uploads, imports, enters, or otherwise provides about its customers or other recipients ("Recipient Data"), the business user is the controller and Revsi acts as a processor or service provider. We process Recipient Data on the business user's documented instructions to provide the Service, including sending review requests, reminders, and related communications.

• Account information, including name, email address, password or authentication credentials, and business affiliation.
• Business settings, including business name, review destination links, message style, templates, and communication preferences.
• Recipient Data provided by a business user, such as recipient name, email address, phone number, and information needed to identify the relevant customer interaction.
• Message and delivery data, such as sends, deliveries, bounces, failures, unsubscribes, and similar status information.
• Interaction data, including clicks on review links and other Service interactions.
• Technical and security data, which may include IP address, browser or device information, timestamps, authentication events, and logs used to operate, secure, and troubleshoot the Service.
• Billing and transaction information if paid plans are offered. Payment card information may be processed by a third-party payment processor rather than stored directly by Revsi.

We use personal information as reasonably necessary to:

• Provide, operate, maintain, secure, and improve the Service.
• Create and administer accounts and authenticate users.
• Send review requests and reminders at the instruction of business users.
• Manage unsubscribes, suppression records, delivery issues, and customer support.
• Provide dashboards, reporting, and service-related communications.
• Prevent fraud, abuse, spam, unauthorized access, and violations of our Terms of Service.
• Comply with applicable law and enforce our agreements.

We do not sell Recipient Data. We do not use Recipient Data to advertise Revsi or unrelated products to recipients, and we do not use a business user's Recipient Data for our own independent marketing purposes.

We may disclose personal information to service providers and subprocessors that help us operate the Service, subject to appropriate contractual or other safeguards. We may also disclose information when required by law, to protect rights or security, in connection with a corporate transaction, or with the direction or consent of the applicable business user or individual.

Revsi currently uses service providers that may include:

• Supabase, for database, authentication, and hosting-related services.
• Resend, for email delivery.
• Lovable, for application development and front-end infrastructure.
• Cloudflare, for infrastructure, security, and performance services where applicable.

Our providers may change as the Service evolves. Where required, we will provide appropriate notice of material changes.

Revsi may use cookies, local storage, and similar technologies that are necessary for authentication, security, preferences, and operation of the Service. If we introduce non-essential analytics or advertising technologies, we will update this Policy and provide any notices or choices required by applicable law.

We retain account and business information for as long as reasonably necessary to provide the Service, administer the account, comply with legal obligations, resolve disputes, and enforce agreements. Recipient Data is retained in accordance with the applicable business user's instructions and our operational and legal requirements. After an account is closed, information may remain for a limited period in backups, security logs, or records required for legal, fraud-prevention, accounting, or compliance purposes.

Suppression and opt-out records may be retained for as long as necessary to ensure that an individual's request not to receive further communications continues to be honored.

Every applicable review-request email sent through Revsi includes a mechanism to unsubscribe from further review-request emails. Individuals may also contact the business that sent the request or contact us at info@revsi.app regarding access, correction, deletion, or other privacy requests.

When Revsi processes Recipient Data on behalf of a business user, we may refer the request to that business or assist the business in responding, because the business controls that data. Depending on where you live, applicable law may provide additional privacy rights.

We use administrative, technical, and organizational safeguards designed to protect personal information. These measures include encryption in transit and at rest where supported and access controls intended to segregate each business user's data. No method of transmission, storage, or security is completely risk-free, and we cannot guarantee absolute security.

If we become aware of a security incident involving personal information, we will investigate and take reasonable responsive measures. We will provide notices to affected business users, individuals, or authorities when required by applicable law or our contractual obligations.

The Service is operated from the United States and information may be stored or processed in the United States and other locations where our service providers operate. If you use the Service from another country, your information may be transferred to jurisdictions with different data-protection laws. Where required, we use appropriate safeguards for such transfers.

The Service is intended for business users who are at least 18 years old and is not directed to children. Business users must not knowingly provide Revsi with personal information about children in violation of applicable law.

If Webb Consulting is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable law.

We may update this Privacy Policy from time to time. We will post the updated version with a revised "Last updated" date and, when appropriate, provide additional notice of material changes.

Privacy questions or requests may be sent to: info@revsi.app