Privacy Policy

1. Introduction

Revnio ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our revenue recovery platform service.

By using Revnio, you consent to the data practices described in this policy. If you do not agree with the terms of this privacy policy, please do not access the service.

2. Information We Collect

2.1 Information You Provide

• Account registration information (email, name, company name)
• Billing information processed through our payment provider
• Communication preferences
• Support inquiries and feedback

2.2 Information from Payment Providers

When you connect your payment provider account (Stripe, Chargebee, or Paddle), we access:

• Customer information (names, emails)
• Subscription and invoice data
• Payment failure and transaction information
• Payment method metadata (last 4 digits, expiration dates)

We never store full card numbers or sensitive payment credentials.

2.3 Information from Google APIs

When you connect your Gmail or Google Workspace account, we request the following scope:

• gmail.send — permission to send emails on your behalf. This is used solely to send payment recovery emails from your own email address.

We store the following Google account data:

• Your email address and display name (to identify the connected account)
• OAuth access and refresh tokens (encrypted at rest using authenticated symmetric encryption)

We do not read, scan, index, or store any of your inbox content, email history, contacts, or other Google account data. The gmail.send scope grants send-only access and does not provide access to your inbox.

2.4 Information from WhatsApp

When you connect your WhatsApp Business account, we access:

• Your WhatsApp Business phone number and display name
• Message delivery status for recovery messages sent through your account

We do not read, store, or access your personal WhatsApp conversations. We only send recovery messages you have configured through Revnio.

2.5 Information from CRM Integrations

When you connect a CRM (Salesforce or HubSpot), we access:

• Contact records (to sync payment failure and recovery data)
• Custom fields and properties created by Revnio

CRM data flows bidirectionally only for fields related to payment recovery. We do not access or modify unrelated CRM data.

2.6 Automatically Collected Information

• IP address and device information
• Browser type and version
• Pages visited and actions taken
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the collected information to:

• Provide and maintain our revenue recovery service
• Process payment failures and send recovery communications via your connected channels
• Sync recovery data with your connected CRM
• Analyze usage patterns to improve our service
• Communicate with you about updates and support
• Comply with legal obligations

4. Data Sharing

We may share your information with:

• Service Providers: Third parties that help us operate our service, including Google (email delivery), Brevo (fallback email, SMS, and WhatsApp delivery), Amazon Web Services (SMS delivery and infrastructure), Paddle (billing), and your connected payment providers (Stripe, Chargebee, or Paddle)
• Your Connected Accounts: Data flows to and from the third-party accounts you explicitly connect (payment providers, email, WhatsApp, CRM)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with mergers or acquisitions

We never sell your personal information to third parties.

5. Data Security

We implement industry-standard security measures including:

• Encryption of data in transit (TLS 1.2+) and at rest
• OAuth tokens, API keys and email passwords encrypted at rest using authenticated symmetric encryption
• Role-based access controls and authentication requirements
• SOC 2-ready audit logging of all sensitive operations
• Rate limiting on all API endpoints

6. Data Retention

We retain your information for as long as your account is active or as needed to provide our services. When you disconnect an integration (payment provider, email, WhatsApp, or CRM), we delete the associated credentials and tokens immediately. You can request deletion of your account and all associated data at any time through your account settings or by contacting support.

7. Revoking Access

You can disconnect any connected account at any time from your Revnio settings:

• Payment providers: Settings → Integrations → [Provider] → Disconnect
• Gmail / Google: Settings → Integrations → Email → Disconnect. You can also revoke access from your Google Account permissions page.
• WhatsApp: Settings → Integrations → WhatsApp → Disconnect
• CRM (Salesforce / HubSpot): Settings → Integrations → [CRM] → Disconnect

When you disconnect, we immediately delete stored tokens and credentials. Recovery messages will fall back to Revnio's default sender.

8. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Revoke access to any connected third-party account
• Opt out of marketing communications

9. Cookies

We use cookies and similar technologies to:

• Keep you logged in
• Remember your preferences
• Analyze usage patterns

You can control cookies through your browser settings.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at: [email protected]