Privacy policy

This policy explains how the administrator of the revrescue.com service ("we") processes personal data. Questions and requests go to [email protected].

Two kinds of data

We process data about people who create a RevRescue account (account data), and data about the customers of businesses that connect their billing platform to RevRescue (customer billing data). For customer billing data, the business that connects its billing is the controller and we act as its processor, following its instructions and the data processing terms in our terms of service.

Account data we collect

• Email address, name if provided, password hash and the one-time codes used to confirm the address.
• Workspace details, roles and settings, and the figures you enter in the recovery estimate.
• Plan and payment status. Card details are entered on our payment operator's checkout page and are not stored by us.
• Technical data needed to run and secure the service: IP address, browser type, timestamps and security logs.

Customer billing data we process for businesses

When a business connects a billing platform, we read the data needed for recovery: customer identifiers and email addresses, subscription and invoice amounts, payment attempts and decline codes, card brand, country and expiry month (never full card numbers), and, if the business sends SMS, phone numbers and consent records. We use it only to provide recovery, reporting and leak detection for that business.

Why we process data and on what basis

• To provide the service you signed up for (performance of a contract).
• To keep the service secure, prevent abuse and keep records required by law (legitimate interest and legal obligation).
• To send service emails such as confirmation codes, receipts and recovery reports (performance of a contract).

We do not sell personal data and we do not use customer billing data to train general purpose AI models.

Who receives data

We use carefully selected service providers in these categories: hosting and infrastructure, payment processing for our own subscriptions, email and SMS delivery, and AI model processing for recovery decisions. Each acts on our instructions under a written agreement. Data may be transferred outside your country with appropriate safeguards such as standard contractual clauses.

How long we keep data

Account data is kept while your account is active and deleted or anonymized within 90 days after closure, except records we must keep for tax or legal reasons. Customer billing data is deleted within 30 days after a business disconnects its billing or closes its workspace. Disconnecting deletes the stored access key immediately.

Your rights

You may ask us for a copy of your data, correction, deletion, restriction, portability or object to processing, and you may lodge a complaint with your data protection authority. If you are a customer of a business that uses RevRescue, please contact that business first; we will help it answer your request. Write to [email protected].

Cookies

We use only essential cookies. See the cookie policy.

Changes

We will update this page when our processing changes and notify account holders by email of material changes.