Last updated: September 8, 2026. This Privacy Policy explains how Revvin ("Revvin", "we", "us") collects, uses, shares, and protects personal information when you use revvin.co, our branded business referral pages, and related services (the "Service"). It applies to businesses that subscribe to Revvin, referrers who submit leads, and the prospective customers ("Leads") whose information is submitted through a referral page. If you do not agree with this Policy, do not use the Service.
Account information. When you create a business or referrer account we collect your name, email address, password (hashed), phone number, role, and, for businesses, company name, industry, service area, logo, and the content you publish on your referral page. Referral information. When a referrer submits a lead through a branded referral page we collect the referrer's name, email and phone, and the Lead's name, email, phone, location, and any notes or attachments the referrer chooses to provide. Customer lists imported by a business. When a business imports its own customer list we store the names, email addresses, phone numbers and last job dates it provides, so the business can ask them for referrals or email them a reactivation campaign. Billing information. Business subscriptions are processed by Stripe. We do not see or store full payment card numbers. We receive a customer identifier, subscription status, and billing metadata from Stripe to manage your account. Usage and device information. Server logs, IP address, browser and device information, pages viewed, and basic analytics events. We use cookies and similar technologies as described in Section 7. Communications. Messages you send us by email or in-app, records of transactional and campaign emails, and available delivery outcomes, unsubscribes and bounces. Personal SMS asks are prepared for you to send from your own phone; Revvin does not send those messages or read their replies.
We do not sell personal information, and we do not use referral or Lead information to train third-party advertising models. Operate the Service, including hosting branded referral pages and routing submitted leads to the correct business. Authenticate users and protect accounts. Process subscription billing through Stripe and send related receipts and notices. Send transactional messages about referral activity, account changes, and security events. Send reactivation campaign email on behalf of a business to the contacts that business selected, with its postal address and an unsubscribe link in every message. Maintain recorded opt-outs and delivery restrictions used to suppress further campaign email. Provide customer support and respond to your requests. Detect, investigate, and prevent fraud, abuse, and terms violations. Improve the Service and develop new features, using aggregated or de-identified data where practical. Comply with legal obligations and enforce our Terms and Referral Agreement.
Revvin is the infrastructure that connects a referrer to a business; we do not act as the business or process payment between them. When a referrer submits a referral: The Lead's contact information and any notes are shared with the business that owns the referral page. The referrer's name, email, and phone are shared with that business so they can coordinate the deal and pay the referrer directly when it closes. The business becomes an independent controller of that information for its own customer-relationship purposes and is responsible for its own handling under applicable law. Revvin retains a timestamped record of the referral so both sides have the same source of truth. Referrers are responsible for having a lawful basis to submit a Lead's information (for example, the Lead's consent). Businesses are responsible for honoring the privacy choices of Leads they receive.
We share personal information with vendors that help us run the Service, under contracts that limit their use of the data to providing services to Revvin. Current categories include: Cloud hosting and database (managed Postgres and storage, hosted on AWS). Billing (Stripe) for subscription processing. Email delivery (Resend) for transactional, account and campaign email. SMS delivery (Twilio) for transactional text messages where used. Analytics and error monitoring for product and reliability purposes. We may also share information when required by law, valid legal process, or to protect the rights, property, or safety of Revvin, our users, or the public; and in connection with a corporate transaction such as a merger, financing, or sale of assets, in which case we will require the recipient to honor this Policy or provide notice.
Revvin operates in the United States, Canada and the United Arab Emirates. Our infrastructure providers may process data in the United States and other countries. By using the Service you understand that your information may be transferred to and processed in jurisdictions outside your own, including the United States, and we apply reasonable safeguards consistent with applicable law.
We retain account information for as long as your account is active. Referral records, including the parties involved and status changes, are retained while either the referrer or the business account is active and for a reasonable period afterward so that disputes about closed deals can be resolved. Unsubscribe and bounce records are kept indefinitely to preserve recorded opt-outs and delivery restrictions. We may keep limited records longer where required by law (for example, tax records) or for fraud prevention. You can request deletion of your account at any time as described in Section 8.
We use cookies and similar technologies for authentication, session management, security, and basic product analytics. You can control cookies through your browser settings; disabling essential cookies will prevent you from signing in. Public marketing measurement. Browser Meta (Facebook) and Plausible measurement is currently paused. We use first-party measurement of public marketing page views, selected actions and labeled demo activity. These events exclude signed-in visitors, account and authentication routes, private receipt links, and preview environments. Recorded page paths and referring addresses omit query strings, fragments and private identifiers. We do not currently measure signup or account milestones through browser analytics.
Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email info@revvin.co from the address associated with your account. We may need to verify your identity before acting on a request. For Leads. If a business sent you a referral through Revvin and you want your information removed from our systems, email info@revvin.co. We will remove it from Revvin, but you may also need to contact the business directly about any records it holds. Marketing and campaign email. You can opt out of marketing and reactivation email at any time using the unsubscribe link in the message. Recorded opt-outs are checked before further marketing and reactivation campaigns are sent. Transactional email related to your account and referrals will continue. California, Colorado, and similar US state privacy rights. Residents of states with comprehensive privacy laws have the rights described above and the right not to be discriminated against for exercising them. We do not sell personal information and we do not engage in cross-context behavioral advertising. Canada (PIPEDA and provincial laws). Canadian users may direct privacy complaints to us first, and if unresolved, to the Office of the Privacy Commissioner of Canada or the applicable provincial regulator. United Arab Emirates (PDPL). Users in the UAE may request access, correction, deletion or restriction of their personal data, and may withdraw consent at any time, by emailing info@revvin.co. Data is processed on the basis of the account contract and, for marketing, on consent. Personal data is stored on infrastructure located outside the UAE, including the United States, under contractual safeguards with our processors.
We use administrative, technical, and organizational measures designed to protect personal information, including TLS in transit, encryption at rest provided by our hosting infrastructure, role-based access controls, row-level database access policies, and secret management for credentials. No system is perfectly secure; we cannot guarantee absolute security and you are responsible for keeping your account credentials confidential.
The Service is intended for users 18 or older and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
We may update this Policy from time to time. If we make material changes we will notify you by email or by an in-app notice and update the "Last updated" date above. Your continued use of the Service after the effective date means you accept the updated Policy.
For privacy questions or to exercise your rights, contact info@revvin.co.