RevoraHQ

Privacy Policy

Effective date: April 2, 2026

RevoraHQ, Inc. (“RevoraHQ,” “we,” “us,” or “our”) operates the RevoraHQ Order-to-Cash platform available at www.revorahq.com (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the Service.

By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

We collect information you provide when you:

  • Create an account — name, company name, email address, and password.
  • Use the Service — customer records, sales orders, quotes, invoices, price lists, and other business data you enter or import.
  • Invite team members — name and email address of your invitees.
  • Contact us — the contents of any support requests or correspondence.

1.2 Automatically Collected Information

When you use the Service, we may automatically collect:

  • Log data (IP address, browser type, pages visited, timestamps).
  • Device information (operating system, device identifiers).
  • Usage data (features accessed, actions taken within the platform).

We use Sentry for error monitoring, which may capture metadata about application errors but does not capture business data entered in the Service.

1.3 Payment Information

Subscription billing is processed through Stripe. We do not store full payment card details on our servers. Stripe's privacy practices are governed by the Stripe Privacy Policy.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service.
  • Process transactions and send related notices (invoices, receipts, renewal reminders).
  • Send transactional emails (e.g., quotes, invoices) that you initiate through the Service.
  • Respond to support requests and communicate with you about the Service.
  • Monitor and improve the Service, including debugging and performance analysis.
  • Comply with legal obligations.

We do not sell your personal information or your customers' business data to third parties, and we do not use your business data for advertising purposes.

3. How We Share Your Information

We may share your information with:

  • Service providers — third-party vendors who assist in operating the Service (Supabase for database hosting, Vercel for application hosting, Resend for transactional email, Stripe for billing, Sentry for error monitoring). These providers are contractually bound to use your data only to provide services to us.
  • Legal requirements — if required by law, court order, or governmental authority, or to protect the rights, safety, or property of RevoraHQ or others.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

4. Data Retention

We retain your account information and business data for as long as your account is active or as needed to provide the Service. If you terminate your account, we will delete or anonymize your data within 90 days, unless we are required by law to retain it longer.

5. Security

We implement industry-standard measures to protect your information, including encryption in transit (TLS), row-level security on our database, and JWT-based authentication validated server-side on every request. No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Multi-Tenant Data Isolation

RevoraHQ is a multi-tenant platform. Your organization's data is logically isolated from other organizations' data using row-level security policies enforced at the database level. Your data is never accessible to other tenants.

7. Your Rights

Depending on your location, you may have the right to access, correct, delete, or export your personal information. To exercise these rights, contact us at privacy@revorahq.com.

If you are in the European Economic Area, United Kingdom, or California, you may have additional rights under GDPR or CCPA respectively. We will respond to verified requests within 30 days.

8. Cookies

We use cookies solely for authentication (Supabase session cookies) and do not use tracking or advertising cookies. You can disable cookies in your browser settings, but doing so will prevent you from signing in to the Service.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page and notify active account holders by email. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

RevoraHQ, Inc.
privacy@revorahq.com