Privacy Policy

What we collect

When you sign up, we collect your name, work email, business name, and website URL. When your AI employee handles a conversation, we store the conversation transcript, any leads or intents it detects, and the knowledge base content we crawl from your site so it can answer accurately. We do not collect more than a business needs to run its AI employee.

How we use it

Conversation and lead data is used to power your dashboard, your AI employee's answers, and (if you opt into the AI Business Network) referral matching. We do not sell customer data, and we do not use one business's conversations to train models that answer for another business.

Multi-tenant isolation

Every business's data is isolated at the database layer. One business's conversations, leads, and knowledge base are never visible to another business, and production data never leaves the production environment — staging and sandbox environments use synthetic or anonymized data only.

Credentials and integrations

Payment keys and third-party integration tokens you connect are encrypted at rest. They are never exposed in the admin panel or in any API response, including to Revorex.ai staff — support can see that a credential exists and is valid, never its value.

Google User Data

We've built a Gmail connector so your AI employee can identify which Gmail account a team member has connected. It is still in pre-launch testing and is not available to customers yet — we have not completed the Google review described below.

• Scopes requested: openid, email, and profile (to identify the connected Google account) and https://www.googleapis.com/auth/gmail.readonly. The readonly scope is reserved for a Gmail-reading feature we have not built yet; today it is requested but not used to read any message.
• Gmail messages: not read, parsed, or stored today. The only Gmail API call our code makes is a profile lookup for the connected email address — no message-list or message-content endpoint is ever called.
• Token security: OAuth tokens are encrypted at rest (AES-256-GCM) using the same method we use for every other integration credential, decrypted only server-side, and never exposed in the admin panel, API responses, or to Revorex.ai staff.
• Retention: disconnecting immediately revokes the token with Google and deletes the stored credential. The same happens automatically if you delete your account or organization.
• Sharing: never sold or shared with third parties. Used solely to show which Gmail account is connected; would only power the specific feature you connect it for once that exists.
• Disconnecting: the same one-click Disconnect button already used for every other integration on your dashboard's Integrations page, plus the account-deletion request described below.
• Compliance: gmail.readonly is a Google-restricted scope. We will not make this available to real customers until we've completed Google's OAuth verification, and any required security assessment, for that scope — until then, access is limited to internal testing accounts. This section will be updated before that changes.
• Outlook: a separate, Microsoft-run connector (not Google) was built alongside this one and is not covered by Google policy — it uses its own Microsoft Graph scopes and consent flow.

Data retention and deletion

We retain conversation and lead data for as long as your account is active, plus a reasonable period after cancellation for legal and billing purposes. You can request deletion of your account's data at any time by contacting privacy@revorex.ai; regional erasure rights (GDPR/CCPA) are honored on request.

Regional compliance

We apply jurisdiction-aware handling based on your customers' detected region, including GDPR (EU/UK) and CCPA (California) awareness. If you operate in a region with specific local data-residency requirements, contact sales before onboarding so we can confirm current support.

Cookies

We use a small number of cookies for authentication (keeping you signed in) and basic product analytics. See our Cookie Policy for the full list.

Contact

Questions about this policy or a request regarding your data can be sent to privacy@revorex.ai.