Privacy Policy

1. What we collect

Account data. When you sign up, we collect your email address and the identity fields Clerk provides (name, profile image, auth provider). We store your workspace (organization) name and tier.

Billing platform data. When you connect Stripe, Paddle, LemonSqueezy, or Chargebee, we ingest read-only metadata about your customers, subscriptions, plans, and billing events. We do not receive full payment card numbers. Credentials (API keys, OAuth tokens, webhook secrets) are encrypted with AES-256 at rest.

Usage data. We log which dashboard features you use, when you log in, and aggregate product-analytics events (page views, feature interactions). IP address and user-agent are logged for security and abuse prevention.

Payment data. When you subscribe to a paid tier, Stripe handles the payment; we receive a Stripe customer ID and subscription status, not card details.

2. How we use data

• Compute revenue metrics (MRR, ARPU, churn) and AI pricing recommendations for your workspace only — never pooled with other workspaces.
• Send product emails (weekly brief, payment notifications, trial reminders) to the email you signed up with. You can unsubscribe from product emails any time.
• Send AI-generated prompt context to Anthropic’s Claude API to produce insights. Anthropic processes the data under their enterprise terms and does not train models on it.
• Monitor errors and performance through Sentry and Vercel’s built-in observability. Exception payloads may include stack traces and user IDs, never secrets or billing PII.
• Maintain the service — security, abuse prevention, dispute resolution, legal compliance.

3. Subprocessors

We rely on a short list of trusted subprocessors to operate the service:

• Vercel — hosting, edge network, logs (US/EU regions).
• Neon — PostgreSQL database. Encrypted in transit and at rest.
• Clerk — authentication, session management.
• Anthropic — Claude API for AI insight generation.
• Stripe — billing + payments for the RevTune subscription itself.
• Upstash — Redis rate limiting and caching.
• Resend — transactional and product emails.
• Inngest — background job queue for billing syncs.
• Sentry — error monitoring.
• PostHog — product analytics.

4. How long we keep data

Active workspace data is retained for as long as your account is active. If you delete your workspace, billing-platform data and computed metrics are purged within 30 days. Audit logs and invoice records are retained for 7 years to meet tax and accounting obligations. Disconnecting a single billing source deletes the data synced from that source; daily metric snapshots are preserved so historical charts don’t collapse.

5. Your rights

Under GDPR, CCPA, and similar laws, you can request access to, correction of, or deletion of your personal data; export a copy; or object to specific processing. Email privacy@revtune.io and we’ll respond within 30 days. Scale workspaces have a self-serve export in Settings → Data export.

6. Security

Connections to billing platforms use read-only API keys or OAuth tokens with the minimum scope required. Credentials are encrypted with AES-256-GCM using a key derived per workspace. Database connections use TLS. All traffic to revtune.io is HTTPS. We do not store card numbers, bank accounts, or personally identifying billing PII — Stripe and the billing provider hold those.

7. International transfers

Our infrastructure runs in the United States and the European Union (Vercel + Neon edge regions). By using RevTune you consent to your data being processed in these jurisdictions. Standard Contractual Clauses govern transfers where required.

8. Cookies

We use strictly-necessary cookies for authentication (Clerk session) and a single functional cookie for dark-mode preference. PostHog uses a first-party cookie for product analytics; you can opt out via the link in our footer. We do not sell cookie data.

9. Changes

We’ll email notice of material changes at least 15 days before they take effect. The current version is always the one on this page, with the “Effective” date at the top.

10. Contact

Noventrai Technology LLC — privacy@revtune.io. For general questions, email support@revtune.io.