Privacy policy

• About our customers. When a business owner or their staff use Revenuewise, we decide how that information is used. This policy covers it fully.
• About our customers' clients. When you book a class, fill in a form or get a message from a business that uses Revenuewise, that business decides what is collected and why, and we process it on their behalf. Their own privacy policy applies too, and they should be your first contact about it (see section 9).

Information you give us

• Account details: your name, email address and phone number, and your business's name, address, website and opening hours.
• Content you add: text, photos, logos, offers, prices, class schedules and posts.
• Billing details: your plan and invoices. Card numbers go straight to Stripe; we never see or store them.
• If you register a domain through us: the contact details the domain registry requires.
• Messages you send our support team.

Information about your clients and leads, which you or they give us

• Names, email addresses and phone numbers; bookings, attendance, memberships and notes.
• Payments and refunds (amounts and dates; card details stay with Stripe).
• Messages sent to them, delivery results, and their consent and opt-out choices, including when and from where (IP address) consent was given.

Information from services you connect

When you connect Google, Meta (Facebook, Instagram, Meta Ads), Mindbody or Stripe, we receive what we need for the features you turn on, such as access tokens, Page and location names, reviews, post results, ad results and calendar busy times. The data deletion page lists exactly what we keep from each service.

Public information for audits

When you request a free audit, we look up public information about your business: your website, your Google listing, search results and how competitors appear in them.

Collected automatically

• When you use our app: your IP address, browser and device type, and when you signed in, used to keep your account secure.
• On websites we host: which pages are viewed and where visitors came from. We don't use cookies for this and don't store IP addresses; each visitor is counted using a code that changes every day, so they can't be followed from one day to the next. These records are deleted after 90 days.

• To provide the service: build and host websites, take bookings and payments, send the messages you set up, publish posts, run ads and show results.
• To write drafts with AI, such as website copy, posts and ad text, which you review before they're published.
• To send you sign-in codes, receipts, booking notifications and important account notices.
• To keep the service secure, prevent fraud and abuse, and fix problems.
• To improve the product, using usage information in aggregate.
• To meet legal obligations, such as keeping tax records.

We don't sell personal information, and we don't use it, or share it, for targeted advertising by others. We send you product news only if you've agreed to it, and you can unsubscribe at any time.

Revenuewise's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use data from Google and Meta only to provide the features you turned on, as described on the data deletion page. We don't sell it, use it for advertising, or use it to train AI models, and our staff see it only when you ask for help or to keep the service secure.

We send texts on behalf of businesses only to people who agreed to receive them. Reply STOP to any message to stop receiving them, or HELP for help; message and data rates may apply. We don't share mobile numbers or text-message consent with third parties or affiliates for their marketing.

We share personal information only with:

• Service providers who run parts of the service for us, under contracts that limit their use of it: Stripe (billing and payments), Postmark (email), Twilio (text messages), Cloudflare (image storage and spam protection on forms), Vercel and Render (hosting and databases), Anthropic and OpenAI (writing AI drafts; under their terms, they don't train models on it), DataForSEO (search data for audits), Name.com (domain registration) and Sentry (error reports).
• The services you connect, such as Google and Meta, when you ask us to act there, for example to publish a post or reply to a review.
• The business you booked with, if you're one of their clients.
• Authorities, when the law requires it or to protect people's safety or our rights.
• A buyer or successor, if our business is sold or merged; this policy would continue to apply.

We use one essential cookie to keep you signed in. We don't use advertising or third-party tracking cookies. Forms on our pages and hosted websites use Cloudflare Turnstile to block spam, which may process your browser and device information for that purpose only.

• Account information: while your account is open. When you delete it, we take it offline straight away and erase it permanently after 30 days.
• Information from a connected service: until you disconnect it and ask us to delete it, or delete your account.
• Page-view records on hosted websites: 90 days.
• Invoices and payment records: as long as tax and accounting law requires.

You can see and correct most of your information in the app. Depending on where you live (for example under GDPR in the UK and Europe, or the CCPA in California), you may also have the right to ask for a copy of your information, to have it corrected or deleted, to object to or limit how we use it, and to take it elsewhere. We won't treat you differently for using these rights.

To make a request, email support@revenuewise.app. We may need to confirm it's you, and we reply within 30 days. If you're a client of a business that uses Revenuewise, we'll pass your request to that business and help them respond. You can also complain to your local data protection authority.

We encrypt information in transit, encrypt access tokens for connected services when stored, separate each business's data from others', and limit staff access to what their role needs. No system is perfectly secure; if a breach affects your information, we'll tell you and the authorities as the law requires.

We and our service providers process information in the United States and other countries. Where the law requires, we use safeguards such as the European Commission's standard contractual clauses for these transfers.

Revenuewise is for businesses and isn't aimed at children. We don't knowingly collect information from children under 16 except where a business books them in with a parent or guardian's permission.

We'll update this policy as the product and the law change, and show the date at the top. For significant changes we'll email customers or tell them in the app before the changes take effect.

Questions about privacy: email support@revenuewise.app. See also our terms of service.