Privacy Policy

Revantaa (“we”, “us”) helps local business owners monitor and respond to their customer reviews. This policy describes what data we collect, why, and how we protect it. Questions: support@revantaa.com.

Account data. Your email address, used for sign-in (magic links), negative-review alerts, and the weekly digest.

Google Business Profile data. With your explicit OAuth consent, we access the business profile you select: its name, rating, review count, and its reviews (reviewer display name, star rating, review text, dates, and any owner reply). We also post the replies you approve, on your behalf.

Billing data. Payments are processed by Stripe. We never see or store your card number — only your Stripe customer reference and subscription status.

Operational data. Sync logs and an audit trail of actions taken in your account (e.g. a reply was posted), kept for reliability and security.

Revantaa's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we use Google Business Profile data only to provide the features you see in the product: displaying your reviews, generating reply suggestions you request, posting replies you approve, sending you alerts and digests about your own reviews, and showing your rating in your widget. We do not sell this data, use it for advertising, or allow humans to read it except with your consent, for security, or as required by law.

Review text is sent to our AI provider (OpenAI) solely to generate a reply suggestion when you (or your alert settings) request one. It is not used to train models.

Google access tokens are encrypted at rest with AES-256-GCM and are never written to logs or exposed to your browser. All data is transmitted over TLS. Database access is isolated per account with row-level security.

While subscribed: we retain your reviews and account data to provide the service.

If you disconnect Google or cancel: your Google tokens are revoked and permanently deleted within 24 hours. Your review history remains viewable and exportable (CSV) for 90 days, then is permanently deleted. Minimal billing records are retained as required for financial compliance.

On request: email us and we will delete your account and all associated data within 30 days, regardless of subscription status. You can also revoke Revantaa's access at any time from your Google account permissions.

Supabase (database & authentication), Vercel (hosting), Stripe (payments), Resend (email delivery), OpenAI (reply suggestions), and Google (Business Profile APIs). Each receives only the data needed for its function.

If this policy changes materially, we'll email account holders before the change takes effect.