Privacy Policy

1. Introduction

REVASY AI (“we”, “us”, “our”) operates the revasy.com platform. This Privacy Policy explains what data we collect when you use our service, how we use it, how we protect it, and what rights you have over your information.

By using REVASY AI, you agree to the collection and use of information in accordance with this policy.

2. Data We Collect

We collect only the minimum data necessary to provide our service:

• Account information: Your email address and name, provided when you sign up.
• Business data: Financial files you upload (Excel/CSV). These are stored encrypted on our servers and are never shared.
• Usage data: Pages visited, features used, and timestamps — used exclusively for improving the service.
• Technical data: IP address, browser type, and device type from standard web server logs.

3. How We Use Your Data

• To provide the REVASY AI service (dashboards, AI analysis, reports)
• To authenticate your account and keep it secure
• To send transactional emails (email verification, password reset)
• To improve our service through anonymized usage analytics

We do NOT: sell your data, use it for advertising, or share it with unauthorized parties.

4. AI Processing (Anthropic Claude)

When you use the AI Assistant, your financial summaries (aggregated metrics, not raw files) are sent to Anthropic's API for analysis. Individual transaction rows are not sent to Claude — only pre-calculated aggregate metrics are included in AI prompts.

Anthropic processes these requests in accordance with their privacy policy: anthropic.com/privacy

5. Data Storage and Security

Your data is stored on Supabase (PostgreSQL, AWS infrastructure) with AES-256 encryption at rest and TLS 1.3 in transit. Row-level security ensures no user can access another user's data. Our security practices are reviewed regularly and designed to protect against unauthorized access, disclosure, or destruction.

6. Data Retention

Your data is retained for as long as your account is active. You may delete your account and all associated data at any time from Settings → Account → Delete Account. After deletion, data is permanently removed from our servers within 30 days.

7. Your Rights (GDPR)

If you are in the European Economic Area, you have the following rights under the General Data Protection Regulation:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to processing
• Lodge a complaint with a supervisory authority

Contact us at privacy@revasy.com to exercise these rights.

8. Cookies

We use essential cookies for authentication only (Supabase session cookie). We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

9. Third-party Services

• Supabase: Database and authentication (privacy policy)
• Anthropic: AI analysis (privacy policy)
• Vercel: Hosting and CDN (privacy policy)

10. Changes to This Policy

We will notify you by email of material changes to this policy. The “last updated” date at the top of this page reflects the most recent version. Continued use of the service after changes constitutes acceptance of the revised policy.