Privacy Policy

We collect the following information:

• Account information: email address, name, and hashed password
• OAuth data from Google or X sign-in (profile info only)
• IP address and user agent for security and rate limiting
• API request logs (endpoint, timestamp, response status)
• Basic analytics data (page views, feature usage)

We use your data to:

• Authenticate your account and manage sessions
• Process billing through Stripe
• Send transactional emails (account confirmations, billing receipts)
• Enforce rate limits and prevent abuse
• Improve the product and fix bugs

We do not sell your personal data. We do not serve advertisements. We do not share your data with third parties for marketing purposes. Your usage data is never used to target you with ads.

We use the following third-party services:

• Stripe — payment processing (handles card details directly)
• Resend — transactional email delivery
• Google OAuth — optional sign-in provider
• Cloudflare — hosting, CDN, and storage

Each service has its own privacy policy governing their handling of your data.

We use cookies strictly for session authentication and basic analytics. We do not use advertising cookies or third-party tracking cookies. You can disable cookies in your browser, but this may prevent you from signing in.

We retain your account data for as long as your account is active. API request logs are retained for 90 days. You may request deletion of your account and associated data at any time by contacting us.

We protect your data with industry-standard practices: passwords are hashed with bcrypt, API keys are hashed with SHA-256, all traffic is encrypted via HTTPS, and access to production systems is restricted. No system is 100% secure, but we take reasonable measures to protect your data.

Your data is stored and processed in the United States. By using Revorian, you consent to the transfer and processing of your data in the United States.

Revorian is not intended for use by anyone under the age of 18. We do not knowingly collect data from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

We may update this privacy policy from time to time. We will notify registered users of material changes via email. Continued use of the service after changes take effect constitutes acceptance of the updated policy.