Privacy Policy

1. Introduction

REVNU ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our payment reminder software platform (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

2. Information We Collect

2.1 Information You Provide to Us

• Account Information: Name, email address, phone number, business name, business address, contractor license number, business logo, and brand color
• Payment Information: Credit card details (processed and stored only by Stripe, never by REVNU)
• Customer Data: Information about your customers including names, phone numbers, email addresses, billing and job-site addresses, SMS consent records, and invoice details you upload to the Service
• Invoice and Estimate Content: Line items, totals, tax rates, notes, deposit amounts, payment status, and any photos or descriptions of completed work you upload
• Photos: Photos of completed work, work-in-progress, or paper invoices that you upload. Photos are stored privately in our cloud storage and may be embedded on PDF invoices you send
• AI Inputs: Text descriptions and photos you submit to the AI invoice generator and refine endpoints (see Section 5.5)
• Communication Content: SMS and email message bodies sent through REVNU, including delivery status, consent records, and STOP / opt-out events
• Support Communications: Information you provide when contacting customer support

2.2 Information Automatically Collected

• Usage Data: Pages visited, features used, time spent on the Service, click patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Cookies and Tracking: We use cookies and similar technologies to track activity and store preferences
• Message Delivery Data: Delivery status, open rates, response rates for SMS and email messages

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your transactions and send you related information
• Send you technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Send SMS and email messages on your behalf to your customers
• Monitor and analyze usage and trends to improve the Service
• Detect, prevent, and address technical issues and security vulnerabilities
• Comply with legal obligations and enforce our Terms of Service
• Provide customer support and troubleshooting

4. How We Share Your Information

We may share your information in the following situations:

4.1 Service Providers (Subprocessors)

We share specific information with the following third-party vendors who process data on our behalf. Each is bound by a data processing agreement and is identified here so you know exactly where your data goes:

• Supabase (database, authentication, file storage) — Stores your account, customer, invoice, and photo data in the United States.
• Anthropic (AI invoice generation) — Receives the text descriptions and photos you submit to the AI features for the limited purpose of generating invoice drafts. Per Anthropic's commercial terms, your inputs and outputs are not used to train their models.
• Stripe (payments) — Processes subscription payments to REVNU and the Stripe Payment Links sent to your customers. REVNU never sees or stores customer card numbers.
• Twilio (SMS) — Delivers text messages, including invoice notifications and reminders, to your customers' phones.
• Resend (email) — Delivers transactional email, including invoice emails and team invites, to recipients.
• Lob (certified mail) — Prints and mails Notices of Intent to Lien on your behalf, when you initiate them.
• Vercel (hosting) — Hosts the REVNU application servers and CDN.
• PostHog (product analytics) — Records anonymized usage patterns to help us improve the Service. Does not receive customer data.

We will update this list at this page if subprocessors change. Material changes will be announced in advance via email.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders, search warrants)
• Government or regulatory investigations
• Requests from law enforcement
• Protection of our legal rights or those of others

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

4.5 AI Processing of Your Inputs

REVNU uses Anthropic's Claude API to generate and refine invoice drafts from the text descriptions and photos you submit. When you use the AI features:

• The text you type or speak into the description box is sent to Anthropic for processing.
• Photos you upload to the AI generator are sent to Anthropic as base64-encoded images.
• Your existing draft is sent to Anthropic when you use the "Refine" feature so the model can apply your edit.
• Anthropic returns a structured draft (line items, totals, notes) which REVNU stores in your account.
• Under Anthropic's commercial terms of service, your inputs and outputs are NOT used to train Anthropic's models.
• You can use REVNU entirely without the AI features — manual invoice creation is fully supported.
• We may disable AI access for your account if abuse, excessive automated use, or content policy violations are detected. See Section 16.

5. TCPA Compliance and Message Recipient Data

Regarding message recipients (your customers who receive messages through REVNU):

• We act as your service provider and process recipient data on your instructions
• You are the data controller responsible for obtaining proper consent
• Recipients have the right to opt-out by replying STOP to any message
• We automatically process opt-out requests and cease messaging
• You must maintain records of consent for all message recipients
• We do not use recipient phone numbers or emails for any purpose other than delivering your messages

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you the Service. Specific retention periods:

• Account Data: Retained while your account is active, plus 90 days after cancellation
• Message History: Retained for 7 years to comply with TCPA recordkeeping requirements
• Payment Records: Retained for 7 years to comply with tax and accounting regulations
• Audit Logs: Retained for 3 years for security and compliance purposes

You may request deletion of your data by contacting us at privacy@revnu.com. Note that some data may be retained as required by law.

7. Data Security

We implement appropriate technical and organizational security measures to protect your information:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Regular security assessments and penetration testing
• Access controls and authentication requirements
• Employee training on data security and privacy
• Incident response and breach notification procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

8.1 General Rights

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Data Portability: Request a copy of your data in a structured, machine-readable format
• Objection: Object to our processing of your personal information
• Restriction: Request restriction of processing in certain circumstances

8.2 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by us
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

8.3 European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation including the rights listed above plus:

• Right to lodge a complaint with a supervisory authority
• Right to withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, contact us at privacy@revnu.com. We will respond within 30 days.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service:

Types of Cookies We Use:

• Essential Cookies: Required for the Service to function (authentication, security)
• Performance Cookies: Collect information about how you use the Service
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand usage patterns and improve the Service

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of the Service.

10. Third-Party Links and Services

Our Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of every website you visit and service you use.

Third-party services we integrate with include payment processors, SMS providers, email providers, and analytics services. Each has their own privacy policy governing their use of your information.

11. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@revnu.com.

If we become aware that we have collected personal information from children without verification of parental consent, we will take steps to remove that information from our servers.

12. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ.

If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal information, to the United States and process it there.

By using the Service, you consent to the transfer of your information to the United States and the processing of your information in accordance with this Privacy Policy.

13. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date at the top of this Privacy Policy
• Sending you an email notification for material changes

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

14. Do Not Track Signals

We do not currently respond to Do Not Track (DNT) signals from web browsers. We may adopt a DNT standard in the future if one is established and becomes industry standard.

16. Acceptable Use, Suspension, and Termination

We may suspend your account or disable specific features (including the AI invoice generator) if we reasonably believe you are violating our Terms of Service or this Privacy Policy, including but not limited to:

• Sending SMS or email to recipients who have not consented or who have opted out.
• Using REVNU to send spam, harassment, fraudulent invoices, or other unlawful communications.
• Submitting prompts or photos to the AI features that violate Anthropic's usage policies (e.g. illegal content, attempts to generate harmful output).
• Abusing the AI features through scripted, automated, or excessive use intended to circumvent rate limits or fair-use expectations.
• Failing to pay your subscription, attempting payment chargebacks for valid invoices, or providing fraudulent payment information.
• Sharing your account credentials with parties outside your organization (use the team invite flow instead).

When an account is suspended, the user is shown a notice identifying the issue and the reason for the action. We will email the org owner before suspension where practical. To dispute or resolve a suspension, contact support@revnu.com. If you wish to terminate your own account, you can request full deletion of your data at any time per Section 8.

17. Contact Us

If you have any questions about this Privacy Policy, please contact us: