Privacy Policy

RevnuPros ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our software platform for creating invoices and estimates, sending payment reminders by SMS and email, accepting payments through a third-party processor, and organizing job records (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

2.1 Information You Provide to Us

• Account Information: Name, email address, phone number, business name, business address, contractor license number, business logo, and brand color
• Payment Information: Credit card details (processed and stored only by Stripe, never by RevnuPros)
• Customer Data: Information about your customers including names, phone numbers, email addresses, billing and job-site addresses, SMS consent records, and invoice details you upload to the Service
• Invoice and Estimate Content: Line items, totals, tax rates, notes, deposit amounts, payment status, and any photos or descriptions of completed work you upload
• Photos: Photos of completed work, work-in-progress, or paper invoices that you upload. Photos are stored privately in our cloud storage and may be embedded on PDF invoices you send
• AI Inputs: Text descriptions and photos you submit to the AI invoice generator and refine endpoints (see Section 5)
• Communication Content: SMS and email message bodies sent through RevnuPros, including delivery status, consent records, and STOP / opt-out events
• Support Communications: Information you provide when contacting customer support

2.2 Information Automatically Collected

• Usage Data: Pages visited, features used, time spent on the Service, click patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Cookies and Tracking: We use cookies and similar technologies to track activity and store preferences
• Message Delivery Data: Delivery status, open rates, response rates for SMS and email messages

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your transactions and send you related information
• Send you technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Send SMS and email messages on your behalf to your customers
• Monitor and analyze usage and trends to improve the Service
• Detect, prevent, and address technical issues and security vulnerabilities
• Comply with legal obligations and enforce our Terms of Service
• Provide customer support and troubleshooting

We may share your information in the following situations:

4.1 Service Providers (Subprocessors)

We share specific information with the following third-party vendors who process data on our behalf. Each is bound by a data processing agreement and is identified here so you know exactly where your data goes:

• Supabase (database, authentication, file storage) — Stores your account, customer, invoice, and photo data in the United States.
• Anthropic (AI invoice generation) — Receives the text descriptions and photos you submit to the AI features for the limited purpose of generating invoice drafts. Per Anthropic's commercial terms, your inputs and outputs are not used to train their models.
• Stripe (payments) — Processes subscription payments to RevnuPros and the Stripe Payment Links sent to your customers. RevnuPros never sees or stores customer card numbers.
• Twilio (SMS) — Delivers text messages, including invoice notifications and reminders, to your customers' phones.
• Resend (email) — Delivers transactional email, including invoice emails and team invites, to recipients.
• Lob (certified mail) — Prints and mails Notices of Intent to Lien on your behalf, when you initiate them.
• Vercel (hosting) — Hosts the RevnuPros application servers and CDN.
• PostHog (product analytics) — Records anonymized usage patterns to help us improve the Service. Does not receive customer data.

We will update this list at this page if subprocessors change. Material changes will be announced in advance via email.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders, search warrants)
• Government or regulatory investigations
• Requests from law enforcement
• Protection of our legal rights or those of others

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

RevnuPros uses Anthropic's Claude API to generate and refine invoice drafts from the text descriptions and photos you submit. When you use the AI features:

• The text you type or speak into the description box is sent to Anthropic for processing.
• Photos you upload to the AI generator are sent to Anthropic as base64-encoded images.
• Your existing draft is sent to Anthropic when you use the "Refine" feature so the model can apply your edit.
• Anthropic returns a structured draft (line items, totals, notes) which RevnuPros stores in your account.
• Under Anthropic's commercial terms of service, your inputs and outputs are NOT used to train Anthropic's models.
• You can use RevnuPros entirely without the AI features — manual invoice creation is fully supported.
• We may disable AI access for your account if abuse, excessive automated use, or content policy violations are detected. See Section 16.

Regarding message recipients (your customers who receive messages through RevnuPros):

• We act as your service provider and process recipient data on your instructions
• You are the data controller responsible for obtaining proper consent
• Recipients have the right to opt-out by replying STOP to any message
• We automatically process opt-out requests and cease messaging
• You must maintain records of consent for all message recipients
• We do not use recipient phone numbers or emails for any purpose other than delivering your messages

We retain your information for as long as your account is active or as needed to provide you the Service. Specific retention periods:

• Account Data: Retained while your account is active, plus 90 days after cancellation
• Message History: Retained for 7 years to comply with TCPA recordkeeping requirements
• Payment Records: Retained for 7 years to comply with tax and accounting regulations
• Audit Logs: Retained for 3 years for security and compliance purposes

You may request deletion of your data by contacting us at andrew@revnupros.com. Note that some data may be retained as required by law.

We implement appropriate technical and organizational security measures to protect your information:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Regular security assessments and penetration testing
• Access controls and authentication requirements
• Employee training on data security and privacy
• Incident response and breach notification procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Depending on your location, you may have the following rights regarding your personal information:

9.1 General Rights

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Data Portability: Request a copy of your data in a structured, machine-readable format
• Objection: Object to our processing of your personal information
• Restriction: Request restriction of processing in certain circumstances

9.2 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by us
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

9.3 European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation including the rights listed above plus:

• Right to lodge a complaint with a supervisory authority
• Right to withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, contact us at andrew@revnupros.com. We will respond within 30 days.

We use cookies and similar tracking technologies to track activity on our Service:

Types of Cookies We Use:

• Essential Cookies: Required for the Service to function (authentication, security)
• Performance Cookies: Collect information about how you use the Service
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand usage patterns and improve the Service

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of the Service.

Our Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of every website you visit and service you use.

Third-party services we integrate with include payment processors, SMS providers, email providers, and analytics services. Each has their own privacy policy governing their use of your information.

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at andrew@revnupros.com.

If we become aware that we have collected personal information from children without verification of parental consent, we will take steps to remove that information from our servers.

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ.

If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal information, to the United States and process it there.

By using the Service, you consent to the transfer of your information to the United States and the processing of your information in accordance with this Privacy Policy.

We may update our Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date at the top of this Privacy Policy
• Sending you an email notification for material changes

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

We do not currently respond to Do Not Track (DNT) signals from web browsers. We may adopt a DNT standard in the future if one is established and becomes industry standard.

We may suspend your account or disable specific features (including the AI invoice generator) if we reasonably believe you are violating our Terms of Service or this Privacy Policy, including but not limited to:

• Sending SMS or email to recipients who have not consented or who have opted out.
• Using RevnuPros to send spam, harassment, fraudulent invoices, or other unlawful communications.
• Submitting prompts or photos to the AI features that violate Anthropic's usage policies (e.g. illegal content, attempts to generate harmful output).
• Abusing the AI features through scripted, automated, or excessive use intended to circumvent rate limits or fair-use expectations.
• Failing to pay your subscription, attempting payment chargebacks for valid invoices, or providing fraudulent payment information.
• Sharing your account credentials with parties outside your organization (use the team invite flow instead).

When an account is suspended, the user is shown a notice identifying the issue and the reason for the action. We will email the org owner before suspension where practical. To dispute or resolve a suspension, contact andrew@revnupros.com. If you wish to terminate your own account, you can request full deletion of your data at any time per Section 9.

If you have any questions about this Privacy Policy, please contact us: