1. Who We Are
RevPlex ("RevPlex," "we," "us," or "our") is an AI-powered operational intelligence platform for local service businesses. We provide business analytics, performance insights, and third-party data integrations through our web application at app.revplex.net.
For privacy inquiries, contact us at: info@revplex.net
2. Information We Collect
2.1 Account and Contact Information
When you express interest in RevPlex or create an account, we collect:
• Name and email address (collected when you register for a free trial, prior to full account creation)
• Business industry type and phone number (optional, collected at registration)
• Password (stored in encrypted form via Supabase Auth — we never see your plaintext password)
• Account creation date and login history
Information submitted through our registration form is used to set up your account, contact you about your trial, and improve our onboarding experience. We do not sell this information to third parties.
2.2 Business Data You Upload
When you upload files or connect data sources, we collect and store the business data you provide, which may include:
• Job records (status, revenue, service type, dates)
• Customer identifiers (IDs — not names or personal contact information unless included in your file)
• Invoice and financial records
• Lead and sales pipeline data
You control what data you upload. We recommend uploading only aggregated or anonymized customer identifiers rather than personally identifiable customer information.
2.3 Third-Party Integration Data
When you connect external platforms, we retrieve and store data from those platforms on your behalf:
- CallRail — Inbound call records including answer status, call duration, caller phone numbers, tracking sources, and call dates (last 90 days)
- Jobber — Job records including job status, revenue, client identifiers, job type, and dates
- QuickBooks — Invoice records including invoice status, amounts, customer identifiers, and transaction dates
- Housecall Pro — Job records including work status, revenue, customer identifiers, job type, and scheduled dates
- Google Ads — Campaign performance data including campaign names, ad spend, impressions, clicks, and conversions (last 90 days)
- Meta Ads (Facebook/Instagram) — Campaign performance data including campaign names, ad spend, impressions, clicks, and conversions (last 90 days)
We access only the data scopes you explicitly authorize during the OAuth connection process. You can disconnect any integration at any time, which immediately deletes the associated data from our systems.
2.4 AI-Generated Content
Your business data is processed by Anthropic's Claude API to generate insights, briefings, recommendations, and alerts. We transmit relevant business metrics to Anthropic's API for this purpose. We do not transmit personally identifiable information about your customers to Anthropic.
2.5 Usage Data
We automatically collect:
• Browser type and version
• Device type and operating system
• Pages visited and features used within the application
• IP address
• Session duration and timestamps
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the RevPlex platform
- Generate AI-powered business insights, briefings, alerts, and recommendations
- Sync and display data from your connected third-party integrations
- Authenticate your identity and secure your account
- Respond to support requests and assist with troubleshooting
- Improve and develop new features of the platform
- Send transactional communications (account confirmations, billing receipts, security alerts)
- Comply with legal obligations
We do not use your business data to train AI models. Data sent to Anthropic's API is processed for inference only and is subject to Anthropic's privacy policy.
4. How We Share Your Information
We do not sell your personal information or business data.
We share information only in the following limited circumstances:
4.1 Service Providers
We work with third-party service providers who process data on our behalf under confidentiality obligations:
- Supabase — Authentication and database hosting (supabase.com/privacy)
- Anthropic — AI inference via Claude API (anthropic.com/privacy)
- Stripe — Payment processing and billing (stripe.com/privacy)
- Vercel — Frontend hosting (vercel.com/legal/privacy-policy)
- Railway — Backend hosting (railway.app/legal/privacy)
- Resend — Transactional email delivery (resend.com/privacy)
4.2 Third-Party Platforms You Connect
When you initiate a connection to Jobber, QuickBooks, Housecall Pro, Google Ads, or Meta Ads, you authorize those platforms to share your data with RevPlex. Our use of data received from these platforms is governed by this policy and each platform's respective terms.
4.3 Legal Requirements
We may disclose information if required to do so by law, regulation, legal process, or governmental authority, or to protect the rights, property, or safety of RevPlex, our users, or the public.
4.4 Business Transfers
If RevPlex is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice within the application before your information becomes subject to a different privacy policy.
5. Data Retention
- Account information — Until account deletion
- Uploaded business data — Until you delete it or request deletion
- Integration data (CallRail, Jobber, etc.) — Retained for analytics continuity until account deletion or upon written request to info@revplex.net
- AI-generated insights — Not stored; generated on demand
- Usage logs — 90 days
- Billing records — 7 years (tax compliance)
When you delete your account, we delete or anonymize all associated data within 30 days, except where retention is required by law.
6. Data Security
We implement the following security measures to protect your information:
- All data is encrypted in transit using TLS 1.2 or higher
- Database data is encrypted at rest
- Authentication is handled by Supabase with industry-standard bcrypt password hashing
- Row-Level Security (RLS) is enforced at the database level — your data is isolated from all other users
- OAuth tokens for third-party integrations are stored encrypted
- Access to production systems is restricted to authorized personnel only
No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at info@revplex.net.
7. Your Rights and Choices
7.1 Access and Portability
You may request a copy of the personal data we hold about you at any time by contacting info@revplex.net. We will respond within 30 days.
7.2 Correction
You may update your account information directly within the application settings. For other corrections, contact us at info@revplex.net.
7.3 Deletion
You may delete your account at any time from within the application. Upon deletion, we will remove your data in accordance with Section 5 above. You may also request deletion of specific data (e.g., a particular integration's data) without deleting your full account.
7.4 Disconnecting Integrations
You may disconnect any third-party integration at any time from the Integrations page. Disconnecting stops all future data collection from that platform. Historical data previously synced is retained to preserve analytics continuity (trends, anomaly detection, and pattern recognition require historical records). To delete the historical data from a specific integration, contact us at info@revplex.net.
7.5 Objection and Restriction
You may object to or request restriction of certain processing of your personal data by contacting us at info@revplex.net.
8. California Residents — CCPA
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
- Right to Know — You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, our business purpose, and the categories of third parties we share it with.
- Right to Delete — You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.
- Right to Opt Out of Sale — We do not sell personal information. You do not need to opt out.
- Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA rights.
To exercise your rights, contact us at info@revplex.net. We will respond within 45 days.
Categories of personal information collected: identifiers (email, IP address), commercial information (business revenue, job records, invoice data), internet activity (usage logs), and inferences (AI-generated insights derived from your data).
9. European Users — GDPR
9.1 Legal Basis for Processing
We process your personal data on the following legal bases:
• Contract — Processing necessary to provide the RevPlex service you have contracted for
• Legitimate Interests — Improving our platform, security monitoring, and fraud prevention
• Legal Obligation — Compliance with applicable laws
• Consent — Where we have obtained your explicit consent
9.2 Data Transfers
Your data may be transferred to and processed in the United States. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses where required.
9.3 Data Protection Rights
In addition to the rights listed in Section 7, EEA/UK users have the right to lodge a complaint with your local data protection authority and to withdraw consent at any time where processing is based on consent.
10. Third-Party Integration Terms
Your use of connected third-party platforms is also governed by those platforms' own terms and privacy policies:
- CallRail: callrail.com/privacy
- Jobber: getjobber.com/privacy
- QuickBooks / Intuit: intuit.com/privacy
- Housecall Pro: housecallpro.com/privacy
- Google Ads: policies.google.com/privacy
- Meta (Facebook/Instagram): facebook.com/privacy/policy
11. Children's Privacy
RevPlex is a business intelligence platform intended for use by adults operating businesses. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected information from a minor, we will delete it immediately.
12. Cookies and Tracking
We use essential cookies and local storage to maintain your authenticated session. We do not use advertising cookies or cross-site tracking. We do not use Google Analytics or similar third-party tracking scripts. If we introduce additional cookies in the future, we will update this policy and provide appropriate notice.
13. Changes to This Policy
We may update this privacy policy from time to time. When we make material changes, we will:
• Update the "Last Updated" date at the top of this page
• Notify you via email at the address associated with your account
• Display a prominent notice within the application
Your continued use of RevPlex after changes become effective constitutes your acceptance of the updated policy.
14. SMS and Text Messaging
This section describes how RevPlex handles mobile telephone numbers and text messaging. It applies in addition to the sections above.
14.1 How We Obtain Consent
RevPlex sends text messages only to mobile numbers that have first initiated contact with us. Specifically, when you place a telephone call to a RevPlex business number and we are unable to answer, we may reply by text message to the same number you called from, acknowledging the missed call and offering to help.
We do not purchase, rent, or upload telephone number lists, and we do not obtain numbers from third parties. We do not send text messages to any number that has not first contacted us.
14.2 Message Types, Frequency, and Retention
Messages are conversational and service-related: acknowledging a missed call, answering your questions, and arranging appointments. We do not send promotional or marketing text messages.
Message frequency varies with your interaction with us; most recipients receive a single message per inquiry. Message and data rates may apply.
We retain a log of messages sent and received — including the telephone number, message content, and timestamp — for 12 months, for service quality and compliance purposes. Opt-out records are retained indefinitely so that we can honor them permanently.
14.3 Opting Out and Getting Help
You may opt out at any time by replying STOP to any message. We also recognize STOPALL, UNSUBSCRIBE, CANCEL, END, and QUIT. After you opt out you will receive one confirmation message and no further messages.
Reply HELP for assistance, or contact us at info@revplex.net.
Carriers are not liable for delayed or undelivered messages.
14.4 Mobile Information Is Never Shared
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Sharing with subcontractors who provide message delivery support is permitted solely for that purpose.
Text messaging originator opt-in data and consent are excluded from every other category of information sharing described in this policy. This information will not be sold, rented, or shared with any third party under any circumstances.
14.5 Messaging Operated on Behalf of Client Businesses
RevPlex also builds and operates text messaging workflows for client businesses. Where we do so, the client business is the sender of record: messages are sent from the client's own telephone number, under the client's own carrier registration, and the client's privacy policy governs that communication.
In that role RevPlex acts as a service provider, processing data on the client's instructions. We do not use a client's customer contact information for our own marketing, and we do not share it with any third party.
15. Contact Us
For any questions, requests, or concerns regarding this privacy policy or our data practices:
Email: info@revplex.net
Response time: We aim to respond within 3-5 business days. Security concerns are answered within 72 hours.