Privacy Policy
Last updated: January 15, 2025
Revorva is a product of Humanaira Ltd, a company registered in England and Wales (registered office: 167–169 Great Portland St, London, W1W 5PF). Humanaira Ltd is the data controller responsible for your personal information under this policy. References to “Revorva”, “we”, “us” or “our” in this policy refer to Humanaira Ltd.
1. Information We Collect
When you create an account, we collect your email address, name, and password hash. When you connect your Stripe account via OAuth, we receive an access token and your Stripe account ID. We do not store or have access to your customers' full credit card numbers.
2. How We Use Your Information
We use your information to: (a) provide the Revorva service, including processing payment retries and sending dunning emails on your behalf; (b) communicate with you about your account; (c) improve our service; (d) comply with legal obligations.
3. Stripe Data
We access your Stripe data exclusively via Stripe Connect OAuth with the permissions you grant. We process payment intent data and customer email addresses solely for the purpose of recovering failed payments. We do not sell, share, or use this data for any other purpose.
4. Data Security
All data is encrypted at rest and in transit using AES-256 and TLS 1.3. Access tokens are stored encrypted. Our infrastructure is hosted on Vercel and Supabase with SOC 2 compliant providers. We perform regular security audits and follow OWASP best practices.
5. Third-Party Services
We use the following third-party services: Stripe (payment processing), Supabase (database and authentication), Resend (email delivery), and Vercel (hosting). Each service has its own privacy policy governing their handling of data.
6. GDPR & CCPA
We comply with GDPR and CCPA. You have the right to access, correct, delete, or export your personal data at any time. To exercise these rights, contact us at support@revorva.com. We will respond within 30 days.
7. Data Retention
We retain your data for as long as your account is active. When you delete your account, we remove all personal data within 30 days and anonymize analytics data. Stripe access tokens are revoked immediately upon account deletion or disconnection.
8. Cookies & Analytics
We use essential cookies for authentication and session management. We also use Vercel Analytics for anonymous usage tracking.
With your consent, we use Google Analytics 4 to understand how visitors interact with our website. Google Analytics collects anonymised data such as pages visited, time on site, and general location (country/region). We do not enable advertising features, and IP addresses are anonymised. No personally identifiable information is sent to Google.
Google Analytics cookies are only set after you click “Accept” in the cookie banner. If you click “Decline”, no Google Analytics cookies or scripts are loaded. You can change your preference at any time by clearing your browser's local storage.
For more information on how Google handles data collected via Analytics, see Google's Privacy Policy.
9. Contact
For questions about this privacy policy, contact us at support@revorva.com.