Privacy Policy

1. Introduction

Revive ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our payment recovery service.

2. Information We Collect

We collect information you provide directly:

• Account information (name, email address, company name)
• Payment information (processed securely through Stripe — we never store card numbers)
• Stripe account data accessed via OAuth (payment intents, customer emails, invoice data)
• Usage data and analytics
• Communications you send to us

3. How We Use Your Information

• To provide and maintain our payment recovery service
• To process payment retries on your behalf
• To send dunning emails to your customers (on your behalf)
• To generate recovery analytics and reports
• To communicate with you about your account
• To improve our service and develop new features
• To comply with legal obligations

4. Stripe Data Access

When you connect your Stripe account via OAuth, we access only the data necessary to perform payment recovery. This includes failed payment intents, customer email addresses, and invoice data. We do not access or store full credit card numbers, bank account numbers, or other sensitive financial credentials. You can revoke our access at any time through your Stripe Dashboard.

5. Data Sharing & Disclosure

We do not sell your personal data. We may share information with:

• Service providers (hosting, email delivery) who process data on our behalf
• Stripe, as necessary to perform payment retries and OAuth authentication
• Law enforcement when required by law

6. Data Security

We implement industry-standard security measures including encryption at rest and in transit (TLS 1.3), secure OAuth token storage, regular security audits, and access controls. Our infrastructure is hosted on SOC 2 compliant providers.

7. Data Retention

We retain your data for as long as your account is active. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law. Aggregated, anonymized data may be retained indefinitely for analytics.

8. Your Rights (GDPR & CCPA)

Depending on your jurisdiction, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability
• Withdraw consent at any time
• Opt out of the sale of personal information (CCPA — note: we do not sell personal data)

To exercise these rights, contact us at privacy@userevive.com.

9. Cookies

We use essential cookies for authentication and session management. We use analytics cookies (which you can opt out of) to understand how our service is used. We do not use advertising or tracking cookies.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or through a notice on our website. Continued use of the service constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this privacy policy or our data practices, contact us at: privacy@userevive.com