Privacy Policy

1. Who we are

Revvo AI ("Revvo", "we", "our", "us") is a software-as-a-service company incorporated in Slovenia. We operate the Revvo platform — an AI-assisted workshop management tool — and the website revvo-ai.com.

As the data controller under the EU General Data Protection Regulation (GDPR), we are responsible for determining how and why personal data is processed. Our registered address is in Ljubljana, Slovenia, European Union.

📧 privacy@revvo-ai.com

2. What data we collect

Account data

• Your name, email address, and password (hashed) when you register
• Workshop name, address, and contact details you provide in your profile
• Billing information (processed by our payment provider — we never store raw card numbers)

Usage data

• Pages visited, features used, and interaction events within the app
• IP address, browser type, and device information
• Error logs to help us fix bugs

Workshop data (your customers' data)

When you use Revvo to manage your workshop, you may enter data about your own customers — names, phone numbers, vehicle registration plates, service histories, and messages. You are the data controller for this information; we are the data processor acting on your behalf.

3. How we use your data

• To provide and improve the Revvo service
• To send transactional emails (account confirmation, password reset, billing receipts)
• To send product update emails where you've opted in
• To analyse usage patterns and fix issues (aggregated, never sold)
• To comply with our legal obligations

4. AI and your data

Revvo uses third-party AI APIs (such as OpenAI) to generate reply suggestions. When a message is sent to the AI, only the text of that specific message and minimal context is transmitted. We configure these API calls with data-retention disabled wherever the provider allows it.

We do not use your customers' data to fine-tune, train, or benchmark any AI model.

5. Data sharing

We do not sell personal data. We share data only with:

• Infrastructure providers — cloud hosting (EU-based servers) for running the platform
• Payment processors — Stripe or equivalent, under their own GDPR-compliant terms
• AI API providers — limited to message text required for a response, with no training rights
• Analytics tools — anonymised and aggregated usage data only
• Legal authorities — only when required by applicable law

6. Data retention

We retain your account data for as long as your account is active, plus up to 90 days after deletion to allow account recovery.

Workshop data (your customers' records) is retained for the duration of your subscription. On account deletion we will permanently erase it within 30 days, unless we are legally required to retain it.

Usage logs are retained for up to 12 months for security and debugging purposes.

7. Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Request erasure ("right to be forgotten")
• Restrict or object to processing
• Data portability (receive your data in a machine-readable format)
• Withdraw consent at any time
• Lodge a complaint with the Slovenian supervisory authority (IP RS)

To exercise any of these rights, see our GDPR page or email privacy@revvo-ai.com.

8. Cookies

We use only essential cookies required for the app to function (session authentication) and a language preference cookie. We do not use advertising or tracking cookies.

On the public marketing website, we may use analytics cookies to understand page visits. No personal data is linked to these.

9. Contact & supervisory authority

For privacy questions: privacy@revvo-ai.com

You also have the right to contact the Slovenian Information Commissioner (Informacijski pooblaščenec): www.ip-rs.si