How REVORY handles personal data.

Ametrine Labs is controller for account, authentication, security, billing, support, service usage, operations and commercial relationship data. For personal data in contractor CSV/XLSX exports and related evidence, Ametrine Labs generally acts as processor/operator on the business customer’s documented instructions; that customer remains controller.

Account and authentication data come from you or Google and are used for access, identity, fraud prevention and contract performance. Workspace settings and usage events come from your use and support service delivery, security and legitimate operational interests. Billing identifiers come from Stripe for contract performance, accounting and legal duties. Support messages come from you to answer requests. Customer export data comes from files you submit to produce the requested analysis under the Customer’s instructions and lawful basis.

REVORY processes supported CSV/XLSX content, external IDs, mapping choices, provenance, values, dates, statuses and relationship fields. Original files are parsed in application memory; canonical records, mappings, findings and audit evidence are stored in the workspace database. Do not upload payment-card data, health data, credentials or data unrelated to the supported service.

For canonical mapping assistance, the AI provider receives column headers, inferred types, fill rates and redacted shape labels rather than raw rows. Other optional legacy or bounded features may receive limited context such as a first name, offer label, workspace label or deterministic metrics to generate a narrow classification, explanation or draft. AI is optional where presented, cannot approve imports or financial findings and is not used for solely automated decisions producing legal or similarly significant effects.

We disclose data only to the subprocessors listed in the Subprocessor Notice, people authorized by the Customer, professional advisers under confidentiality, authorities when legally required, and a successor in a lawful corporate transaction. REVORY does not sell personal data or use Customer Data for third-party advertising.

Some providers may process data outside Brazil. We apply contractual, technical and organizational safeguards and will use a transfer mechanism permitted by LGPD and ANPD Resolution CD/ANPD No. 19/2024 when required. The exact production mechanism and any required standard contractual clauses are subject to final legal confirmation and will be reflected in the DPA or applicable Order before reliance on that mechanism.

Active workspace analysis defaults to 365 days and can be configured to 30, 90, 180 or 365 days; the scheduled retention process removes expired import sessions, findings, analysis runs, snapshots and evidence events. Self-service deletion removes supported analysis data immediately. Account, legal-acceptance, security, billing, tax, support and backup records are retained only while reasonably needed for their purpose or legal obligations; the final period by category remains an internal legal/operations decision and is not represented here as a fixed unimplemented deadline.

Workspace users can export available stored workspace data and delete supported analysis data in Settings. Account closure, correction outside self-service tools or deletion requests may be sent to support. We verify identity and authority and may retain records when law, security, dispute preservation or backup cycles require it.

Subject to applicable conditions, a data subject may request confirmation, access, correction, anonymization, blocking or deletion of unnecessary or unlawfully processed data, portability, information about sharing, consent information and revocation, review of qualifying automated decisions, or opposition. End customers should normally contact the contractor that controls the imported record; we assist that Customer under the DPA.

We use the measures described in the Security Overview. No system is risk-free. If an incident affects Customer Personal Data, we notify the Customer without undue delay after becoming aware and provide available information needed for its legal assessment. We do not promise an unsupported fixed notification hour.

REVORY uses essential authentication and security storage. Production may use Vercel Web Analytics and Speed Insights for aggregated usage and performance measurement; the configured analytics implementation is cookieless and does not include advertising trackers. See the Cookie Notice.

Send privacy requests to support@revory.app; do not email exports, passwords or card data. You may also petition Brazil’s Autoridade Nacional de Proteção de Dados (ANPD). No individual DPO is publicly named; this contact receives privacy requests for the company.

We will publish the effective date and version. Material changes will be communicated through the service, email or website when appropriate. Portuguese and English versions are intended to be materially equivalent; the Portuguese version governs for Brazilian mandatory-law interpretation if an unavoidable inconsistency exists.