Privacy Policy

1. About the service

Revo is a private workspace for a small real estate investment team: a deal pipeline, property analysis, offers, broker correspondence, contacts and an AI assistant. Accounts are by invitation only — sign-up is open only to email addresses we have approved.

2. Information we collect

Information you give us

• Account: your name, email address and password. Passwords are stored only as a secure hash by our authentication provider; no one can read them.
• Terms acceptance: the version of the Terms you accepted and when.
• Content: property data, analyses, offers, notes, contacts, team chat messages, and files you upload (for example, a proof-of-funds document).
• Signature: if you draw a signature for offer contracts, we store the image of it. This is not a biometric identifier and we do not collect biometric information.
• Questions to the AI assistant: the text you type into it.

Information from connected services (optional)

• Gmail: if you connect your Google account, we store access tokens and read the email threads of offers sent through Revo, so we can send offers and follow-ups on your behalf and detect broker replies. You can disconnect Gmail in Settings at any time.
• Push notifications: if you turn them on, your browser’s push subscription identifier.

Information collected automatically

• IP address, browser type and server logs, kept by our hosting and database providers for security and operation.
• Strictly necessary cookies and browser storage — see our Cookie Policy. We do not use analytics, advertising or tracking cookies.

Information about people who don’t use Revo

Property listings we receive from the MLS (through MLS Grid) include the listing agent’s name, brokerage, email address and phone number. Users may also add contacts, such as buyers. We use this information only to contact people about buying property and to keep the related correspondence.

3. How we use information

• to create and run your account and provide the service;
• to send offers and follow-ups from your Gmail account when you ask us to, and to detect replies;
• to generate property analyses and answer your questions with AI;
• to send you notifications you have turned on;
• to keep the service secure, prevent abuse and fix problems;
• to respond to your requests and comply with the law.

We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. AI analyses concern properties and are only suggestions — people make the decisions.

4. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only with service providers that process it for us:

• Supabase — database and sign-in (servers in the United States).
• Vercel — website hosting.
• Anthropic — AI models for analyses and the assistant.
• Google — the Gmail integration (only if you connect it) and Google Maps (loaded only after you click to show a map).
• Resend — notification emails.
• Browser push services (such as Google, Mozilla and Apple) — to deliver notifications you turned on.
• OpenStreetMap — map images in the Areas view (the map server receives your IP address).

Content you add is visible to the other members of your team. We may also disclose information if required by law, to protect rights and safety, or as part of a sale or reorganization of the service, in which case this policy will continue to apply to your information.

5. How long we keep information

• Account data and content — until your account is deleted.
• Gmail tokens — until you disconnect Gmail or delete your account.
• Push subscription — until you turn notifications off.
• Server logs — for the period set by our infrastructure providers for security purposes.
• Information needed to establish or defend legal claims — only as long as the applicable limitation period.

6. Your choices and rights

You can ask us to access, correct, delete or export your personal information, or to stop processing it, by emailing jakubpiechnik02@gmail.com. We will respond within 30 days and will not treat you differently for making a request. Residents of some U.S. states (for example California, Colorado, Connecticut, Virginia and others) have these rights under state law; we honor the same requests from everyone. You can also disconnect Gmail and turn off notifications at any time in the app.

Do Not Track and Global Privacy Control: we do not track you across other websites and do not sell or share personal information, so these signals do not change how the service works.

7. Security

Connections to Revo are encrypted (HTTPS), access to data is limited to members of your team, and the database enforces row-level access rules. No system is completely secure; if a breach affects your personal information, we will notify you as required by applicable law, including the Illinois Personal Information Protection Act (815 ILCS 530).

8. Children

Revo is not directed to children under 13 and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

9. Visitors from the European Economic Area and the United Kingdom

If you are in the EEA or the UK, the following also applies under the GDPR and UK GDPR:

• Controller: the owner of Revo, based in the United States, reachable at jakubpiechnik02@gmail.com.
• Legal bases: performing our contract with you (account, service, Gmail integration, AI features); our legitimate interests in running and securing the service and in contacting agents and buyers about property; your consent (push notifications, Google Maps), which you can withdraw at any time without affecting earlier processing; and legal obligations.
• Your rights: access, rectification, erasure, restriction, data portability, and objection to processing based on legitimate interests. You may also complain to your local data protection authority — in Poland, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.
• International transfers:your information is stored and processed in the United States. Where required, transfers rely on the EU–U.S. Data Privacy Framework (for certified providers) or on the European Commission’s Standard Contractual Clauses.

10. Changes to this policy

If we change this policy we will post the new version here and update the date above. We will tell signed-in users about material changes before they take effect.

11. Contact

Privacy questions and requests: jakubpiechnik02@gmail.com.