Privacy Policy

Who we are

Revorance is operated by Revorance, Inc., a Delaware corporation in the United States. We are responsible for the personal information described in this policy. It covers our website, accounts, vehicle discovery, Scouts, communications, and support. Contact support@revorance.com for privacy questions or requests.

Information we handle

We collect information you provide, information created by features you use, and limited technical information needed to operate the service.

• Account: email address, name, authentication identifiers, sign-in provider, and account settings. Supabase handles authentication; Google supports Google sign-in. We do not receive your Google password.
• Buyer activity: saved Listings, Scout reference Listings, selected Persona, hard search constraints, tuning preferences, improvements you select, evaluations, Findings, and notification choices. A Save records interest in that Listing; it does not by itself establish a permanent specification preference.
• Communications: recipient address, category preferences, unsubscribe and suppression records, message content, delivery attempts and provider status. Support and partner inquiries contain the information you send us.
• Billing, where you use a paid plan: subscription, transaction and provider references, billing status and entitlement history. Stripe processes payment details; we do not store full payment-card numbers or security codes.
• Technical information: request times, IP addresses, browser/device context, security signals and operational logs processed by our hosting, authentication, delivery and security providers. Optional product analytics is described separately below.

Purposes and legal bases

Where data-protection law requires a legal basis, we use the following bases for the associated purposes. Mandatory local rights remain available.

• Providing the service you request and performing our contract: accounts, saved Listings, Scout intent and Findings, required service messages, and purchased subscriptions.
• Consent: optional browser Statistics analytics. Withdrawing consent stops future optional tracking in that browser without affecting the lawfulness of prior consent-based processing.
• Legitimate interests, subject to your rights: protecting accounts, preventing abuse, diagnosing failures, answering inquiries, maintaining necessary service and delivery records, and sending requested Scout discoveries where permitted. Discovery emails can be disabled in Account or through their unsubscribe control; where law requires consent, that requirement takes precedence.
• Legal obligations: responding to lawful requests and retaining information that applicable tax, accounting, consumer or other laws require.

Personalization and automotive intelligence

Your chosen Persona supplies interpretation context; search filters set constraints and tuning supplies soft preferences. Scouts retain the intent you submit and compare eligible inventory using supported rules. Some captured improvements are not yet monitored. Revorance combines deterministic matching with AI-generated automotive interpretation. Explanations can be incomplete or wrong and do not replace independent inspection or professional advice. We do not use this process to make decisions with legal or similarly significant effects about you.

Analytics and consent

Cookiebot is our browser consent authority. PostHog and our optional behavioral-event logging require confirmed Statistics consent. They do not run merely because you have an account or use a Save or Scout. With consent, selected product events may be associated with a browser/session identifier and, when signed in, your account ID. They can include Listing identifiers, Persona, bounded tuning choices and interaction context. They are not necessarily anonymous.

• General autocapture, automatic pageviews, session recording, surveys and feature-flag requests are disabled in the current integration. Event properties are restricted; raw search text, free-form messages, passwords and payment-card information are not intended analytics payloads.
• When an existing choice is still being restored, analytics waits. Events from an explicitly denied period are not replayed after a later grant.
• Withdrawal clears the applicable browser analytics identifiers and attribution state and prevents subsequent optional capture. It does not automatically erase historical server or provider records; contact us to request their deletion.
• Necessary authentication, security, billing, Scout operation and delivery records are separate from optional analytics. They remain available when Statistics is off.

Providers and disclosures

We share information only as needed to operate the service, fulfill your request, protect users, comply with law, or complete a corporate transaction with appropriate safeguards.

• Supabase provides authentication, database and storage; Vercel hosts the website; Render hosts supporting services; Inngest coordinates background work.
• Cookiebot manages consent; PostHog processes consented product analytics; Cloudflare provides security and Turnstile protection on supported forms; Google supports sign-in.
• Resend delivers authentication, service and optional Scout email. Our application email does not add open-tracking pixels or rewrite links for click tracking.
• Stripe processes subscriptions and payments where offered. Sanity supplies editorial content. Listing, media and automotive information can come from sellers and data providers, including MarketCheck, Visor and Apify-supported sources. OpenAI and Exa support automotive research and generated interpretation. These are not unrestricted recipients of your buyer account or private Scout records.
• Loading externally hosted images or visiting a seller or other external site can disclose ordinary request information to that host. External transactions and websites are governed by their own terms and privacy practices.
• We do not sell personal information or share it for cross-context behavioral advertising. We do not currently operate a Marketing tracking integration.

Retention and deletion

Retention depends on the purpose and record, rather than one fixed deletion period for all data. Account, Saves and Scout records support your ongoing use. Evaluation, Finding, billing and delivery histories may remain after a feature is paused or an account-closure request is made. Pausing a Scout is not erasure.

• We assess access, deletion and restriction requests individually. Necessary financial, fraud-prevention, suppression, dispute and legal records may be retained with access restricted. A technical immutability rule alone is not a legal reason to refuse erasure.
• Cookie choices and browser storage last until their configured expiry, withdrawal or removal, as applicable. Historical analytics, provider logs, correspondence and backups are handled separately from browser withdrawal.
• We review records for deletion or de-identification when no longer needed. We do not promise that account closure instantly deletes every linked record, nor that a universal automatic purge currently runs. We explain the scope, any retained records and applicable retention reasons when responding to your request.

Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection, or a portable copy of data you provided; withdraw consent; and complain to your competent data-protection authority. Where applicable, you may appeal a refusal by replying to our decision or emailing support@revorance.com. We do not penalize you for exercising privacy rights.

• Account lets you edit your name and optional Scout discovery email preference. Scouts can be paused; saved Listings can be removed through their existing controls.
• Use Cookie preferences in the footer to change optional browser consent. Optional email preferences are separate from cookie consent.
• Email support@revorance.com for access/export, correction, account closure or deletion, including if you cannot sign in. We verify identity proportionately, avoid requesting unnecessary documents, and do not disclose another person’s data.
• We respond without undue delay and within the period applicable to your request, normally within one month for GDPR requests. If a permitted extension or exception applies, we explain it within the applicable deadline. An authorized representative may contact us with evidence of authority.

Security and international processing

We use access controls, server-side authorization, database ownership policies and signed delivery integrations. No online service is completely secure. Our US company and service providers may process data outside your country. Where required, transfers must use an applicable adequacy decision or approved contractual safeguards with supplementary protections as needed. Contact support@revorance.com for information about the safeguards relevant to your data.

Age and policy updates

Revorance is intended for adults aged 18 and older. We do not knowingly collect personal information from children under 13. If you believe someone under 18 has provided personal information to Revorance, contact support@revorance.com. We will review the report and take appropriate steps to restrict the account and delete information, subject to applicable legal requirements. We publish policy changes with an updated effective date and provide additional notice of material changes where required.