Privacy Policy

RevXAI is a B2B revenue and marketing intelligence platform built for GCC and MENA markets. This policy covers our marketing site, our web application, and any integrations you connect to your workspace.

We collect only what we need to run the Service:

• Account data: name, email, company name, password (hashed).
• Usage data: features used, profiles generated, credits consumed, standard product analytics events.
• CRM data: contacts, companies, and deals synced from HubSpot when you authorize the integration.
• Google account data: Gmail messages and calendar events, when you connect a Google account. Section 5 covers this in full.
• Communications: support messages and requests you send us.

• Provide, maintain, and improve the Service.
• Generate Company Profiles, Signals, Deep Dives, briefs, and messaging drafts.
• Process billing and manage subscriptions.
• Send service-related communications (account verification, security alerts, feature updates).
• Analyze usage patterns to improve the product — product telemetry only, never Google user data.

We do not sell your personal data. We share data only:

• With service providers needed to operate the platform (hosting, email, analytics, payments, LLM providers).
• When required by law or valid legal process.
• To protect the rights, safety, and property of RevXAI, our users, or the public.
• In connection with a business transfer (merger, acquisition, sale), with notice.

Google user data is the exception to this list: it reaches only the subprocessors strictly required to deliver the features in section 5, never our analytics providers, and it moves in a business transfer only with your explicit consent. Section 5 governs.

If you choose to connect a Google account to your workspace, RevXAI accesses specific data from that account. Connecting is entirely optional — the platform works without it.

This section governs Google user data. Google user data is used only to provide the user-facing features described below, and for nothing else. Where any other part of this policy describes a broader use, sharing, or retention than this section allows, that broader description does not apply to data received from Google APIs — this section controls.

• Gmail send (gmail.send): we send the sequence messages you have approved from your mailbox. Nothing is sent that a user did not approve.
• Gmail read (gmail.readonly): we read messages in that mailbox to detect replies to your campaigns, thread them into the shared team inbox, stop the sequence for anyone who answered, and route the reply to the right rep.
• Google Calendar (calendar): we read, create, update, and delete calendar events to book meetings that come out of a sequence, place follow-up reminders, and track no-shows.

AI processing.Reply text from a connected Gmail mailbox is sent to our language-model provider to classify the reply's intent and suggest a draft that a human approves before anything is sent. It is processed under API terms that do not permit training on submitted content.

What we do not do with Google user data. We do not:

• use it for advertising, ad targeting, or to build advertising profiles;
• sell it, or transfer it to data brokers or resellers;
• use it to train, fine-tune, or evaluate any machine-learning model, ours or a provider's;
• feed it into our product analytics, usage analysis, or market research — those run on product telemetry only;
• use it for any purpose beyond the features listed above, even where another section of this policy describes a broader use of other data;
• transfer it in a merger, acquisition, or asset sale without your explicit consent;
• let a human at RevXAI read it, except with your explicit consent, for security or abuse investigation, or where applicable law requires it.

Retention and revocation. You can disconnect at any time from Settings → Email, or revoke access from your Google Account permissions page. On disconnect we invalidate the tokens and delete stored Google data within 30 days, except where retention is legally required.

Limited Use.RevXAI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Access and export your data at any time.
• Correct inaccurate information in your account.
• Delete your account and associated data.
• Restrict processing in specific circumstances.
• Object to processing based on legitimate interests.
• Withdraw consent for optional processing.

We use essential cookies for authentication and session management. Analytics cookies help us understand how the platform is used. You can control cookies through your browser settings. We do not use cookies for advertising.

We retain your data while your account is active or as needed to provide the Service. When you delete your account, we remove your personal data within 30 days, except where retention is legally required.

Data is encrypted at rest (AES-256) and in transit (TLS 1.2+). Workspaces are isolated. Access is role-based. See the Security page for the full posture.

Your data may be processed in jurisdictions outside your country of residence. We put appropriate safeguards in place for international transfers.

The Service is not intended for users under 16. We do not knowingly collect data from children.

We may update this policy from time to time. Material changes will be communicated by email or in-app notice at least 30 days before they take effect.

For privacy questions or to exercise your rights, email privacy@revxai.ai.