Privacy Policy

Last updated: February 2026

Placeholder — will be updated by legal counsel prior to GA

1. Information We Collect

We collect information you provide directly when you create an account, configure your organization, or use the platform. This includes your name, email address, organizational role, and authentication credentials from your identity provider (Google or Microsoft SSO).

When your team uses Revualy through a chat platform (Slack, Google Chat, or Microsoft Teams), we process the feedback interactions that occur within Revualy-initiated conversations. We do not read or store messages from your general chat channels.

We also collect usage data such as page views, feature usage patterns, and error logs to improve the product. If you connect your Google Calendar, we access event times and attendee lists to schedule feedback prompts — we do not read event content or descriptions.

2. How We Use Your Information

We use your information to provide and improve the Revualy platform, including: delivering feedback prompts and analysis, generating engagement scores and values alignment reports, scheduling interactions based on calendar availability, and sending notifications you've configured.

AI analysis of feedback interactions produces aggregate scores, patterns, and trends — not transcripts. Individual feedback content is only visible to the participants and, when flagged, their direct manager. We never use your feedback data to train AI models.

3. Data Storage & Security

Each organization's data is stored in an isolated database. There is no cross-tenant data access. All data is encrypted in transit (TLS 1.2+) and at rest. Authentication tokens for third-party services (calendar, chat platforms) are stored encrypted and automatically refreshed.

We retain feedback data for the duration of your organization's active subscription. Upon account termination, all organization data is deleted within 30 days.

4. Information Sharing

We do not sell your data. We share information only with third-party services essential to platform operation: cloud infrastructure providers, email delivery services, and AI model providers (for feedback analysis only — no personally identifiable information is included in AI prompts).

We may disclose information if required by law or to protect the rights, property, or safety of Revualy, our users, or the public.

5. Your Rights

You may access, correct, or delete your personal data at any time through your account settings or by contacting us. Organization administrators can export all organization data. You may revoke calendar or chat platform connections at any time.

If you are located in the European Economic Area, you have additional rights under the GDPR, including the right to data portability, restriction of processing, and the right to lodge a complaint with a supervisory authority.

6. Contact

For any privacy-related questions or requests, contact us at nick@revualy.com.