REVI PRIVACY POLICY
Last updated: May 2, 2025

I. Owner and Data Controller
Revi Group, Inc. ("Revi") is responsible for personal data processed through its websites, web and mobile applications, and related services (collectively, the "Service"). This Privacy Policy explains how Revi collects, uses, discloses, and protects that data.

Contact Information
Revi is located at 504 Pennsylvania Avenue #377, Greer, SC 29652 USA. For any privacy questions or requests, email [email protected] or write to the address above. Revi's Data Protection Officer can be reached at [email protected].

EU residents can submit data requests to EDPO (Avenue Huart Hamoir 71, 1030 Brussels) at https://edpo.com/gdpr-data-request/. UK residents can submit to EDPO UK Ltd. (8 Northumberland Avenue, London WC2N 5BY) at https://edpo.com/uk-gdpr-data-request/. Swiss residents can submit to EDPO Switzerland Sàrl (Rue de Lausanne 37, 1201 Geneva) at https://edpo.com/swiss-data-request/.

II. Personal Data We Collect
Customers
For customers, we collect and process name, business email address, telephone number if provided, job title, employer, work address, support correspondence, IP address, city-level location derived from IP, detailed usage logs such as login times and pages viewed, and browser and operating-system details.

Website visitors
From website visitors, we collect IP address, device identifier, browser and operating-system details, any form fields you submit—such as name, company, business email, or phone—page-view and click metrics, and city-level location from IP. We instruct visitors not to supply personal (non-business) email addresses, but if a visitor chooses to do so we process that information in accordance with this Policy.

Business professionals in our datasets
For business professionals in our datasets we maintain name, business email address, job title, employer, department, LinkedIn URL, publicly available professional biography, and inferred attributes such as industry and seniority.

We do not intentionally collect government-issued identifiers, precise geolocation, health or biometric data, or information about children under sixteen.

III. How We Collect Data
We collect data through multiple channels: directly from you through forms, account setup, and support interactions; automatically through cookies and similar technologies; and from third-party sources including public websites, official filings, licensed data providers, and customer supplied records.

You may opt out or request deletion at any time as described in Sections XI and XII. Data is kept only while relevant to the Service and deleted when no longer needed or when required by law.

IV. Cookies and Similar Tracking Technologies
We use first party and third party cookies and comparable tools to operate, secure, and improve the Service, remember settings, measure usage, and with your consent display advertising tailored to your interests. Advertising cookies limit ad frequency and measure campaign performance.

You can accept or refuse non essential cookies at any time through the cookie banner, the Cookie Preferences Center, or your browser settings. Non essential cookies load only after consent. The Cookie Preferences Center lists each cookie's provider, purpose, and lifespan.

You may also opt out of interest based ads through industry tools offered by the Network Advertising Initiative, the Digital Advertising Alliance, and the European Interactive Digital Advertising Alliance.

V. Data Processing Roles and Security
Revi is the controller for its business-intelligence database, websites, and marketing channels, and acts as a processor when customers upload their own records under a data-processing agreement. When we license a copy of our business-intelligence dataset to a customer, that customer becomes an independent controller for that copy.

We protect personal data with encryption, firewalls, role-based access controls, multi-factor authentication, and regular security testing. If a reportable breach occurs, we will notify the relevant authority and affected individuals without undue delay.

VI. International Transfers
Personal data may be processed in the United States and other countries where our trusted service providers operate. For transfers from the EEA, UK, or Switzerland we rely on the Standard Contractual Clauses or local equivalents and apply additional technical and organizational safeguards as needed.

VII. Retention and Deletion
We keep personal data only as long as necessary to provide the Service, meet legal or accounting obligations, or resolve disputes. When retention is no longer justified we delete or irreversibly anonymize the data in a timely manner and keep suppression records solely to honor future opt out requests. Retention rules are reviewed at least annually.

VIII. Purposes of Processing
We use personal data to provide, secure, and improve the Service; to create and license business intelligence datasets for customers; to manage billing and user accounts; to personalize on site content; and to meet legal and fraud prevention obligations.

Lawful bases for residents of the EEA, UK, and Switzerland are performance of a contract, legitimate interests, consent for non essential cookies, and compliance with legal obligations.

IX. Third Party Services
We engage hosting, content delivery, payment, analytics, customer support, email, security, and error monitoring providers to process personal data strictly on our instructions and for the purposes described in this Policy. Each provider is bound by a written data processing agreement.

X. Data Sharing and Recipients
We disclose personal data to customers for their internal business intelligence use, to contracted service providers, to public authorities when required by law, and to successor entities in corporate transactions.

XI. U.S. Consumer Privacy Rights
This section applies to residents of every U.S. jurisdiction with a comprehensive privacy statute in force as of May 2, 2025. Revi does not discriminate against anyone who exercises these rights.

11.1 Submitting a request
Use the Privacy Rights Portal linked in our footer, email [email protected], or mail a letter to the address in Section I marked Privacy Request. Authorized agents must present a signed authorization or valid power of attorney. A recognized universal opt out signal such as GPC is honored automatically.

11.2 Available rights
Subject to statutory exceptions, you may exercise several rights regarding your personal data. These rights include accessing personal data we hold, receiving a portable copy of your data, correcting inaccuracies, requesting deletion, opting out of sale or sharing of personal data, opting out of targeted advertising, opting out of certain automated profiling, and appealing an adverse decision.

11.3 Verification and timelines
We verify identity by matching account details and may request additional proof. We respond within forty five days and may take one additional forty five day extension when reasonably necessary. Appeals follow the same timing.

11.4 Sale, sharing, and disclosure past twelve months
In the past twelve months, we have sold or shared Identifiers and Professional or Employment Information with customers for their internal business intelligence use. We have also disclosed Identifiers, Professional or Employment Information, Customer Records, Internet or Electronic Activity Data, Coarse Geolocation, and Inference Data to service providers for hosting, analytics, payments, support, and security purposes. We have not sold or shared Customer Records, Internet or Electronic Activity Data, Coarse Geolocation, or Inference Data for cross context behavioral advertising.

11.5 State specific notices
Revi is registered as a data broker in Vermont, Oregon, and Texas. Nevada residents may opt out of the sale of covered information by emailing [email protected] with the subject Nevada Privacy Request. We will respond within the period required by Nevada law.

XII. International Privacy Rights EEA UK Switzerland Canada
Residents of the EEA, United Kingdom, Switzerland, and Canada may exercise rights granted by their local privacy laws such as access, correction, deletion, restriction or objection, data portability, and the right to lodge a complaint. Submit requests through the Privacy Rights Portal or email [email protected]. We handle each request in accordance with applicable legislation and will let you know if more information is required.

XIII. Legal Action and Compliance
We may use or disclose personal data to protect our rights or in response to valid legal demands from courts, regulators, or other competent authorities.

XIV. Logs and Maintenance
To operate and secure the Service we automatically collect system logs and related data such as IP addresses, device identifiers, error codes, and time stamps and may process them with trusted service providers.

XV. Children
The Service is not directed to individuals under sixteen years of age and we do not knowingly collect their personal data. If we learn that we have done so we will delete the information promptly. Please email [email protected] if you believe a child has provided personal data.

XVI. Changes to This Policy
We may update this Privacy Policy from time to time. When material changes occur we will provide notice through the Service or by other reasonable means. Continued use of the Service after an update takes effect constitutes acceptance of the revised Policy.