In short
We delete every deal you sent 30 days after your upload. You can delete them at once yourself.
Some records stay: the record of your tick, the log and your account. None of them holds a deal, a company from your data or a person from your data.
This sheet lists each thing, when it goes, and why the rest stays.
1. What we delete, and when
| What | Deleted when | How |
|---|---|---|
| Your uploads: every deal row | 30 days after you sent each upload | A job that runs every hour |
| With each upload: your unlocks, the link to your plan, and our "plan ready" note | At the same moment as the upload | The database deletes them with the upload |
| Everything above, at once | When you press "Delete my data now" on your plan's page, or "Delete everything now" on your account page | You. It happens at once and cannot be undone |
| Everything above, on request | Within 2 working days of your email to privacy@revivalops.com | By hand. We confirm by email |
| Copies in backups | Within 7 days after the deletion | Our database provider keeps daily backups for 7 days |
| Your plan | With the deal rows. The plan is never stored: it is built again from the rows each time you open it | Nothing more to delete |
| The file you exported | We never receive it. Your browser reads it on your computer and sends only the fields in Annex A of the data agreement | Nothing to delete |
2. What stays, and why
| What stays | What it holds | Why | How long |
|---|---|---|---|
| The record of your tick | A random id for your firm, a random id for the link, the version of the papers, a fingerprint of the text you saw, and the time | Proof that your firm and we made the agreement the law asks for, and of its exact words | To the end of the seventh year after the year of your last upload or the end of your plan, whichever is later |
| The log | For each event: a random id for your firm, a random id for the upload, the time, a fixed word (firm created, member joined, member removed, upload, unlock, deleted after 30 days, deleted by you, deleted by us), a role, a count of rows, and whether an unlock was free or paid | The receipt of every upload and every deletion. Nobody can change or remove a line | The same period as the record of your tick |
| Your firm's entry | Your firm's name, whether a plan runs, how many free unlocks you have used, and two dates | Your account needs it. It also stops a deleted firm from getting a second free unlock | Your firm's name: until the account is closed. For a firm that never bought: 12 months after our last exchange, as in the privacy notice. The rest stays as long as the record of your tick, under a random id |
| Your upload links, once ended | Our own reference for the person we sent the link to, the times it was made, used and ended, and the average deal size and currency you told us, if you did | So that an ended link stays ended, and so that the record of your tick can be matched to our own notes | As long as the record of your tick |
| Your team's sign-ins | Each sign-in email address, its role, the day it joined and its sign-in times | To let the right people in | Until the account is closed, or until you or the account owner ask us to delete a sign-in. Removing a member ends their access at once, but their sign-in address stays until then |
| An open invite | A fingerprint of the invited address, never the address | So that the invited colleague can join | It works for 7 days. The fingerprint goes when the invite is used or withdrawn, or when the account is closed. An invite that ran out unused stays as a fingerprint until then |
| Our emails with you | The thread, and your two numbers if you sent them. | To answer you, and to run our agreement | While you are a client, and 12 months after our last exchange |
| Our own alerts | When you replied: your firm's name and the answer we drafted, with the estimate from your two numbers and your private upload link. When a plan is ready: counts, your tier, our own reference for the person we sent the link to, and the link to your plan. A plan link stops working when your data is deleted; an upload link works once, for 14 days at most | So that we see a reply, and see that a plan is ready | 90 days |
| Request logs at our providers | The IP address, the time and the page address of each request. A private link is a page address | To keep the service safe | Each provider's own period for our plan |
| Our logs of breaches, requests and complaints | What happened and what we did, as counts and dates. A request or a complaint also holds what you wrote | To show what we did | The breach log: as long as we operate. Requests and complaints: 3 years after we close them |
3. How to delete, to get a copy, and to close your account
Delete your deals now. Press "Delete my data now" on your plan's page, or "Delete everything now" on your account page. Or write to privacy@revivalops.com.
Your copy. Before you send an upload, the page lets you download exactly what we receive. Keep that file: we make no other file of what we hold, because nobody opens your stored rows.
Close your account. Deleting your deals does not close your account. To close it, the account owner writes to privacy@revivalops.com. We then delete your team's sign-ins and your firm's name within 5 working days, by hand. The record of your tick and the log stay for their own period, under a random id.
Delete one sign-in. A member, or the account owner, writes to privacy@revivalops.com. We delete that sign-in address by hand, and confirm by email.