Privacy notice for clients

The short version

Your firm's deals belong to your firm. We process them for your firm, to build its plan. We receive company-level facts, not people's columns.
About you as a user, we hold your sign-in email address and little else.
No AI model reads the deals. We never sell data.
We keep the data in the EU.
You can ask what we hold about you, and ask us to correct or delete it.
You can complain to us first. You can also complain to a regulator.

RevivalOps is a trading name of MN Ventures, a sole trader registered for VAT in Sweden.
Postal address: MN Ventures, HYW 3480 BILLO, 106 46 Stockholm, Sweden.
Email: privacy@revivalops.com, for your data and for complaints. For everything else: hello@revivalops.com.

Your firm's deals. Your firm decides why and how they are used: it is the controller. We handle them for your firm: we are its processor. Our data agreement with your firm sets the rules. Section 3 tells you what happens.
Your account and our emails with you. Here we decide: we are the controller. Sections 4 to 6 are about these.

What we receive. For each deal: the company, the stage, the status, the value and its currency, four dates, the kind of lost reason, the pipeline, a do-not-contact mark and the deal's ID. Annex A of the data agreement lists each field.
What we never receive. Your browser removes the people's columns before anything is sent: names, email addresses, phone numbers, job titles and deal owners. It also removes notes, deal names and the words of a lost reason. We never receive the file itself.
Where a name can still come in. A sole trader's company name is a person's name. A label in your CRM can hold a name too. If one does, we receive it as it is.
What we do with it. Fixed rules sort the deals, rank them and pick the moves. No AI model reads them. We never sell them, never publish them, and never use them for anything of our own.
Where. In the EU: Frankfurt, Germany. Two providers handle them for us: Supabase (the database) and Vercel (it runs the app). Our sub-processor list has the details.
How long. 30 days from the upload. Backups clear within 7 days after that. Your firm can delete everything at once.
If you are a person in a firm's deals, for example a sole trader who is that firm's client: ask that firm. It decides about the data. If you write to us, we pass your request to the firm within 5 working days. We hold no columns about people, so we can find you only if your name is a label in the data.

What we hold. Your sign-in email address. The firm you belong to, and whether you are its account owner or a member. The day you joined, and the times you sign in.
No password. You sign in with a link we send to your address.
An invite. When an account owner invites a colleague, we keep a fingerprint of the invited address, never the address itself. An invite works for 7 days.
Technical logs. Our providers log each request: the IP address, the time and the page. We use the logs to keep the service safe, never to follow you.
Why. To let the right people in, and to run our agreement with your firm. The legal basis is legitimate interests: running that agreement and keeping the service safe. If you are a sole trader, the basis is our contract with you.
How long. While your firm's account exists. We close an account, and delete its sign-ins, when the account owner asks. For a firm that never bought, we also close it 12 months after our last exchange. If the account owner removes you, your access ends at once. Your sign-in address stays until you or the account owner ask us to delete it, or the account is closed.

When someone at your firm ticks the box on our upload page, we store: which version of our papers, a fingerprint of the text that was shown, the time, and the private link it was ticked on.
We do not store that person's name with it. Our own records say whom we sent the link to.
Why: to show that your firm and we have the agreement the law asks for. The legal basis is legitimate interests, and our legal duty to have that agreement.
How long: to the end of the seventh year after the year of your firm's last upload or the end of its plan, whichever is later.

We hold your name, your work email address, your firm and the emails we exchange. If we wrote to you first, "If we emailed you about our services" in our main privacy notice says where we found your address.
If you answered with your two numbers, we hold them: about how many deals your firm lost, and its average deal size.
What you write in an email stays in our mailbox with the thread. Our deletion of your firm's deals does not reach it. So keep names from your deals out of your emails to us.
The email that says your plan is ready carries the link to the plan and counts of deals. It carries no money, no company's name and no deal's value.
Why: to answer you, and to run our agreement with your firm. The legal basis is legitimate interests.
How long: while your firm is a client, and 12 months after our last exchange.

Our providers, who work for us under contract:
- Supabase: the database, and your sign-in;
- Vercel: it runs the app, and keeps the request logs;
- Microsoft: our mailboxes;
- SmartLead: it sends our first emails, and holds the thread if you replied to one;
- Slack: our own alerts. An alert that you replied names your firm and holds the answer we drafted, with the estimate from your two numbers and, once we have made it, your private upload link. An alert that a plan is ready holds counts, our own reference for the person we sent the link to, and the link to the plan. No alert holds your name or your address, or a company or a person from your firm's deals;
- no one sends sign-in emails yet: sign-in is not open. Before it opens, we name that provider here.
Nobody else. We never sell data, and we give it to no other client.
Some providers handle data outside the EU and the UK. They do so under the EU–US Data Privacy Framework with its UK Extension, or under the EU's standard contractual clauses with the UK addendum. Our sub-processor list names the tool for each. Ask us for a copy.

The pages behind your sign-in set one cookie, ro_session. It keeps you signed in for up to 30 days. Scripts on the page cannot read it.
Those pages, and the pages behind your private link, set no other cookie and count no visits.
Your browser's own storage keeps two settings for you: light or dark, and the views you save on your Revival Desk. They stay in your browser. They are not sent to us.

You can ask what we hold about you. You can ask us to correct it, to delete it, or to limit what we do with it. You can object to what we do on the basis of legitimate interests. Where the law gives it, you can ask for your data in a file.
Write to privacy@revivalops.com. We answer within one month.
You can complain to us first. You can also complain to the Swedish Authority for Privacy Protection (IMY). In the UK, you can complain to the Information Commission.

Our rules rank companies and deals for your firm's sales team. They make no decision about a person.

When we change this notice, the version and the date at the top change. If a change matters to you, we email the account owner first.