Legal
Privacy Notice
Effective and last updated: August 7, 2026
Scope
This notice explains how RevRez ("we") handles information for our AI-powered dunning, dispute-resolution, optional business AR, website, and merchant accounts.
Information we process
We receive account details such as name, work email, Google account identifier, and login records; merchant and billing details; and Stripe records needed to audit payment failures or resolve disputes. When you add an evidence source, we also process the JSON or CSV records, files, support events, commerce events, CRM records, product events, billing records, and related metadata you choose to provide. We process approvals, mappings, assertions, evidence packets, communications, reviews, action receipts, outcomes, and basic security data such as IP address and browser information.
How we use information
We use information to authenticate users, provide audits and resolution services, correlate and map merchant-provided records, construct and review evidence, execute merchant-authorized actions, send operational messages, bill fees, maintain security and audit records, comply with law, and improve reliability. We do not sell personal information or use Google user data for advertising.
AI processing
We may send the limited record fields or sourced assertions needed for a mapping, classification, or drafting task to purpose-limited AI infrastructure providers. Source credentials are not included in prompts. AI suggestions remain distinct from merchant-approved mappings and recorded external actions.
Sharing and processors
We disclose information only as needed to operate the service, including to Cloudflare, Google, Stripe, Resend, AI infrastructure providers, communications providers, and vetted human reviewers, or when legally required. Processors act under purpose and confidentiality restrictions.
Retention and security
We retain account, source, mapping, evidence, transaction, authorization, review, submission, and audit records only as long as needed for the service, contractual records, security, and legal obligations. Source artifacts are stored in private object storage and associated with content hashes; credentials are encrypted or hashed as appropriate, access is limited, and transport is encrypted. No system can guarantee absolute security.
Choices and requests
You may disconnect Stripe or Google, stop resolution activity, or ask to access, correct, export, or delete account information, subject to required financial, fraud-prevention, contractual, and legal retention. Contact privacy@revrez.com.