This Privacy Policy explains how Revisr LLC, an Illinois limited liability company ("Revisr," "we," "us," or "our"), collects, uses, discloses, and protects information in connection with the Revisr online proofing and creative review platform (the "Service"). This Policy applies to registered Users as well as client reviewers who access shared review links.

1. Information We Collect

Account Information

• Name, email address, and password (or SSO credentials) when you create an account.

• Team, organization, and billing contact details.

Content You Upload or Connect

• Files you upload for review — including PDFs, images, video, social content, and presentations — and the metadata associated with them (file name, size, upload date, version history).

• Figma files retrieved via an access token you provide, used only to pull the specific files or frames needed for the review you create.

• Website staging links and raw HTML/JavaScript you submit for review.

• Comments, annotations, and feedback submitted by you, your team, and any client reviewers within your Projects.

Payment Information
Billing is handled by Stripe. When you subscribe to a paid plan, Stripe collects your payment card or bank details directly. Revisr does not store full payment card numbers on our own systems — we retain limited billing metadata (such as plan tier, invoice history, and the last four digits of a payment method) needed to manage your subscription.

Usage and Device Information

• Log data such as IP address, browser type, device information, pages visited, and actions taken within the Service.

• Cookies and similar technologies used for authentication, session management, and basic analytics.

Client Reviewer Information
When a User invites a client to a review via a shared link, we may collect the client's name and email address (if provided), along with the feedback and annotations they submit. Client reviewers are not required to create an account.

2. How We Use Information

• To provide, operate, and maintain the Service, including processing, storing, and rendering uploaded files, connected Figma content, staging links, and submitted HTML/JavaScript.

• To manage accounts, subscriptions, and billing through Stripe.

• To send transactional emails (account notifications, review invitations, billing receipts) through Mailgun.

• To power optional AI-assisted features using Google's Gemini models, as described in Section 4.

• To maintain the security, integrity, and performance of the Service, including fraud prevention and abuse monitoring.

• To communicate with you about updates, support requests, and (where permitted) product news.

• To comply with legal obligations.

3. How We Share Information
We do not sell your personal information or Your Content. We share information only with trusted infrastructure and service providers who process it on our behalf, solely as necessary to operate Revisr — not for their own independent use, resale, or advertising purposes. Our current service providers include:

• Firebase (Google) — backend infrastructure, authentication, and data storage.

• Stripe — payment processing and subscription billing.

• Mailgun — transactional email delivery.

• Google Gemini — processing for optional AI-assisted features (see Section 4).

We may also disclose information if required by law, to protect the rights, property, or safety of Revisr, our Users, or others, or in connection with a merger, acquisition, or sale of assets (with notice to affected Users where required by law). If you need additional detail about a specific provider or data flow for your own compliance review, please reach out through our contact form.

4. AI-Assisted Features
Revisr's optional AI-assisted features are currently powered by Google's Gemini models. When you use these features, the relevant content (for example, review comments or file metadata needed to generate a summary) is sent to Gemini for processing and a response is returned to you within the Service. We do not use your content to train our own models. Use of AI-assisted features is optional, and you can avoid sending content to our AI provider by not using those features.

5. Data Security
We use industry-standard encryption to protect data in transit (e.g., TLS) and files at rest. Access to production systems is restricted, and we rely on our infrastructure providers' security certifications and controls in addition to our own practices. While we work to protect your information, no system can be guaranteed 100% secure, and we cannot guarantee the absolute security of information transmitted to or from the Service.

6. Data Retention
We retain account information and Your Content for as long as your account is active, and for a reasonable period afterward to allow for account recovery, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated content as described in Section 7.

7. Your Rights and Choices

• Access and update your account information directly within your Revisr account settings.

• Request a copy of, correction to, or deletion of your personal information, subject to legal and legitimate business retention needs.

• Opt out of non-essential marketing emails via the unsubscribe link in those emails; you will still receive transactional and account-related emails.

• Depending on your location (e.g., EEA/UK under GDPR, or California under the CCPA/CPRA), you may have additional rights, including the right to data portability, the right to object to certain processing, and the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, please use our contact form and we will respond within the timeframe required by applicable law.

8. International Data Transfers
Revisr and its service providers may process and store information in the United States and other countries. Where required, we rely on appropriate safeguards (such as standard contractual clauses or equivalent mechanisms offered by our providers) for international transfers of personal information.

9. Children's Privacy
The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us so we can delete it.

10. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice (such as updating the "Last Updated" date above or notifying you by email). Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

11. Contact Us
"Revisr" refers to Revisr LLC, an Illinois limited liability company. If you have questions about this Privacy Policy, or need information about our data practices for your own compliance review, please reach out using the contact form at revisr.com/contact.

© 2026 Revisr LLC. All rights reserved.