REVIME PRIVACY POLICY

This Privacy Policy explains how Vitalij Borysovyč Ševerov, OSVČ, trading as Revime ("Revime", "we", "us", or "our") collects, uses, stores, and protects personal data in connection with getrevime.com, revime.app, and related websites, dashboards, public customer pages, integrations, and services (the "Services").

Legal operator:

Vitalij Borysovyč Ševerov, OSVČ, trading as Revime

IČO: 21853193

Registered address: Komenského 1058/39, 323 00 Plzeň - Bolevec, Czech Republic

General contact: hello@revime.app

Privacy contact: privacy@revime.app

Legal contact: legal@revime.app

1. Scope of this Policy

This Policy applies to:

• visitors of getrevime.com and other Revime marketing pages;
• users and account owners of revime.app;
• representatives of flower shops, salons, and other businesses using Revime;
• end customers of Revime clients when their personal data is processed through the Services;
• persons who contact Revime by email, form, or other communication channel.

For personal data relating to end customers of our clients, Revime generally acts as a data processor on behalf of the relevant client business. The client business remains the data controller responsible for deciding why and how that customer data is processed. Revime processes that data according to the client’s instructions and the Data Processing Agreement.

2. Roles Under GDPR

For website visitors, leads, account users, and business contacts, Revime acts as a data controller.

For customer data uploaded or managed by a client business, including customer names, phone numbers, important dates, reminder preferences, consent records, and communication records, Revime generally acts as a data processor. The relevant flower shop, salon, or business is the data controller.

If you are an end customer of a Revime client and you want to exercise your GDPR rights, you should usually contact the relevant flower shop or business first. You may also contact us at privacy@revime.app, and we will forward or handle the request as appropriate.

3. Personal Data We Collect

3.1 Website visitors and leads

When you visit getrevime.com or interact with Revime marketing pages, we may process:

• IP address;
• browser and device information;
• approximate location derived from technical data;
• pages viewed and interactions with the site;
• cookie and tracking identifiers;
• contact details you submit through forms, email, or other channels;
• marketing preferences and communication history.

3.2 Account owners and business users

When a client business or its representatives use revime.app, we may process:

• name and business name;
• email address;
• role and account permissions;
• login and authentication data;
• billing and subscription information;
• business settings;
• support requests;
• security logs and audit logs;
• usage and operational data related to the Services.

3.3 End customers of our clients

When a client business uses Revime to manage customer reminders, we may process customer data on behalf of that client, including:

• customer name;
• mobile phone number;
• Telegram identifier or channel-specific messaging identifier where applicable;
• important dates such as birthdays, anniversaries, holidays, or other reminder dates;
• purchase-related information or preference information provided by the client;
• preferred communication channel;
• opt-in, opt-out, and consent status;
• consent timestamps and withdrawal timestamps;
• reminder schedules;
• message delivery status;
• communication history and technical delivery logs;
• updates made by the customer through token-protected public pages.

End customers may use token-protected pages on revime.app to update reminder dates, confirm or withdraw consent, and select a preferred communication channel. These pages do not show a message history.

3.4 Data we do not want you to upload

Clients must not upload or process through Revime special-category or high-risk data unless we expressly agree in writing. This includes health data, biometric data, political opinions, religious beliefs, sexual orientation data, criminal records, or data relating to children under 16.

4. How We Use Personal Data

We use personal data to:

• provide, operate, maintain, and secure the Services;
• create and manage client accounts;
• configure reminder workflows;
• automatically schedule and send reminder messages on behalf of clients;
• manage opt-in, opt-out, consent, and communication preferences;
• provide token-protected public customer pages;
• provide support and respond to inquiries;
• monitor service performance and prevent abuse;
• maintain security logs and audit trails;
• improve the Services;
• send administrative, legal, and service-related communications;
• analyze marketing website performance;
• comply with legal obligations.

5. Legal Bases for Processing

Where Revime acts as a controller, we rely on the following legal bases under GDPR:

• contract performance, where processing is necessary to provide the Services;
• legitimate interests, such as securing the Services, improving functionality, responding to business inquiries, and operating B2B marketing;
• consent, where required for cookies, marketing tracking, or optional communications;
• legal obligation, where processing is required by applicable law.

Where Revime acts as a processor for client customer data, the client is responsible for determining the appropriate legal basis, such as consent, legitimate interests, contract, or another lawful basis under applicable law.

6. Cookies, Analytics, and Tracking

On getrevime.com, we may use cookies and similar technologies for site operation, analytics, and marketing measurement. This may include Google Analytics 4 and Meta Pixel.

These tools may collect information about your device, browser, pages visited, and interactions with the website.

Revime does not currently use Google Analytics 4 or Meta Pixel inside the product application for salon users or on customer preference pages. The product may use operational event tracking, logs, and security monitoring necessary to operate and improve the Services.

You can control cookies through your browser settings and, where required, through cookie consent tools provided on the website.

7. Communications and Messaging Channels

Revime may send or facilitate messages through supported channels such as SMS, WhatsApp, and Telegram. These communications are sent on behalf of the client business, based on customer data, reminder schedules, consent records, preferred channels, and system rules.

The client business is responsible for ensuring that messages sent through Revime comply with applicable privacy, electronic communications, marketing, telecommunications, and anti-spam laws.

Revime may maintain consent records, opt-out records, and delivery logs to support compliance, prevent unwanted communications, and document communication status.

8. Sharing Personal Data

We may share personal data with service providers and subprocessors that help us operate the Services, including hosting, infrastructure, database, security, analytics, and communication providers.

Current providers may include:

• Cloudflare, for DNS, security, CDN, traffic routing, and email forwarding;
• Vercel, for application hosting and deployment;
• Supabase, for database hosting and storage;
• Google Cloud, for cloud infrastructure and compute services;
• Twilio, for SMS and WhatsApp messaging services;
• Telegram Messenger LLP, for Telegram bot message delivery;
• Sentry, Inc., for application monitoring, error tracking, diagnostics, troubleshooting, and security investigations;
• Google Analytics 4, for marketing website analytics;
• Meta Pixel, for marketing website measurement.

We may also disclose personal data if required by law, to protect rights and security, to enforce our agreements, or in connection with business restructuring.

9. International Transfers

We primarily aim to use EU or EEA infrastructure where reasonably available. Some providers are incorporated outside the EEA or may process personal data outside the EEA.

Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, data processing agreements, or other lawful transfer mechanisms.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, unless a longer period is required or permitted by law.

For client customer data processed through the Services:

• customer records are deleted within 30 days after a valid deletion request or account deletion instruction, unless retention is required by law or necessary for compliance records;
• consent records, unsubscribe records, delivery logs, and related compliance records may be retained for up to 3 years;
• security logs and audit logs may be retained for up to 3 years or as reasonably necessary for security, fraud prevention, and legal protection.

Backups may persist for a limited period before automatic deletion according to backup cycles.

11. Security

We use technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include encryption in transit, access controls, least-privilege access, secure infrastructure providers, logging, monitoring, and administrative controls.

No system is completely secure, and we cannot guarantee absolute security.

12. Your Rights

Depending on your location and the role under which data is processed, you may have rights to:

• access personal data;
• correct inaccurate personal data;
• request deletion;
• restrict processing;
• object to processing;
• receive data portability;
• withdraw consent;
• lodge a complaint with a supervisory authority.

If Revime acts as controller, contact privacy@revime.app to exercise your rights.

If Revime acts as processor for a client business, we may need to forward your request to the relevant client or handle it according to that client’s instructions.

13. End Customer Opt-Out and Consent Withdrawal

If you are an end customer receiving reminders through Revime, you may withdraw consent or opt out using the unsubscribe or preference mechanism provided in the message or customer page, where available.

After opt-out, Revime may retain suppression records, consent withdrawal records, and related logs to prevent further unwanted communications and to maintain compliance evidence.

14. Children

The Services are not intended to process data relating to children. Clients must not knowingly upload data relating to children under 16.

15. Changes to this Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide reasonable notice by email, in-product notice, or publication on our website.

16. Language

This Privacy Policy is provided in English. Any translations are provided for convenience only. In case of inconsistency, the English version prevails.

17. Contact

For privacy questions or requests, contact:

Vitalij Borysovyč Ševerov, OSVČ, trading as Revime

IČO: 21853193

Komenského 1058/39, 323 00 Plzeň - Bolevec, Czech Republic

Email: privacy@revime.app