REVIME PRIVACY POLICY

This Privacy Policy explains how Vitalij Borysovyč Ševerov, OSVČ, trading as Revime ("Revime", "we", "us", or "our") collects, uses, stores, and protects personal data in connection with getrevime.com, revime.app, and related websites, dashboards, public customer pages, integrations, and services (the "Services").

Legal operator:

Vitalij Borysovyč Ševerov, OSVČ, trading as Revime

IČO: 21853193

Registered address: Komenského 1058/39, 323 00 Plzeň - Bolevec, Czech Republic

General contact: hello@revime.app

Privacy contact: privacy@revime.app

Legal contact: legal@revime.app

1. Scope of this Policy

This Policy applies to:

• visitors of getrevime.com and other Revime marketing pages;
• users and account owners of revime.app;
• representatives of flower shops, salons, and other businesses using Revime;
• end customers of Revime clients when their personal data is processed through the Services;
• persons who contact Revime by email, form, or other communication channel.

For personal data relating to end customers of our clients, Revime generally acts as a data processor on behalf of the relevant client business. The client business remains the data controller responsible for deciding why and how that customer data is processed. Revime processes that data according to the client’s instructions and the Data Processing Agreement.

2. Roles Under GDPR

For website visitors, leads, account users, and business contacts, Revime acts as a data controller.

For customer data uploaded or managed by a client business, including customer names, phone numbers, important dates, reminder preferences, consent records, and communication records, Revime generally acts as a data processor. The relevant flower shop, salon, or business is the data controller.

If you are an end customer of a Revime client and you want to exercise your GDPR rights, you should usually contact the relevant flower shop or business first. You may also contact us at privacy@revime.app, and we will forward or handle the request as appropriate.

3. Personal Data We Collect

3.1 Website visitors and leads

When you visit getrevime.com or interact with Revime marketing pages, we may process:

• IP address;
• browser and device information;
• approximate location derived from technical data;
• pages viewed and interactions with the site;
• cookie and tracking identifiers;
• name, email address, and phone number submitted through the contact form;
• UTM parameters, referrer, and advertising click identifiers where available;
• marketing preferences and communication history.

When you submit the contact form, we may send a copy of the enquiry (including name, email, phone number, and IP address) to an internal operations channel on Telegram so that our team can respond.

3.2 Account owners and business users

When a client business or its representatives use revime.app, we may process:

• name and business name;
• email address;
• account type (salon user or Revime administrator);
• login and authentication data;
• trial or subscription status agreed with Revime, and invoicing details you provide outside the application (payments are currently handled by bank transfer);
• business settings;
• web push subscription data (browser endpoint and cryptographic keys) if you enable notifications;
• support requests;
• security logs and audit logs, including IP address and user-agent recorded when legal terms are accepted;
• usage and operational data related to the Services.

3.3 End customers of our clients

When a client business uses Revime to manage customer reminders, we may process customer data on behalf of that client, including:

• customer name;
• mobile phone number;
• Telegram identifier, Instagram handle, Viber identifier, or other channel-specific messaging identifier where applicable;
• important dates such as birthdays, anniversaries, holidays, or other reminder dates;
• purchase-related information or preference information provided by the client, including data imported from a Google Sheet the client connects;
• preferred communication channel;
• opt-in, opt-out, and consent status;
• consent timestamps and withdrawal timestamps, together with IP address and user-agent captured when consent is given or withdrawn;
• reminder schedules;
• message delivery status;
• communication history, inbound replies, and technical delivery logs;
• updates made by the customer through token-protected public pages.

End customers may use token-protected pages on revime.app to update reminder dates, confirm or withdraw consent, and select a preferred communication channel. These pages do not show a message history.

3.4 Data we do not want you to upload

Clients must not upload or process through Revime special-category or high-risk data unless we expressly agree in writing. This includes health data, biometric data, political opinions, religious beliefs, sexual orientation data, criminal records, or data relating to children under 16.

4. How We Use Personal Data

We use personal data to:

• provide, operate, maintain, and secure the Services;
• create and manage client accounts;
• import customer and order data from integrations such as Google Sheets where a client connects a spreadsheet;
• configure reminder workflows and prepare a reminder queue for the client to review;
• send reminder messages automatically on behalf of clients when the client enables automated sending, or facilitate client-initiated sending;
• manage opt-in, opt-out, consent, and communication preferences;
• provide token-protected public customer pages;
• send operational web push notifications to salon staff about pending reminders, where enabled;
• respond to marketing enquiries and notify our team of new leads;
• provide support and respond to inquiries;
• monitor service performance and prevent abuse;
• maintain security logs and audit trails;
• improve the Services;
• send administrative, legal, and service-related communications;
• analyze marketing website performance;
• comply with legal obligations.

5. Legal Bases for Processing

Where Revime acts as a controller, we rely on the following legal bases under GDPR:

• contract performance, where processing is necessary to provide the Services;
• legitimate interests, such as securing the Services, improving functionality, responding to business inquiries, and operating B2B marketing;
• consent, where required for cookies, marketing tracking, or optional communications;
• legal obligation, where processing is required by applicable law.

Where Revime acts as a processor for client customer data, the client is responsible for determining the appropriate legal basis, such as consent, legitimate interests, contract, or another lawful basis under applicable law.

6. Cookies, Analytics, and Tracking

On getrevime.com, we may use cookies and similar technologies for site operation, analytics, and marketing measurement. This may include Google Analytics 4 and Meta Pixel, which load only after you give the relevant consent.

These tools may collect information about your device, browser, pages visited, and interactions with the website.

Cookies and similar technologies we may use on getrevime.com include:

• revime_cookie_consent — stores your cookie preference choices (necessary; up to 182 days);
• revime_locale — stores the interface language (necessary);
• revime_utm_*, revime_referrer, and revime_fbclid — marketing attribution after marketing consent;
• _ga, _gid, _gat, and similar Google Analytics cookies — after analytics consent;
• _fbp, _fbc, and similar Meta cookies — after marketing consent.

Revime does not currently use Google Analytics 4 or Meta Pixel inside the product application for salon users or on customer preference pages. The product may use operational event tracking, logs, security monitoring, and authentication cookies (including Supabase session cookies) necessary to operate and improve the Services.

You can control cookies through your browser settings and, where required, through cookie consent tools provided on the website.

7. Communications and Messaging Channels

Revime may send or facilitate messages through supported channels. SMS, WhatsApp, and Telegram may be delivered by Revime on behalf of the client. Instagram and Viber identifiers may be stored so that a client can open a client-initiated conversation (for example via a deep link); Revime does not currently send Instagram or Viber messages from its own servers.

By default, the Services prepare reminder drafts for the client to review and send. If the client enables automated sending, messages may be sent automatically according to reminder schedules, consent records, preferred channels, and system rules.

The client business is responsible for ensuring that messages sent through Revime comply with applicable privacy, electronic communications, marketing, telecommunications, and anti-spam laws.

Revime may maintain consent records, opt-out records, and delivery logs to support compliance, prevent unwanted communications, and document communication status.

8. Sharing Personal Data

We may share personal data with service providers and subprocessors that help us operate the Services, including hosting, infrastructure, database, authentication, security, analytics, spreadsheet import, and communication providers.

Current providers may include:

• Cloudflare, for DNS, security, CDN, traffic routing, and email forwarding;
• Vercel, for application hosting and deployment;
• Supabase, for database hosting, storage, and authentication;
• Google Cloud, for cloud infrastructure and compute services;
• Google LLC (Google Sheets API), for read-only import of customer and order data from a spreadsheet the client connects;
• Twilio, for SMS and WhatsApp messaging services;
• Telegram Messenger Inc., for Telegram bot message delivery to customers and for internal operations notifications of marketing leads;
• Sentry, Inc., for application monitoring, error tracking, diagnostics, troubleshooting, and security investigations;
• Google Analytics 4, for marketing website analytics;
• Meta Pixel, for marketing website measurement.

We may also disclose personal data if required by law, to protect rights and security, to enforce our agreements, or in connection with business restructuring.

9. International Transfers

We primarily aim to use EU or EEA infrastructure where reasonably available. Some providers are incorporated outside the EEA or may process personal data outside the EEA. Core application and database infrastructure is hosted in the EU; messaging, monitoring, CDN, and some hosting providers may process data outside the EEA.

Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, data processing agreements, or other lawful transfer mechanisms.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, unless a longer period is required or permitted by law.

For client customer data processed through the Services:

• customer records are deleted within 30 days after a valid deletion request or account deletion instruction, unless retention is required by law or necessary for compliance records;
• consent records, unsubscribe records, delivery logs, and related compliance records (including IP address and user-agent captured at consent or withdrawal) may be retained for up to 3 years;
• routine page-visit IP addresses and ordinary technical logs that are not stored as consent evidence may be retained for up to 30 days, unless needed for security or incident investigation;
• security logs and audit logs may be retained for up to 3 years or as reasonably necessary for security, fraud prevention, and legal protection.

Salon account deletion is handled after a request to hello@revime.app. We verify the requester and then delete salon configuration and customer data processed for that salon, subject to the retention rules above. There is currently no in-app data-export or self-service deletion button.

Backups may persist for a limited period before automatic deletion according to backup cycles.

11. Security

We use technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include encryption in transit, access controls, least-privilege access, secure infrastructure providers, logging, monitoring, and administrative controls.

No system is completely secure, and we cannot guarantee absolute security.

12. Your Rights

Depending on your location and the role under which data is processed, you may have rights to:

• access personal data;
• correct inaccurate personal data;
• request deletion;
• restrict processing;
• object to processing;
• receive data portability;
• withdraw consent;
• lodge a complaint with a supervisory authority.

If Revime acts as controller, contact privacy@revime.app to exercise your rights.

If Revime acts as processor for a client business, we may need to forward your request to the relevant client or handle it according to that client’s instructions.

You may lodge a complaint with the Czech supervisory authority: Úřad pro ochranu osobních údajů (ÚOOU), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, https://www.uoou.cz. You may also contact the supervisory authority in your country of residence.

13. End Customer Opt-Out and Consent Withdrawal

If you are an end customer receiving reminders through Revime, you may withdraw consent or opt out using the unsubscribe or preference mechanism provided in the message or customer page, where available.

After opt-out, Revime may retain suppression records, consent withdrawal records, and related logs to prevent further unwanted communications and to maintain compliance evidence.

14. Children

The Services are not intended to process data relating to children. Clients must not knowingly upload data relating to children under 16.

15. Changes to this Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide reasonable notice by email, in-product notice, or publication on our website.

16. Language

This Privacy Policy is provided in English. Any translations are provided for convenience only. In case of inconsistency, the English version prevails.

17. Contact

For privacy questions or requests, contact:

Vitalij Borysovyč Ševerov, OSVČ, trading as Revime

IČO: 21853193

Komenského 1058/39, 323 00 Plzeň - Bolevec, Czech Republic

Email: privacy@revime.app