Privacy Policy

Introduction

Revya, Inc. ("Revya," "we," "us," or "our") is committed to protecting your privacy and ensuring the security of your data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our revenue planning and deduction recovery platform.

By using Revya's services, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide

• Account information (name, email address, company name, job title)
• Billing and payment information
• Communications you send to us (support requests, feedback)
• Business data you upload or connect to our platform

Information from Connected Systems

With your explicit authorization, we access data from your connected systems including:

• ERP systems (NetSuite, SAP, QuickBooks)
• Distributor portals (UNFI, KeHE, Amazon Vendor Central)
• Remittance documents, invoices, and deduction records
• Shipping documentation (BOLs, PODs)

Important: We access this data in read-only mode. We never modify your source systems or data.

How We Use Your Information

We use your information to:

• Provide, maintain, and improve our deduction recovery and revenue planning services
• Analyze deductions and identify invalid charges
• Generate dispute documentation and track recovery status
• Match deductions to promotions, shipments, and contracts
• Send service-related communications and updates
• Provide customer support
• Detect, prevent, and address technical issues or fraudulent activity
• Comply with legal obligations

Data Security

We implement robust security measures to protect your data:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• SOC 2 Type II compliant infrastructure
• Regular security audits and penetration testing
• Role-based access controls
• Multi-factor authentication for all accounts
• Automated threat detection and monitoring

Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Service providers: Third parties who assist in operating our platform (cloud hosting, analytics)
• Distributors: When submitting disputes on your behalf, with your authorization
• Legal requirements: When required by law, subpoena, or court order
• Business transfers: In connection with a merger, acquisition, or sale of assets

Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account termination, we retain data for up to 7 years to comply with financial record-keeping requirements and support any ongoing dispute resolutions. You may request deletion of your data at any time, subject to legal retention requirements.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data (subject to legal requirements)
• Export your data in a portable format
• Opt out of marketing communications
• Withdraw consent for data processing

California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at privacy@revya.ai.

Cookies and Tracking

We use essential cookies to operate our platform and analytics cookies to understand usage patterns. You can control cookie preferences through your browser settings. We use Vercel Analytics, which collects anonymous usage data without personally identifying you.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: