Data Security and Privacy

At Revuloop, protecting your data is our top priority. We're committed to transparency about our security practices and the enterprise-grade infrastructure we use to keep your information safe.

How We Protect Your Data

Infrastructure Security (Provided by Our Vendors)

• SSL/TLS Encryption: All data encrypted in transit via HTTPS (Vercel)
• Encryption at Rest: Database encrypted with AES-256 (Supabase)
• Automatic Backups: Daily automated backups (Supabase)
• DDoS Protection: Built-in protection (Vercel)
• Uptime Monitoring: Infrastructure monitored 24/7 by our hosting providers

Application Security (What We've Built)

• Role-Based Access: Organization roles (Owner, Admin, Member, Viewer)
• Password Requirements: Minimum 8 characters with complexity requirements
• Secure Sessions: HTTP-only cookies, secure session management
• Input Validation: Protection against common web vulnerabilities

Third-Party Service Providers

• Hosting: Vercel (serverless platform with global edge network)
• Database: Supabase (open-source PostgreSQL with built-in security features)
• Payments: Stripe (PCI-DSS Level 1 certified payment processor)
• Email: (Your email provider if applicable)

All our infrastructure providers are SOC 2 compliant and follow industry security standards.

Data Collection and Storage

What We Collect

• Account Information: Name, email address
• Billing Information: Payment details (processed securely by Stripe, not stored by us)
• Survey Data: Your surveys, questions, and responses
• Usage Data: How you use the platform (for product improvements)
• Technical Data: IP addresses, browser type (for security and analytics)

Where Your Data is Stored

• Hosting: Vercel global edge network
• Database: Supabase hosted on AWS in the United States
• Backups: Automatic daily backups retained for 7 days (Supabase)

Data Retention

• Active Accounts: Data retained as long as your account is active
• Deleted Accounts: Data deleted within 30 days of account deletion request
• Survey Responses: Retained according to your survey settings

Your Privacy Rights

GDPR Rights (European Users)

If you're in the EU, you have the right to:

• Access your data: Request a copy of your personal information
• Correct your data: Update incorrect information
• Delete your data: Request deletion of your account and data
• Data portability: Export your data in common formats

How to exercise these rights: Email us at support@revuloop.com with your request. We'll respond within 30 days.

CCPA Rights (California Users)

If you're in California, you have the right to:

• Know what data we collect: Request details about data collection
• Delete your data: Request deletion of your personal information
• Opt-out: We do not sell your personal information

How to exercise these rights: Email us at support@revuloop.com with your request.

How We Handle Privacy Requests

Privacy requests are handled by our support team:

1. Email your request to support@revuloop.com
2. We'll verify your identity
3. We'll process your request within 30 days
4. You'll receive your data export or deletion confirmation via email

Data Sharing and Usage

We Do NOT:

• Sell your personal information to third parties
• Share your survey data with anyone without your permission
• Use your data for purposes other than providing our service

We May Share Data:

• With service providers (Vercel, Supabase, Stripe) to operate our service
• When required by law or to respond to legal requests
• To protect our rights or investigate fraud/security issues
• With your explicit consent

What You Can Do

Survey Creator Tools

• Access Controls: Set who can view and edit your surveys within your organization
• Response Data: Full access to your survey responses and analytics
• Data Export: Download responses in CSV, Excel, PDF, or JSON format
• Account Deletion: Delete your account and all data at any time

Creating Privacy-Friendly Surveys

• Anonymous Surveys: Don't collect names or emails if you don't need them
• Clear Communication: Tell respondents how you'll use their data
• Minimal Data: Only ask questions you actually need answers to
• Secure Sharing: Use password protection for sensitive surveys

Account Security Best Practices

For Your Account

• Strong Passwords: Use unique passwords with 8+ characters
• OAuth Options: Sign in with Google or GitHub for added security
• Monitor Activity: Check your account regularly for unusual activity
• Sign Out: Always sign out on shared computers

For Organizations

• Role Management: Assign appropriate roles (Owner, Admin, Member, Viewer)
• Regular Reviews: Audit team member access periodically
• Remove Access: Promptly remove access when team members leave
• SSO (Early Access): Use Single Sign-On for enterprise security

Security Incident Response

We take security incidents seriously and have established protocols to protect your data.

If a Security Breach Occurs:

1. Investigation: We'll investigate immediately upon discovery
2. Containment: We'll work with our infrastructure providers to contain the issue
3. Notification: We'll notify affected users as required by law
4. Transparency: We'll communicate what happened and what we're doing about it
5. Prevention: We'll implement measures to prevent similar incidents

Our infrastructure providers (Vercel and Supabase) provide 24/7 monitoring and automated threat detection. We respond promptly to any security concerns during business hours.

Reporting Security Issues

Found a security vulnerability? Please help us keep Revuloop secure:

Contact: support@revuloop.com with subject line "Security Issue"

Please include:

• Description of the vulnerability
• Steps to reproduce (if safe to share)
• Potential impact
• Your contact information

We appreciate responsible disclosure and will respond promptly to legitimate security reports.

Questions About Privacy?

We're happy to answer any questions about how we protect your data.

Contact us: support@revuloop.com

Additional Resources

• Privacy Policy: https://revuloop.com/privacy-policy
• Terms of Service: https://revuloop.com/terms
• Cookie Policy: https://revuloop.com/cookie-policy
• Vercel Security: https://vercel.com/security
• Supabase Security: https://supabase.com/security
• Stripe Security: https://stripe.com/docs/security

---

We may update this page as our security practices evolve. We'll notify users of significant changes via email.