RevuNote ("RevuNote," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, applications, and services (collectively, the "Service").
By accessing or using the Service, you agree to the practices described in this Privacy Policy.
1. Information We Collect
1.1 Information You Provide Directly
We collect information you voluntarily provide, including:
- Files and documents you upload
- Text extracted from uploaded documents
- Metadata related to uploads (file name, file size, file type)
1.2 Google User Data We Access
When you sign in using Google OAuth, RevuNote requests access to the following Google user data:
- Basic profile information: Your name, email address, and profile picture, used solely to identify your account within RevuNote.
- Google Drive: Access to create files and folders in your Google Drive. RevuNote uses this solely to save your processed documents into organized folders in your Drive. We do not read, modify, or delete any existing files you did not upload through RevuNote.
- Google Calendar (if authorized): Access to create calendar events on your behalf. RevuNote uses this solely to add events extracted from event invitation images you send through the RevuNote WhatsApp bot. We do not read, modify, or delete any existing calendar events.
- OAuth tokens: Access and refresh tokens are stored securely in our database solely to perform the above authorized actions on your behalf.
We do not collect or store your Google account password.
1.3 Automatically Collected Information
We may automatically collect limited technical information, such as IP address, browser type, device information, and usage and diagnostic data. This is used solely for security, performance monitoring, and service improvement.
2. How We Use Your Google Data
RevuNote uses your Google user data strictly to provide the features you have authorized:
- Google Drive access is used only to save and organize documents you upload through RevuNote into folders in your own Google Drive.
- Google Calendar access is used only to create calendar events from event invitations you explicitly share with the RevuNote WhatsApp bot.
- Profile information is used to identify and authenticate your account.
- We do not use your Google data for advertising, profiling, or any purpose beyond what is described above.
- We do not sell your personal information or Google user data.
RevuNote's use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.
3. Data Sharing
We do not sell, rent, or share your Google user data with third parties for their own purposes. Data may be shared only in the following limited circumstances:
- Service providers: We use Supabase for secure database storage of authentication tokens, and cloud hosting providers to operate the Service. These providers receive only the minimum data necessary and are bound by confidentiality obligations.
- Automation: We use n8n (self-hosted workflow automation) to process uploaded documents and create Drive files and Calendar events. This runs on our own infrastructure and does not share your data with external third parties.
- Legal requirements: We may disclose data if required by law or to protect our legal rights.
4. Data Storage & Protection
We implement the following safeguards to protect your data:
- OAuth tokens are stored in an encrypted Supabase database with restricted access.
- All data transmission uses HTTPS/TLS encryption.
- Uploaded files are processed and then deleted from our servers — we do not permanently store your uploaded documents on RevuNote servers.
- Access to production systems and credentials is strictly limited to authorized personnel.
5. Data Retention & Deletion
- Uploaded files are deleted from our servers immediately after processing.
- Extracted text and metadata may be retained to provide ongoing service functionality.
- OAuth tokens are retained only as long as your account is active and are deleted or invalidated when your account is removed or you revoke access.
- You may revoke RevuNote's access to your Google account at any time by visiting Google Account Permissions.
- To request deletion of all your RevuNote data, email us at oriela@revunotetyh.space. We will process your request within 30 days.
6. Third-Party Services
RevuNote relies on the following third-party services to operate:
- Google OAuth, Google Drive API, and Google Calendar API — for authentication and authorized integrations
- Supabase — for authentication and secure database storage
- n8n (self-hosted) — for workflow automation
- Cloud infrastructure providers — for hosting and processing
These services receive only the information necessary to perform their functions and are subject to their own privacy and security obligations.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access your personal information held by RevuNote
- Request correction or deletion of your data
- Withdraw consent or revoke authorized Google integrations at any time via Google Account Permissions
To exercise these rights, contact us at oriela@revunotetyh.space.
8. Children's Privacy
RevuNote is not intended for individuals under the age of 13. We do not knowingly collect personal information from children.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.
10. Contact Information
If you have questions or concerns regarding this Privacy Policy or our data practices, please contact:
RevuNote
Email: oriela@revunotetyh.space