Revari Privacy Policy
Last Modified: October 11, 2026
Revari LLC (“Revari,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy applies to the personal data we collect and process in the course of our business, including through our websites, applications, and related services (collectively, the “Service”).
Revari acts in different ways when processing data:
(i) Controller. Revari acts as a controller of your personal data when you visit our websites or marketing pages, contact us about the Service or plans, create or use a Revari user account, or otherwise interact with us (for example, support tickets or sales conversations). We use this data to provide and improve the Service, communicate with you, and operate our business.
(ii) Processor / service provider. Revari acts as a processor (or service provider) when our customers (and their partner resellers) use the Service to collect and process personal data in connection with their own sales, quoting, and related business activities. In that case, we process “Customer Data” on behalf of the customer under the customer’s instructions and applicable customer agreement (including any Data Processing Agreement when executed). The customer is the controller of that Customer Data.
For purposes of this Privacy Policy, “Personal Data” means any information relating to an identified or identifiable individual. This Privacy Policy describes your choices and rights with respect to your Personal Data.
(i) To exercise privacy rights when Revari acts as a controller, see Your Privacy Rights and Choices or email privacy@revarios.com.
(ii) If you wish to exercise privacy rights regarding Personal Data we process on behalf of a customer, please contact that customer directly and refer to their policies. We will assist our customers with verified requests as required.
We update this Privacy Policy from time to time. We will post changes on this page and, if the changes are material, notify you by email or another reasonable method when we have a contact address for you. Terms not otherwise defined here have the meaning given in your customer agreement with Revari, if any.
- What Information We Collect and Process
- How We Use Personal Data
- How We Share Personal Data
- How We Transfer Personal Data Internationally
- How We Store and Secure Personal Data
- Cookies and Similar Technologies
- Your Privacy Rights and Choices
- California Privacy Rights
- Other Important Privacy Information
- Third-Party Services and Integrations
- Contact Us
1. What Information We Collect and Process
1.1 Information You Provide to Revari
When you interact with us — including via our websites or any sites or services that link to this Privacy Policy, with our representatives, or when you use the Service — we may collect Personal Data and other information as described below.
1.1.1 When You Visit Our Websites
We may collect Personal Data when you submit information through our websites — for example by contacting support, asking about plans, or otherwise reaching out to Revari. We may ask for your email address, first and last name, company, job title, phone number, and similar business information. You may browse some of our public pages without providing Personal Data. Illustrative or preview forms that do not submit data to our servers do not result in collection of Personal Data from that interaction.
When you browse our public pages we count the visit without cookies. We record the page path, the website that linked you to us (when your browser shares it), any utm_source, utm_medium or utm_campaign tags carried in that link, and a short-lived visitor key: a keyed hash of your IP address and browser type that changes every day and is stored on its own. We do not store your IP address or browser details for this purpose, the key cannot be reversed to recover them, and it is not linked to an account, a contact record or any other data about you. We use these counts only to understand which public pages and referral sources are used.
1.1.2 Account and User Information
We collect Personal Data when you or your workspace administrator create a Revari user account, modify profile or preference information, join a customer workspace (Client), or otherwise access the Service. This may include name, email address, role, authentication identifiers, and workspace membership.
1.1.3 Payment and Billing Information
When you purchase paid products or services, we may collect billing contact details and related commercial information (for example, billing address or billing contact). If we collect payment card details, we use secure third-party payment processors; we do not store full payment card numbers on our own systems for card-not-present processing unless a future payment feature expressly requires it and is described here.
1.1.4 Support and Communications
When you contact us (including via support tickets, email, or similar channels), we collect the information you provide so we can respond and improve support.
1.2 Information We Process on Behalf of Customers
The Service is a sales CRM and quoting platform used by many customers, each in its own separate workspace. When customers use the Service, they may submit or collect Personal Data such as names, email addresses, phone numbers, company names, employer identification numbers (FEIN) or similar tax identifiers, addresses, deal and quote content, notes, documents, and related business records. We call information that customers (and their users) submit or generate in the Service “Customer Data.”
We store and process Customer Data as a processor / service provider based on the customer’s instructions and our customer agreement. Each customer controls and is responsible for the Customer Data they process using the Service and for complying with laws that require notice, disclosure, and/or consent before transferring Personal Data to Revari for processing.
If you have questions about Personal Data a customer holds in Revari, contact that customer directly.
1.3 Information We Collect When You Use the Service
1.3.1 Usage Data
We collect usage data when you or users in your workspace interact with the Service — for example, which features are used, approximate activity timing, and similar product analytics needed to operate and improve the Service.
1.3.2 Log Files and Device Information
Like most online services, we automatically collect and store certain information when you visit our websites or use the Service. This may include IP address, browser type, device type, operating system, referring URLs, pages or screens viewed, and access timestamps. We also maintain security and audit logs related to authentication and significant actions in the Service.
1.3.3 Single Sign-On (SSO)
If your organization enables SSO (for example, via an identity provider such as WorkOS), we receive identity attributes needed to authenticate you and map you to the correct Revari workspace (such as name, email, and organization identifiers provided by your IdP).
1.3.4 Mobile and Other Clients
If you access the Service from a mobile or other client application we offer in the future, we may collect device model, OS version, and similar technical identifiers needed to provide and secure that client.
Status page subscriptions and outage-time forms. Anyone can subscribe to service-status emails on our public status page (revarios.com/status). We first email a confirmation link to the address you enter, and we send status updates only after you open that link. We store your email address, its confirmation state and an unsubscribe token in a separate operational system that runs outside the Revari application (so it keeps working when the application does not); the same system briefly keeps a receipt (a reference number, the form kind, the time and a hashed IP address, for 30 days) for support, demo and package requests submitted while the application is unavailable, and the request itself is delivered to the application when it recovers. Every status email has a one-click unsubscribe link that removes your address; in-app opt-ins are synchronised from your profile setting.
1.4 Third-Party Integrations
You or your administrator may connect third-party integrations to your Revari workspace (for example, CRM sync, e-signature, prospecting, or email/calendar connectors when enabled). Those integrations may request permissions to access or send data. It is your (or your organization’s) responsibility to review the permissions you grant. We may record which integrations are enabled. We are not responsible for the privacy practices of third-party services you authorize.
1.5 Information We Collect From Other Sources
1.5.1 Partners
We may receive information about you from Revari partner resellers (for example, lead or deal registration related to selling or provisioning the Service), consistent with your relationship with that partner.
1.5.2 Service Providers and Public Sources
We may receive limited business contact information from service providers or publicly available sources in connection with our own sales and marketing to prospective customers of Revari. Revari does not operate a commercial “enrichment” dataset product that sells professional contact data to customers.
2. How We Use Personal Data
2.1 To Communicate About the Service
We use account and contact information to send transactional messages about billing, account administration, security, and product notices, and to provide customer support.
2.2 To Provide the Service
We use account information and Customer Data to provide the Service — including authentication, tenancy and role-based access, CRM and quoting features, renewals workflows, and related functionality your workspace enables.
2.3 To Improve and Develop the Service
We use usage data, logs, and feedback to maintain, secure, and improve the Service and our communications. When we share statistical insights externally, we do so in aggregated or de-identified form that does not identify individual users or customers.
Within a workspace, the Service may analyze a user's own activity records (actions taken and screens visited) to suggest shortcuts, automations, or product improvements to that user. These suggestions are computed from counts, timings, and action types rather than the content of records; they are shown only to the user they concern; and the user, the workspace, or the partner program can turn them off. Product-improvement insights derived from them are aggregated at the workspace level and do not identify individual users.
2.4 Hey Revari and Similar AI Features
If you use in-product assistance features (such as “Hey Revari”), we process the prompts and context needed to generate a response. AI features run on Amazon Bedrock, a service of Amazon Web Services (AWS), which processes those prompts and that context on our instructions as our subprocessor. We do not claim that Customer Data is used to train public foundation models unless a specific feature disclosure and applicable vendor terms say otherwise.
2.5 Security, Abuse Prevention, and Legal Compliance
We use Personal Data to verify accounts, investigate security incidents, detect abuse, enforce acceptable use, and meet legal obligations. Log and IP data may be used for security monitoring, debugging, and regulatory purposes.
2.6 Marketing and Promotion
We may use business contact information to market Revari products and services that may interest you (email or other channels). You may opt out of promotional messages as described in Section 7. We will continue to send transactional and administrative messages related to your account. Where required by law, we send marketing only with consent; otherwise we rely on legitimate interests in promoting our B2B Service.
2.7 Other Purposes With Consent
We may use Personal Data for other purposes when you give us consent to do so.
2.8 Legal Bases (EEA and UK Visitors/Users)
Revari LLC is a United States company and does not currently maintain an EU or UK establishment. If you are located in the European Economic Area (“EEA”) or United Kingdom (“UK”) and we act as controller of your Personal Data, our legal basis will depend on the context: typically consent, performance of a contract, compliance with a legal obligation, or our legitimate interests (such as securing and improving the Service and conducting B2B marketing) that are not overridden by your rights. Contact privacy@revarios.com with questions about legal bases applicable to your situation.
3. How We Share Personal Data
3.1 Service Providers
We share Personal Data with third-party service providers that support our websites and Service — for example hosting and infrastructure, identity and authentication, email delivery, analytics, customer support tooling, payment processing (when applicable), and Amazon Bedrock, the AWS service that runs our in-product AI assistance. These providers are permitted to process Personal Data only to perform services for us and are required to protect it appropriately under contract.
3.2 Partners
We may share Personal Data with Revari partner resellers as needed to provision, support, or co-sell the Service in connection with a partner-managed or white-labeled relationship, consistent with your communication preferences and the commercial arrangement among you, the partner, and Revari.
3.3 Corporate Events
If we (or our assets) are acquired, merged, or undergo another corporate transaction, Personal Data we hold may be transferred to the successor entity. We will provide notice as required by applicable law.
3.4 Compelled Disclosure
We may disclose Personal Data if required by law or if we reasonably believe disclosure is necessary to protect our rights, protect someone’s safety, investigate fraud, or comply with a legal process. Customer Data is treated as confidential under the customer agreement.
3.5 Affiliates
We may share Personal Data with Revari LLC and any future affiliates under common control, to the extent necessary for the purposes described in this Privacy Policy.
3.6 No Sale of a Commercial Contact Dataset
Revari does not sell a commercial dataset of professionals to customers and does not operate an enrichment marketplace for that purpose.
4. How We Transfer Personal Data Internationally
4.1 Primary Location
Revari is a U.S. company. We primarily store and process Personal Data in the United States, including on infrastructure providers such as Amazon Web Services (AWS) and related U.S.-hosted services.
4.2 Transfers From Other Countries
If Personal Data is transferred from the EEA, UK, Switzerland, or another jurisdiction with data-transfer restrictions, we will implement appropriate safeguards required for that transfer — for example, Standard Contractual Clauses (and UK addenda where applicable) in a customer Data Processing Agreement — when such transfers occur in connection with the Service.
Revari LLC is not currently certified under the EU-U.S. Data Privacy Framework, the UK Extension, or the Swiss-U.S. Data Privacy Framework. We will update this Privacy Policy if that status changes.
5. How We Store and Secure Personal Data
5.1 Security Measures
We use administrative, technical, and organizational measures designed to protect Personal Data from unauthorized access, use, or disclosure. Depending on the data and system, these measures may include encryption in transit, access controls and role-based authorization, controls that keep each customer's data separate from every other customer's (including access rules applied to each stored record of Customer Data), encryption of certain sensitive fields (such as FEIN), secrets referenced rather than stored in plaintext in our database, and append-only audit logging of significant mutations. These practices describe our current design; they are not a SOC 2, ISO, or similar certification claim.
5.2 Retention
We retain Personal Data for as long as reasonably necessary for the purposes described in this Privacy Policy — including to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements.
Customer Data is retained according to the customer agreement and the customer’s instructions (including soft-delete and privileged erasure workflows where available in the product). When we no longer have a legitimate need to process Personal Data we control, we delete or anonymize it, or securely isolate it until deletion is possible.
Marketing preference data is retained for a reasonable period after your last interaction with our promotional content or account.
5.3 Export and Erasure Requests
Where the product supports it, workspace administrators may use in-product privacy tools (for example, Settings › Privacy) to export or request erasure of workspace data, subject to legal holds and contractual retention. You may also email privacy@revarios.com.
6. Cookies and Similar Technologies
6.1 Cookies
When you visit our websites or use the Service, we use cookies and similar technologies as needed to:
- keep you signed in and maintain session security (essential);
- remember preferences, such as language or a trusted device you chose to remember; and
- understand how our public pages are used — through our own cookieless visit counter described in Section 1.1.1, which sets no cookie and stores no IP address.
Essential cookies are required for the Service to function. You can control cookies through your browser settings; disabling essential cookies may prevent login or other features from working. We do not currently load third-party analytics or advertising trackers on our public pages.
6.2 Advertising
We do not currently use third-party advertising networks to deliver interest-based ads on our marketing site. If that changes, we will update this section and provide opt-out information where required.
7. Your Privacy Rights and Choices
7.1 Personal Data Requests
Depending on your location and applicable law, you may have rights to:
(i) Access, correction, or deletion of Personal Data we hold about you;
(ii) Object to or restrict certain processing, or request portability of Personal Data; and
(iii) Withdraw consent where processing is based on consent (without affecting prior lawful processing).
To exercise these rights when Revari is the controller, email privacy@revarios.com. We may verify your identity before fulfilling a request. Authorized agents may submit requests where permitted by law if they provide proof of authority. You will not be discriminated against for exercising privacy rights.
We will respond within a reasonable time and as required by law. Rights may be limited where fulfilling a request would impair others’ rights, prevent us from providing a requested service, or conflict with legal obligations (including retention of audit records with Personal Data redacted where appropriate).
If you are an individual whose information appears only in a customer’s Revari workspace, contact that customer. Revari acts as a processor for Customer Data in most cases and will work with customers on verified requests.
Depending on your location, you may have the right to lodge a complaint with a supervisory authority.
7.2 Anti-Spam Expectations
Customers who send email or other messages using the Service (when those features are enabled) are responsible for complying with applicable anti-spam and marketing laws, including providing required identification and opt-out mechanisms. Misuse may result in suspension or termination under the customer agreement.
7.3 Unsubscribing From Revari Communications
You may unsubscribe from Revari marketing emails by using the unsubscribe link in those emails or by contacting privacy@revarios.com. You cannot opt out of transactional messages related to your account or the Service.
7.4 Customer Communications
Our customers are solely responsible for their own marketing and other communications to their contacts. Revari cannot unsubscribe you from a customer’s messages; use that customer’s unsubscribe mechanism or contact them directly.
8. California Privacy Rights
8.1 Applicability
This section applies to California residents. “Personal Information” has the meaning given in the California Consumer Privacy Act as amended by the CPRA (“CCPA”). It describes how we collect, use, and disclose Personal Information in our role as a “business,” and your rights.
If you need this notice in an alternative format due to a disability, contact us at privacy@revarios.com.
8.2 Categories Collected
In the past twelve (12) months, we may have collected the following categories:
(i) Identifiers — such as name, email address, postal address, and phone number (from you or, for Customer Data, from the customer);
(ii) Commercial information — such as subscription or plan-related records;
(iii) Internet or network information — such as browsing activity on our sites and Service usage logs;
(iv) Geolocation data — coarse location derived from IP address;
(v) Financial information — billing contact details and, if applicable, payment information processed by payment providers;
(vi) Professional information — such as job title and company;
(vii) Other information you provide when contacting support or using the Service; and
(viii) Inferences drawn from the above for product improvement or B2B marketing relevance.
Purposes, retention, and categories of service providers are described in Sections 2, 3, and 5 of this Privacy Policy.
8.3 Sale and Sharing
Revari does not sell Personal Information as that term is commonly understood, and we do not sell a commercial enrichment dataset.
We do not “share” Personal Information for cross-context behavioral advertising within the meaning of the CCPA at this time. We do not knowingly sell or share Personal Information of consumers under 16 years of age.
If our practices change, we will update this Privacy Policy and provide required opt-out mechanisms.
8.4 Your California Rights
Subject to legal exceptions, you may have the right to:
(i) know / access Personal Information we collected about you;
(ii) delete Personal Information;
(iii) correct inaccurate Personal Information;
(iv) learn about categories disclosed for certain marketing purposes;
(v) limit use of sensitive Personal Information to purposes permitted by law (we use sensitive information such as payment details or tax identifiers only for permitted business purposes, not to infer characteristics about you);
(vi) appeal a denial of a request; and
(vii) non-discrimination for exercising CCPA rights.
8.5 How to Exercise California Rights
Email privacy@revarios.com or write to the address in Section 11. We will verify your identity and respond within the time permitted by law. You may designate an authorized agent with appropriate proof of authority.
9. Other Important Privacy Information
9.1 Children
Our websites and Service are not directed to children under 16, and we do not knowingly collect Personal Data from children under 16 as a controller. If you believe we have collected such information, contact us so we can delete it.
Customers may upload Customer Data that incidentally includes information about minors; in that case we process it only as a processor on the customer’s instructions.
9.2 Changes
We may update this Privacy Policy from time to time. The “Last Modified” date at the top reflects the latest revision. Continued use of the Service after a posted update constitutes notice of the revised Policy, except where applicable law requires additional consent or notice.
9.3 Governing Law
This Privacy Policy is intended for a U.S.-based service operated by Revari LLC. Disputes relating to this notice are governed by the laws of the State of Arkansas and applicable U.S. federal law, without regard to conflict-of-law principles, except where mandatory local privacy law provides otherwise for residents of that locality.
10. Third-Party Services and Integrations
Depending on which features your workspace enables, the Service may rely on third-party providers such as:
- Amazon Web Services (AWS) — hosting and related infrastructure;
- Identity providers (e.g., WorkOS) — SSO / directory sync when configured;
- Amazon Bedrock (a service of AWS) — AI models for in-product assistance features when enabled;
- E-signature providers (e.g., DocuSign) — when you connect them;
- Customer-authorized CRM or prospecting tools — when you connect them.
Each provider processes data under its own terms and privacy policy when you use their services, and under our contracts when they act as our subprocessors. Review the permissions you grant before connecting an integration.
If we later offer Google Workspace OAuth integrations (Gmail, Calendar, Drive, or similar), we will update this section with Google API Services User Data Policy / Limited Use disclosures before those features are generally available. We do not currently claim Google Workspace API access in this Policy.
11. Contact Us
If you have questions about this Privacy Policy or our privacy practices, or if you need this notice in an alternative format:
Email: privacy@revarios.com
Postal mail:
Attn: Privacy Revari LLC 1 Riverfront Dr., Suite 595 North Little Rock, AR 72114 USA
Revari