Privacy Policy

Last Updated: January 2025

1. Introduction

Revenor ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our financial management platform (the "Service").

This Privacy Policy complies with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Cyprus Law on the Protection of Natural Persons with regard to the Processing of Personal Data (Law 125(I)/2018), and other applicable data protection laws.

2. Data Controller

Revenor is the data controller responsible for processing your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at:

Revenor

Email: privacy@revenor.com

Address: Cyprus (EU Member State)

3. Information We Collect

3.1 Personal Information

We collect information that you provide directly to us, including:

  • Name, email address, and contact information
  • Business information (company name, tax ID, address)
  • Payment and billing information
  • Account credentials and authentication data
  • Client and invoice data
  • Financial transaction data

3.2 Automatically Collected Information

We automatically collect certain information when you use our Service:

  • Device information (IP address, browser type, operating system)
  • Usage data (pages visited, features used, time spent)
  • Log files and analytics data
  • Cookies and similar tracking technologies

4. Legal Basis for Processing (GDPR Article 6)

We process your personal data based on the following legal grounds:

  • Contract Performance: To provide and maintain our Service, process payments, and fulfill our contractual obligations
  • Legitimate Interests: To improve our Service, prevent fraud, ensure security, and conduct business analytics
  • Consent: Where you have provided explicit consent for specific processing activities
  • Legal Obligations: To comply with applicable laws, regulations, and tax requirements

5. How We Use Your Information

We use the collected information for the following purposes:

  • To provide, maintain, and improve our Service
  • To process transactions and manage your account
  • To send you service-related communications
  • To respond to your inquiries and provide customer support
  • To detect, prevent, and address technical issues and fraud
  • To comply with legal obligations and enforce our terms
  • To analyze usage patterns and improve user experience

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information only in the following circumstances:

  • Service Providers: With trusted third-party service providers who assist us in operating our Service (e.g., cloud hosting, payment processing, email services)
  • Legal Requirements: When required by law, court order, or government regulation
  • Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)
  • With Your Consent: When you have explicitly consented to such sharing

All third-party service providers are contractually obligated to protect your data and comply with GDPR requirements.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your data, we will securely delete or anonymize it in accordance with our data retention policies.

8. Your Rights Under GDPR and Cyprus Law

As a data subject, you have the following rights:

Right of Access (Article 15 GDPR)

You can request a copy of your personal data we hold.

Right to Rectification (Article 16 GDPR)

You can request correction of inaccurate or incomplete data.

Right to Erasure (Article 17 GDPR)

You can request deletion of your personal data ("right to be forgotten").

Right to Restrict Processing (Article 18 GDPR)

You can request limitation of how we process your data.

Right to Data Portability (Article 20 GDPR)

You can request your data in a structured, machine-readable format.

Right to Object (Article 21 GDPR)

You can object to processing based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time.

Right to Lodge a Complaint

You have the right to file a complaint with the Cyprus Commissioner for Personal Data Protection or your local supervisory authority.

To exercise any of these rights, please contact us at privacy@revenor.com. We will respond within one month (or two months for complex requests) as required by GDPR.

9. Data Security

We implement industry-standard security measures to protect your personal data, including:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Regular security assessments and penetration testing
  • Access controls and authentication mechanisms
  • Secure data centers with physical security measures
  • Regular backups and disaster recovery procedures
  • Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions by the European Commission
  • Other legally recognized transfer mechanisms

11. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and provide personalized content. You can control cookies through your browser settings. For more information, please see our Cookie Policy.

12. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Data Protection Officer: privacy@revenor.com