Privacy Policy
Pilot policy · last updated 30 August 2026 · replaced by counsel-reviewed policy before general availability.
What we collect
Account data (name, work email, hashed password, scrypt, never plaintext), workspace configuration, and the lead data you route into the service: contact details, ad/form context, call recordings and transcripts where enabled, qualification answers, appointments, and revenue events.
How it is used
Only to operate the product: placing policy-checked calls, scoring answers against your rule versions, booking appointments, syncing your CRM, reporting conversions to ad platforms you connect, and maintaining the audit log. We do not sell personal data and we do not train AI models on your leads' conversations.
PII handling
Phone numbers and emails are masked throughout the interface; revealing one is a per-event, audited action gated on a specific capability. PII is auto-redacted in analytics when that setting is on.
Retention
Recordings and transcripts follow the windows you configure under Settings → Retention and are deleted on schedule. Audit entries are immutable and retained for the life of the workspace. You can request export or deletion of your workspace data at any time.
Sub-processors
Telephony (Plivo), voice AI (ElevenLabs), database hosting (MongoDB Atlas), and the CRM/ad platforms you explicitly connect. Each receives only what its function requires. Calls placed in India are carried entirely within India.
Your rights
Access, correction, export, and deletion requests: write to privacy@revexa.app from your account email. Leads who ask the agent to stop calling are suppressed immediately and permanently unless you remove the suppression with an audited reason.