Privacy Policy

1. Information We Collect

We collect information in the following ways:

1.1 Information You Provide Directly

• Account registration data: name, email address, password
• Billing information: processed securely via Lemon Squeezy; we do not store full credit card numbers
• Business data you enter into the platform: financial projections, revenue figures, cost assumptions, and other modeling inputs
• Files you upload for AI analysis (CSV, spreadsheet data)
• Communications with our support team

1.2 Information Collected Automatically

• Log data: IP address, browser type, pages visited, time and date of visits, referring URLs
• Device information: hardware model, operating system, unique device identifiers
• Usage data: features used, models created, actions taken within the platform
• Cookies and similar tracking technologies (see Section 6)

1.3 Information from Third Parties

• Authentication providers (if you sign in via Google or another OAuth provider)
• Payment processors (Lemon Squeezy) — transaction confirmations and billing status only

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process transactions and send related information including purchase confirmations and invoices
• Improve, personalize, and expand the Service
• Understand and analyze how you use the Service to improve user experience
• Develop new features, products, and functionality
• Communicate with you — including for customer service, updates, and marketing (where permitted)
• Send you emails and notifications you have opted into
• Find and prevent fraud and abuse
• Comply with legal obligations

We do not use your business financial data to train AI models or share it with third parties for advertising purposes.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Contract performance: processing necessary to provide the Service you have signed up for
• Legitimate interests: improving the Service, preventing fraud, analytics
• Consent: marketing communications (you may withdraw consent at any time)
• Legal obligation: compliance with applicable laws

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

4.1 Service Providers

We share data with trusted third-party vendors who assist in operating the Service, subject to confidentiality agreements:

• Lemon Squeezy — payment processing
• Vercel — hosting and infrastructure
• Anthropic / OpenAI / Google — AI features (data is processed per their enterprise privacy policies; we do not permit training on your data)
• PostHog or equivalent — analytics
• Resend or equivalent — transactional email

4.2 Business Transfers

If Revenue Map is acquired, merged, or undergoes a change of control, your information may be transferred as part of that transaction. We will notify you before your information is subject to a different privacy policy.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests (subpoenas, court orders, etc.).

4.4 With Your Consent

We may share your information for other purposes with your explicit consent.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: retained while your account is active and for 90 days after deletion
• Financial modeling data: retained while your account is active; deleted within 30 days of account deletion upon request
• Billing records: retained for 7 years as required by applicable tax and accounting laws
• Log data: retained for 90 days

You may request deletion of your data at any time by contacting us at privacy@revenuemap.app.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you logged in (session cookies)
• Remember your preferences
• Analyze Service usage and performance
• Prevent fraud

Types of cookies we use:

• Essential cookies: required for the Service to function; cannot be disabled
• Analytics cookies: help us understand how users interact with the Service (e.g., PostHog)
• Preference cookies: remember your settings and choices

You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality. We do not use advertising or third-party tracking cookies.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your personal data ("right to be forgotten")
• Portability: receive your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interests
• Restriction: request restriction of processing in certain circumstances
• Withdraw consent: for consent-based processing, withdraw at any time

To exercise any of these rights, contact us at privacy@revenuemap.app. We will respond within 30 days. We may need to verify your identity before processing requests.

California residents: Under the CCPA, you have additional rights including the right to know about and opt out of the “sale” of personal information. We do not sell personal information.

8. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

• Encryption in transit (TLS/HTTPS) and at rest
• Access controls limiting who can access your data
• Regular security reviews and vulnerability assessments
• Secure payment processing via Lemon Squeezy (PCI DSS compliant)

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your rights, we will notify you as required by applicable law.

9. International Data Transfers

Revenue Map is operated from the European Union / Serbia. If you access the Service from outside this region, your data may be transferred to and processed in countries with different data protection laws.

For transfers from the EEA to third countries, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission where applicable.

10. Children's Privacy

The Service is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us immediately at privacy@revenuemap.app and we will delete it promptly.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read the privacy policies of every website you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new policy on this page with an updated effective date
• Sending an email notification to the address associated with your account
• Displaying a notice within the Service

Your continued use of the Service after changes become effective constitutes your acceptance of the revised policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For GDPR-related inquiries, our Data Protection contact is reachable at the email above. We aim to respond to all privacy inquiries within 30 days.