Privacy policy

Who we are

• RevGlance is a revenue analytics service with a website and a mobile app.
• Operated by: Raymond Muller
• Address: Calle Italia 9, 47007, Valladolid
• Established in: Spain
• Contact: [email protected]

Our two roles

• Your account: For your account, your billing and how you use RevGlance, we decide how the data is used, so we are the controller.
• Your customers: For the customer and subscription data imported from the stores you connect, you decide what is imported and why. We handle it on your behalf, so you are the controller and we are the processor.
• If you buy from a business that uses RevGlance: That business decides how your data is used here, so please contact it first.

What we collect about you as an account holder

• Account: Your name, email address and password, which is stored only as a hash. If you use them, your two-factor secret and passkeys. Settings such as language, number format, timezone and reporting currency.
• Billing: Your Stripe customer ID, subscription status and, when Stripe reports them, the card type and last four digits. Stripe handles the card itself.
• Businesses: Their names, websites and logos, what you write about your product for email drafts, and any Slack webhook address, which is stored encrypted.
• Store credentials: The API keys and other credentials you give us for connected stores, and their webhook secrets. These are stored encrypted.
• Team and recipients: The email addresses and roles of people you invite, and the addresses you add to scheduled reports.
• What you write: Your Ask questions and their answers, notes, goals and saved segments. Posts and comments on the feedback board are shown with your name to other signed-in customers.
• Activity: When you last used RevGlance, and for REST API keys, each call with its method, path, status and duration.
• Sign-in: Your IP address and browser details are stored with your session.

What we import from the stores you connect

You can connect Stripe, Paddle, Lemon Squeezy, Polar, Gumroad, Braintree, Recurly, Chargebee, Shopify, the App Store and Google Play. RevGlance reads your customers, subscriptions, trials, payments, refunds and cancellations from them. This is personal data about the people who buy from you.

• What it can include: Each customer’s name, email address, country, store customer ID, plan and amounts, any custom attributes the store holds, and their cancellation reason and comment.
• How it is stored: Customer names and email addresses are encrypted in our database. Other fields, such as country, plan, amounts, attributes, payment descriptions and cancellation comments, are not encrypted field by field.
• Emails sent for you: If you turn them on, RevGlance emails your customers about failed payments and cancellation surveys. It keeps a record of each email, survey answers and who opted out.
• Privacy mode: You can turn this on for each business. It stores no customer names, email addresses or personal metadata: a customer becomes a store ID and a label, with country, plan and amounts. If you also turn on sending in privacy mode, the address is fetched from the store when an email goes out and we do not keep it.
• What stays in privacy mode: Store IDs, a keyed hash of the email address for Gumroad buyers, and cancellation comments. These can still count as personal data.

What AI features send

Some features use Claude, a model from Anthropic. What is sent depends on the feature:

• Ask: Your question, the previous question in a follow-up, and the names in your data: businesses, sources, plans, plan groups, countries and custom attribute names. No customer records and no amounts. Custom attribute values are sent only if you turn on AI reading of customer data for a business, and never in privacy mode.
• Anything you type: A question is sent as you wrote it, so a name you type into it reaches Anthropic.
• Cancellation themes: Off unless you turn on AI reading of customer data for a business, and never in privacy mode. When on, up to 300 comments your customers wrote when they canceled, from the last year. Email addresses, links, phone numbers, amounts and the customer’s name are removed automatically first, but this cannot catch every personal detail in free text. Theme titles can also be sent for translation.
• Email drafts: The business name, what you wrote about your product and tone, the email’s step and its language. Nothing about any customer.
• Plan matching: Plan, plan group, source and store names, billing intervals and currencies.
• No AI: Why did this change? and every figure in RevGlance are worked out without a model.
• Assistants you connect: If you connect an assistant such as Claude, ChatGPT or Cursor through MCP, or use a REST API key, that tool receives the data it asks for, and its provider’s terms apply.

The mobile app

• On your phone: Your sign-in tokens are kept in the device keychain or keystore. Recent figures and customer details are kept in the app’s own storage for up to 24 hours. Signing out removes them.
• Widgets: If you add a home screen widget, the app saves the business name and logo, MRR, its change and a line chart to storage the widget can read. Hide amounts keeps money out of it. Signing out empties it.
• Push notifications: If you turn them on, we store your device’s push token, its platform and your choices. Messages go through Apple or Google and can include a business name and figures. In privacy mode, alerts carry no figures and the Monday summary leaves those businesses out.
• Updates: Each time it opens, the app asks our server for an update, sending its platform, version, update channel and current update ID. We do not store these requests in our database. Updates download from Cloudflare R2.
• Tracking: The app contains no advertising or analytics SDK and does not track you across other apps or sites.

Logs, cookies and analytics

• Analytics: The website contains no analytics or advertising scripts.
• Logs and IP addresses: Every request passes through Cloudflare to our server, and both see your IP address. Our server uses it for rate limits, and errors are written to a log file.
• Cookies we need: A session cookie and a form security cookie, plus a stay-signed-in cookie for up to 400 days if you choose it.
• Cookies for preferences: Your theme, your sidebar state and your language, the last for a year. Your browser’s local storage also keeps your theme and which hints you have dismissed.
• Other companies: Cloudflare can set its own security cookie. Report previews load fonts from Bunny Fonts, which sees your IP address.

Why we use your data, and our legal bases

• Contract: To provide what you signed up for: your account, syncing, reports, AI features and the emails you turn on.
• Contract and legal obligation: To bill you and keep the records tax law requires.
• Legitimate interests: To keep RevGlance secure and working: session records, rate limits, error logs and backups.
• Consent: For push notifications, which you can turn off at any time.
• Your instructions: We handle imported customer data on your behalf. You are responsible for having your own legal basis for it and for telling your customers.

Who receives data

• Cloudflare: Carries all website and app traffic, and stores app updates and database backups in R2.
• Hetzner: Hosts the server that runs RevGlance and its database, in the EU.
• Stripe: Handles our billing and receives your name, email address and payment details.
• Anthropic: Runs the AI features and receives what is listed above.
• Our email provider: Delivers account, report, alert, invitation, recovery and survey emails, so it receives each recipient’s address and the email’s contents.
• Apple and Google: Deliver push notifications, and distribute the app under their own terms.
• Bunny Fonts: Serves the fonts in report previews and PDFs.
• Those you choose: The stores you connect, the Slack workspace of any webhook you add, the people you invite or send reports to, and any assistant or tool you connect.

Some of these companies process data outside the European Union, including in the United States.

We do not sell your data or your customers’ data. We may disclose data when the law requires it.

How long we keep data

• Account and imported data: Until you delete your account, or remove the business or source it belongs to, or we delete an inactive account.
• Sessions: They end after 120 minutes without activity, and the expired records are cleared after that.
• REST API call records: 90 days.
• Error and server logs: The application error log is kept for 30 days and web server logs for 14 days. Logs at Cloudflare follow their own settings.
• Cancellation themes: A grouping keeps the comments it was made from. It is deleted 90 days after a newer one replaces it, and after a year in any case.
• Inactive accounts: An account with no current license is deleted automatically after 90 days without a sign-in, counted from the end of the trial or subscription at the earliest. We email you 30 and 7 days before. You can export your data until then, and invoices stay at Stripe.
• Expired records: Password reset requests are cleared within a day of expiring, and revoked sign-in tokens within a day. Expired sign-in tokens go about a week after they expire, invitations 30 days after they expire, and failed background jobs after 30 days.
• Backups: The database is backed up every night, encrypted, to a private Cloudflare R2 bucket. Backups are kept for up to 6 months.

Deleting your account

• Your account, the businesses you own and their imported numbers are removed. This cannot be undone.
• A subscription is cancelled right away, with no automatic refund for the time left. You do not need to cancel it first.
• Stripe keeps invoices and payment records, as tax law requires. We remove your saved payment methods from Stripe. If you never made a payment, your customer record at Stripe is deleted too. If you did, it stays, with your name and email address, alongside your invoices.
• Deleted data can stay in encrypted backups for up to 6 months, until those backups are replaced.
• We keep the IDs of deleted accounts and businesses for 7 months, with no name or email address, so that a restored backup can have them deleted again.
• Your sessions and sign-in tokens, any open password reset, older purchase records and the logo files of your businesses are deleted too.

How to delete your account

Your rights

Where the GDPR applies, you can ask us for a copy of your personal data, have it corrected or deleted, restrict or object to how we use it, receive it in a portable format, and withdraw any consent you gave. You can also complain to your data protection authority.

You can change your name and email address in your settings, and delete your account yourself. For anything else, write to [email protected]

Security, children and changes

• Security: We use the encryption and hashing described above, and offer two-factor sign-in and passkeys. No service can promise perfect security.
• Children: RevGlance is a tool for businesses and is not meant for children.
• Changes: When this policy changes, we update the date at the top of this page.