Global Privacy Policy

Introduction

Revenue Inc. (“we”, “us”, “our”, “Company”) respects your privacy and is committed to protecting it through compliance with this policy.

This policy describes the types of information we may collect or that you may provide when you access or use our website and services (collectively, “Services”).

Our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy applies to information we collect on this Website, in email, text, and other electronic messages between you and this Website, and through mobile and desktop applications you download from this Website.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Services. By accessing or using
our Services, you agree to this privacy policy.

Data Collection

We collect several types of information from and about users of our Services, including:

• Personal identifiers, such as name, postal address, email address, or telephone number.
• Commercial information, such as records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
• Internet or other electronic network activity information.

Use of Your Information

We use the information we collect about you or that you provide to us, including any personal information:

• To present our Services and its contents to you
• To provide you with information, products, or services that you request from us
• To fulfill any other purpose for which you provide it
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us

Disclosure of Your Information

We may disclose aggregated information about our users, and information that does not identify any individual, without restriction.

Data Rights

If you are a resident of the European Economic Area (EEA), you have certain data protection rights covered by GDPR. If you are a resident of California, you have certain data protection rights covered by CCPA and CPRA. These include:

• The right to access, update or delete the information we have on you
• The right of rectification
• The right to object
• The right of restriction
• The right to data portability
• The right to withdraw consent

Clients Using Revenue, Inc. Services

As a client of Revenue Inc., you have certain responsibilities and rights regarding the use of our services and the data you provide us.

Data Ownership and Control

As a client, you retain ownership and control of all data you provide to us on the frontend and only backup data for business continuity related purposes. We will only use this data to provide the services you have requested, in
accordance with our Privacy Policy and Terms of Service.

Data Protection and Compliance

You are responsible for ensuring that any data you provide to us complies with all relevant laws and regulations. This includes obtaining any necessary consents for the collection and processing of personal data.

Security

You are responsible for maintaining the security of your account. This includes keeping your login information confidential and securing any devices you use to access our services. If you become aware of any unauthorized access to your
account, please notify us immediately.

Use of Services

You must use our services in accordance with our Terms of Service. This includes not using our services for illegal activities or to infringe upon the rights of others.

Client Data Requests

As a client, you have the right to request access to, correction of, or deletion of your data at any time. To make a request, please contact us at privacy@revenue.io

Service Changes and Cancellations

You may change or cancel your services based upon our mutually executed Master Services Agreement. Please note that we may retain certain data for a period of time after cancellation, as described in our Privacy Policy.

We value our relationship with our clients and are committed to providing high-quality services while respecting your privacy and data rights. If you have any questions or concerns about your data or our services, please contact us
atprivacy@revenue.io

Subprocessors

Revenue Inc. uses certain subprocessors to assist in providing our services. A subprocessor is a third party data processor engaged by Revenue Inc., who has or potentially will have access to or process service data (which may contain
personal data).

Below is a list of subprocessors currently authorized by Revenue Inc., along with their location and the purpose for which they are used:

• Pendo (Raleigh, NC, US): Product analytics tool.
• Microsoft Teams (Redmond, WA, US): Communication/collaboration platform.
• Zoom (San Jose, CA, US): Communication/collaboration platform.
• LaunchDarkly (San Francisco, CA, US): Feature flag management.
• Cloudflare (San Francisco, CA, US): DNS services provider.
• Pubnub (San Francisco, CA, US): Real-time push notification service.
• Nylas (San Francisco, CA, US): Email and calendar integration provider.
• Deepgram (San Francisco, CA, US): Voice-to-text translation platform.
• Amazon Web Services, Inc. (Seattle, WA, US): Cloud storage/computing provider.
• Twilio, Inc. (San Francisco, CA, US): Business communication services.
• Salesforce.com, Inc. (San Francisco, CA, US): Enterprise cloud computing.
• Google, Inc. (Mountain View, CA, US): Cloud services provider.
• OpenAI (San Francisco, CA, US): GPT API supplier.
• Anthropic AI (San Francisco, CA, US): AI and machine learning solutions.

We may share your personal data with these subprocessors in compliance with applicable data protection laws and with appropriate data security measures in place. The subprocessors are subject to contractual obligations governing
data security and confidentiality consistent with this Privacy Policy and applicable laws.

Please note that this list may be updated from time to time as our subprocessors change.

Data Security

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. The safety and security of your information also depend on you.

Technical Controls for Data Protection

At Revenue Inc., we utilize a range of technical controls to ensure the secure processing and storage of your data. The key controls we have in place include:

• Access Control: We have implemented strict access controls to limit who can access your personal data. Only authorized personnel who require access to perform their job functions are granted such access. We use a principle of least
  privilege, meaning individuals only have access to the data and systems they need.
• Encryption: Your personal data is encrypted both at rest and in transit. Encryption in transit is done using secure socket layer (SSL) technology to ensure that data cannot be read as it is sent over the internet. Encryption at rest is
  used to protect your data stored in our databases and servers.
• Regular Auditing and Monitoring: We conduct regular audits of our systems and monitor them for unusual activity. This helps us to identify and respond to any potential security incidents in a timely manner.
• Firewalls and Intrusion Prevention Systems: We use firewalls and intrusion prevention systems to detect and block malicious activity. These technologies help us to prevent unauthorized access to our systems and protect your data.
• Data Backup and Recovery: We regularly back up your data to help prevent data loss and aid in recovery. Backups are encrypted and stored securely.
• Security Training: Our employees receive regular training on data protection and information security. This helps to ensure that they understand their responsibilities and how to handle your data securely.
• Security by Design and Default: We incorporate data protection into our services from the earliest stages of development. This includes using secure coding practices and conducting regular security testing.
• Two-Factor Authentication (2FA): We use two-factor authentication for accessing our systems. This adds an extra layer of security by requiring users to provide two forms of identification before they can access your data.

These are just a few of the technical controls we have in place to protect your personal data. We continuously review and update our controls to respond to new security threats and ensure ongoing compliance with data protection laws.

Disclaimer: This is a generalized overview of the main technical controls. Revenue Inc has further controls and has implemented those controls as a standard for privacy. For more information, contact
privacy@revenue.io

California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)

Rights under CCPA

If you are a resident of California, you have certain rights under the CCPA:

Right to Know

You have the right to request that we disclose what personal information we collect, use, disclose, and sell. To exercise your right to know, please submit a verifiable consumer request to us by sending us an email at privacy@revenue.io

Right to Delete

You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. To exercise the right to delete, please submit a verifiable consumer request to us by sending
us an email at privacy@revenue.io

Right to Opt-Out

You have the right to direct us not to sell your personal information at any time (the “right to opt-out”). To exercise the right to opt-out, you (or your authorized representative) may submit a request to us by visiting the following web page
and clicking on the Do Not Sell My Personal Information link.

Right to Non-Discrimination

You have the right not to receive discriminatory treatment by us for exercising your CCPA rights.

Rights under CPRA

If you are a resident of California, you have the following additional rights under the CPRA:

Right to Correct

You have the right to request that we correct your personal information if it is inaccurate. To exercise this right, please submit a verifiable consumer request to us by sending us an email at privacy@revenue.io.

Right to Limit Use and Disclosure of Sensitive Personal Information

You have the right to direct us to limit our use of your sensitive personal information (as defined under the CPRA), including not using or disclosing your sensitive personal information for advertising or marketing purposes. To exercise
this right, you may submit a request to us by sending us an email at privacy@revenue.io or click on this link here: https://www.revenue.io/privacy-request 

Automated Decision Making and Profiling

You have the right to opt-out of our use of your personal information for automated decision-making or profiling.

Exercising Your Rights

To exercise any of these rights described in this section, please send a request to privacy@revenue.io. In the request, please specify which right you are seeking to exercise and the scope of the request. We may require specific information
from you to help us confirm your identity and process your request. If we are unable to confirm your identity or to connect the information you provide in your request with personal information we already maintain, we may deny your request to know
or delete it.

To make an automated and fast Data Subject Access Request under CCPA/CPRA, please submit this form here: https://www.revenue.io/privacy-request 

Please note, these rights are subject to various exclusions and exceptions under both the CCPA and the CPRA.

Response Timing and Format

We aim to respond to a verifiable consumer request within 45 days of its receipt. If we require more time, we will inform you of the reason and extension period in writing. Any disclosures we provide will only cover the 12-month period
preceding our receipt of the verifiable consumer request. The response we provide will also explain the reasons we cannot comply with a request, if applicable.

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA or CPRA rights. Unless permitted by the CCPA or CPRA, we will not:

• Deny you goods or services

• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties
• Provide you with a different level or quality of goods or services
• Suggest that you may receive a different price or rate for goods or services

General Data Protection Regulation (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR).

Right to Access, Correct, Update, or Request Deletion of Personal Data

You have the right to access, correct, update, or request deletion of your personal information. You can do so at any time by contacting us at privacy@revenue.io

Right to Object to Processing

You have the right to object to the processing of your personal information, ask us to restrict the processing of your personal information, or request portability of your personal information. Again, you can exercise these rights by contacting
us at privacy@revenue.io.

Right to Opt-Out of Marketing Communications

You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing emails we send you. To opt-out of other forms of marketing,
please contact us at privacy@revenue.io.

Right to Withdraw Consent

If we have collected and processed your personal information with your consent, you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will
it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Right to Complain to a Data Protection Authority

You have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority.

Data Retention

We retain personal data we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax, or accounting requirements). When we
have no ongoing legitimate business need to process your personal data, we will either delete or anonymize it or, if this is not possible (for example, because your personal data has been stored in backup archives), then we will securely store
your personal data and isolate it from any further processing until deletion is possible.

Data Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from
thoseof your jurisdiction. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy, and no transfer of your personal data will take place to an organization or a country
unless there are adequate controls in place, including the security of your data and other personal information.

For any questions or requests regarding your data protection rights, please contact us at privacy@revenue.io. Or exercise your privacy rights under GDPR here: https://www.revenue.io/privacy-request.

Cookies Statement

Revenue.io uses cookies and similar tools, such as web beacons, to enhance your online experience and to gather data as you navigate our websites. Cookies are small text files utilized to optimize user interactions, and they do not
personally identify you unless you choose to provide your information to Revenue.io.

We use both session-based and persistent-based cookies. Session cookies only last for a single session, disappearing when you close your browser or turn off your computer. Persistent cookies stay on your computer until deleted. These are
used, among other things, to identify browsers that have visited our websites before. If you disable cookies in your browser, you can still browse our websites but may not be able to use our services fully.

Our websites also use web beacons, which are clear electronic images that can recognize certain types of information on your computer. IP addresses are also collected to track and aggregate non-personal information.

We may share data collected with our service providers to enhance the quality of the information provided and occasionally partner with other companies for jointly-offered products or services. In these cases, we may share your data with
our partners.

To manage your cookies settings or opt out of specific data collections, you can modify your browser’s settings or follow the opt-out procedures of Network Advertising Initiative and Digital Advertising Alliance. This may impact your
user experience and the personalization of our services to you.

By continuing to use our website, you consent to our use of cookies as detailed in our full Cookie Notice.

Changes to Our Privacy Policy

It is our policy to post any changes we make to our privacy policy on this page. If we make material changes to how we treat our users’ personal information, we will notify you through a notice on the Website home page.

Contact Information

To ask questions or comment about this privacy policy and our privacy practices, contact us at: privacy@revenue.io, to exercise your privacy rights, please click the link here: https://www.revenue.io/privacy-request

Date Last Modified:

This Privacy Policy was last modified on August 7, 2023.