Privacy Policy — Revent CRM

Revent CRM ("Revent," "we," "us," or "our") provides customer relationship management software for event production companies. This Privacy Policy explains what information we collect when you use the Revent service, how we use that information, and the choices you have regarding it.

This policy applies to account holders (the companies and individuals who sign up for Revent) and to information about their end users (the contacts, leads, and customers a company manages inside Revent). For end-user data, the account holder is the data controller and Revent is the data processor — we handle that information only on behalf of, and at the direction of, the account holder.

1. Information We Collect

Account information

When you create a Revent account, we collect your name, email address, the company you represent, and (if you choose to provide it) profile photo, phone number, role, and billing details. We also store authentication identifiers from any sign-in providers you choose to use, such as Google's account ID and email address.

Customer data

As you use Revent, you upload and create records describing your business — contacts, companies, deals, events, quotes, invoices, contracts, crew assignments, inventory, email correspondence, and related notes and files. We store this customer data on your behalf so that you and your authorized teammates can access it through the service.

Integrations you connect

If you connect an integration (for example, Gmail, Google Calendar, Twilio, QuickBooks, Stripe, or DocuSign/Lumin), we receive an authorization token from that provider and use it strictly to perform the actions you request. We request only the minimum scopes required for each feature. For Gmail, we use read-only scopes to sync messages you choose to associate with a contact, deal, or event.

Usage and device information

When you visit Revent, we automatically receive standard log information from your browser, such as IP address, user-agent, and pages visited. We use this information to operate, secure, and improve the service.

Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the service is used. You can control cookies through your browser settings; disabling them may limit some Revent features.

2. How We Use Information

To provide, maintain, and improve the Revent service.
To authenticate users and protect accounts from unauthorized access.
To process payments and manage subscriptions.
To respond to support requests, send service announcements, and communicate about account or security matters.
To detect, prevent, and address fraud, abuse, or technical issues.
To comply with applicable legal obligations.

We do not sell personal information. We do not use customer data to train machine learning models for use outside your account.

3. How We Share Information

We share information only with the categories of recipients described below.

Sub-processors

We rely on a small number of trusted vendors to operate the service. These sub-processors process information only under our instructions and contractual confidentiality and security obligations. Current sub-processors include:

Supabase — managed PostgreSQL database, authentication, and storage.
Vercel — application hosting and edge delivery.
Google Cloud / Google Workspace APIs — Gmail, Calendar, and OAuth sign-in for users who connect those services.
Twilio — outbound SMS notifications to crew members.
Stripe — payment processing for Revent subscriptions.
QuickBooks Online — accounting sync for customers who connect it.
Lumin / DocuSign — electronic signature for customers who use it.
Anthropic — large-language-model APIs used in optional AI-assisted features. Anthropic does not retain prompts for training.

Within your team

Information you create inside Revent (events, contacts, emails, etc.) is shared with other authorized members of your tenant according to the role-based permissions your administrators configure.

Legal and safety

We may disclose information if required by valid legal process or when we reasonably believe disclosure is necessary to protect the rights, property, or safety of Revent, our customers, or the public.

Business transfers

If Revent is acquired, merged, or transfers substantially all of its assets, customer information may be transferred as part of that transaction. We will notify account holders of any such change in ownership of personal information.

4. Google API Services User Data

Revent's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Gmail and Calendar data only to provide the user-facing features you have enabled, never for advertising, never to train generalized AI models, and never to sell to third parties. Humans do not read your Gmail messages except where you have explicitly asked us to (for example, importing a specific message), where required to investigate abuse, or where required by law.

5. Data Retention

We retain customer data for as long as your account is active or as needed to provide the service. After account closure, we retain data for up to 30 days to allow account recovery, then delete or anonymize it on a rolling schedule, except where longer retention is required by law (for example, financial records). You can request earlier deletion at any time by contacting us.

6. Security

We protect information using industry-standard measures, including encryption in transit (TLS), encryption at rest for stored data, role-based access controls, audit logging, and tenant-level data isolation enforced by row-level security in our database. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you in accordance with applicable law.

7. Your Rights

Depending on where you live, you may have the right to access, correct, port, or delete personal information we hold about you, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us using the details below. If you are an end user (a contact stored in a Revent customer's account), please direct your request to the account holder; we will assist them in responding.

8. International Data Transfers

Revent is operated from the United States. By using the service, you understand that your information may be transferred to, processed in, and stored in the United States or other jurisdictions where our sub-processors operate. We rely on appropriate safeguards (such as Standard Contractual Clauses) for transfers from the European Economic Area, United Kingdom, and Switzerland.

9. Children

Revent is not directed to children under 16 and we do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify account holders by email or through the service before the changes take effect. The "Last updated" date at the top reflects when the policy was most recently revised.

11. Contact Us

Questions, concerns, or requests about this Privacy Policy can be directed to:

Revent CRM
c/o Elite Sound Events
Email: ryan@elitesoundevents.com