Privacy Policy

Revo operates an invitation-only property marketing platform for Australian real estate franchise networks, offices, agents, designers, administrators, and approved suppliers.

Revo is operated by the partnership B.J GAY & D.A KENNELLY (ABN 50 967 858 509). Privacy questions, requests, and complaints can be sent to hello@revo.net.au.

Revo may hold names, business contact details, account and role information, office and network membership, authentication records, listing and property information, vendor and campaign contact details, brand assets, listing images, campaign content, artwork, orders, delivery details, billing references, support messages, and audit records.

Revo also collects technical information needed to secure and operate the service, such as IP address, browser and device details, page activity, timestamps, session identifiers, error information, and security events.

Information is provided by customers and their authorised users, imported from approved CRM connections, created through campaign and supplier workflows, received from service providers, or collected when people use the platform and contact support.

Revo uses this information to authenticate users, operate tenant workspaces, synchronise listings, prepare and approve marketing, generate artwork and copy, route supplier orders, provide billing and support, protect the service, investigate incidents, meet legal obligations, and improve reliability and usability.

If Revo needs information for a materially different purpose, it will use it only where permitted or required by law, or with consent where consent is required.

Revo receives listing, office, agent, vendor, campaign, and contact information from approved CRM integrations and uses it to provide the customer's tenant workspace.

The current CRM connection is one-way into Revo. Revo does not write listing, office, or agent records back to the CRM through that connection.

Revo stores listing images, generated artwork, and preview assets in network-scoped storage and makes them available to authorised users and production suppliers when needed for a job.

Access to generated previews, print files, digital images, proposal exports, and custom artwork follows the customer's network, office, role, campaign, and supplier permissions.

AI features may send listing text and selected or reduced-size listing images to Anthropic to generate campaign copy and classify imagery.

Anthropic states that commercial API inputs and outputs are not used to train its models by default and are normally deleted within 30 days, subject to its safety, legal, and customer-configured retention exceptions. Anthropic's current commercial processing and storage are primarily in the United States, with processing that may occur globally.

Users should not place passwords, payment card details, health information, identity documents, or unrelated personal information in an AI prompt. Authorised users remain responsible for reviewing generated copy and imagery before publication or production.

Revo shares artwork, product specifications, delivery details, and order information with the supplier selected to produce or fulfil a job.

Depending on the customer's supplier configuration, job information may be delivered through an API, webhook, email, or a controlled manual production process. Revo sends it so the selected supplier can quote, produce, deliver, support, or reconcile the relevant work. The supplier's use is also governed by its arrangement with the customer and applicable law.

Revo shares recipient addresses and operational message content with its email provider to send invitations, approvals, order updates, billing notices, and support messages.

Operational email may be necessary to administer an account or fulfil a requested service. Marketing email, where used, must include the consent and unsubscribe controls required by Australian law.

Where Stripe or Stripe Connect is enabled by the customer agreement, Stripe receives the customer, subscription, invoice, payment method token, and payout information needed to provide the agreed billing and payment services.

Revo stores billing configuration, invoice references, and payment status, but does not store full payment card numbers. Stripe may process some information as an independent controller under its own privacy terms.

Google Analytics 4 may receive page URLs and titles, referrer information, browser and device metadata, pseudonymous identifiers, and cookies or session metadata for pageview measurement.

Revo does not set a Google Analytics User-ID and currently sends no custom product events. Standard pageview data can still reveal which route was viewed and the contextual page title.

Vercel Analytics and Speed Insights may collect performance and usage measurements. When Sentry error monitoring is enabled, it may receive URLs, error messages, stack traces, breadcrumbs, and related diagnostics. Revo configures Sentry not to send default personal information, but diagnostic content can still contain personal information and is handled accordingly.

Revo uses tenant access rules, role checks, network-scoped storage, encryption provided by its hosting services, audit records, and restricted administrative access to protect information. No internet service can guarantee absolute security.

Information is kept for as long as needed to provide the service, meet the customer agreement, resolve disputes, maintain security and audit records, and comply with legal and financial obligations. Deletion from active systems may not immediately remove information from protected backups or records that Revo must retain.

The primary Revo application runtime, database, authentication data, and object storage are configured in Sydney, Australia. This does not mean all processing occurs in Australia.

Revo uses providers including Vercel, Supabase, Inngest, Stripe, Resend, Anthropic, Google, and Sentry when monitoring is enabled. Outside Australia, the main disclosed processing location is the United States. Google and Stripe also use global infrastructure and may process information in other countries described in their privacy notices.

Revo configures each integration to send information relevant to that provider's function and manages overseas handling through provider terms, security configuration, and the customer's agreement. Overseas privacy protections may differ from Australian law.

To request access to or correction of personal information, ask a tenant administrator or email hello@revo.net.au. Revo may need to confirm the requester's identity and authority before acting.

Privacy complaints can be sent to hello@revo.net.au. Please describe the concern and include enough information for Revo to investigate. Revo will acknowledge and address the complaint within a reasonable period. If the response is not satisfactory, a person may contact the Office of the Australian Information Commissioner at oaic.gov.au.

Revo and the affected customer will coordinate any notifications required under Australia's Notifiable Data Breaches scheme when an eligible data breach occurs.