Privacy Policy

1. Overview

RevPrism provides a conversational AI platform for short-term rental operators. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and your rights in relation to that information.

We are committed to handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Because RevPrism serves customers globally, we also apply practices broadly consistent with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) where applicable.

2. Information we collect

Account information
When you create a RevPrism account, we collect your name and email address via our authentication provider, Clerk. We do not store passwords directly — authentication is handled entirely by Clerk.

Third-party API credentials
To connect your pricing tools (PriceLabs, Wheelhouse) and property management systems, you provide API keys or access credentials. These are stored in our database encrypted using AES-256-GCM encryption. We never log, display, or transmit your credentials in plain text.

Conversation data
When you use RevPrism's chat interface, the messages you send and the responses you receive are stored in our database. This allows you to access your conversation history and allows RevPrism to maintain context across a session.

Property and rental data accessed via your integrations
When you ask RevPrism a question, it queries your connected tools (e.g. PriceLabs, Wheelhouse) on your behalf to retrieve relevant data such as occupancy rates, pricing, and revenue figures. This data is processed in real time to generate your response. Summaries or excerpts of this data may appear within your conversation history.

Usage data
We collect token usage counts (input and output tokens) to calculate your plan consumption and enforce monthly limits. We also collect basic usage metrics such as message count and conversation count.

Payment information
Subscription payments are handled by Paddle. We do not store credit card numbers or payment instrument details. We receive confirmation of subscription status and plan tier from Paddle's webhook notifications.

3. How we use your information

• To provide the RevPrism service — processing your queries, calling your connected integrations, and returning AI-generated responses
• To maintain your conversation history and account settings
• To enforce your plan's monthly usage limits
• To process subscription payments and manage your billing relationship
• To send transactional emails related to your account (account confirmation, trial expiry notices, billing notifications)
• To monitor service health, diagnose technical issues, and improve the platform
• To comply with legal obligations

We do not use your conversation data or rental portfolio data to train AI models. We do not sell your data to third parties. We do not serve advertising.

4. Third-party services

RevPrism relies on the following third-party services to operate. Each processes data as described:

5. Data storage and security

Your account data and conversation history are stored in a PostgreSQL database hosted on Railway. Third-party API credentials you provide are encrypted at rest using AES-256-GCM before being written to the database.

We use HTTPS for all data in transit. Access to production systems is restricted to authorised personnel only.

No security system is impenetrable. While we take reasonable measures to protect your information, we cannot guarantee absolute security.

6. Data retention

We retain your account data and conversation history for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes (such as billing records).

Encrypted API credentials are deleted immediately upon your request or upon account closure.

7. Your rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete personal information
• Delete your account and associated personal data
• Export your conversation history in a portable format
• Withdraw consent for non-essential data processing at any time

To exercise any of these rights, contact us at hello@revprism.ai. We will respond within 30 days.

8. Cookies

RevPrism uses only functional cookies necessary to maintain your authenticated session. These are set by Clerk and are required for the service to operate. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

9. Children's privacy

RevPrism is a professional business tool and is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

10. International transfers

RevPrism serves customers globally. Your data may be processed in the United States (Anthropic, Clerk, Railway, Vercel) and other countries where our service providers operate. By using RevPrism, you consent to this transfer. We take reasonable steps to ensure your data is handled consistently with Australian Privacy Principles regardless of where it is processed.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice within the RevPrism application. The updated policy will take effect 14 days after notification, or immediately for changes required by law.

Contact

For privacy enquiries, data access requests, or complaints, contact us at:

RevPrism
Email: hello@revprism.ai

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.