Privacy Policy
Last updated 30 July 2026
1. What we collect
You give us
- Account details — username, email address, and a password we store only as a hash.
- Listing uploads — screenshots or PDFs you upload for analysis.
- Vehicle details you type — year, make, model, price, mileage, VIN and notes.
- Support messages — anything you send us.
We collect automatically
- Usage — reports generated, credits used, pages visited.
- Technical — IP address, browser and device, approximate location derived from IP.
We do not collect
We do not ask for or store your card details. Payments, when enabled, are handled entirely by our payment processor; we only ever see a customer reference and whether a payment succeeded.
2. Why we use it
- To produce your reports — the core purpose.
- To run your account — logging you in, tracking credits, support.
- To improve the service — in aggregated, anonymised form. Published per-vehicle pages use averages across many reports and never identify a user or listing.
- To keep the service secure — detecting abuse and automated signups.
3. Who we share it with
We do not sell your personal information. We share only what is needed with:
- OpenAI — listing text is sent for analysis.
- Google Cloud Vision — uploaded images are sent for text extraction.
- NHTSA and the EPA — we query these public databases by year, make, model or VIN. No personal information is sent.
- Our payment processor — when payments are enabled.
- Our hosting provider — which stores the data on our behalf.
We may also disclose information where legally required, or to protect our rights or someone's safety.
4. How long we keep it
- Uploaded images — deleted after processing, and in any case within one hour.
- Reports — kept in your account until you delete them or close your account.
- Account details — kept while your account is open, then removed within 30 days of closure except where we must keep records for legal or accounting reasons.
- Traffic logs — kept in a reduced form for security and analytics.
5. Your rights
Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, object to certain processing, or receive it in a portable format. California residents have specific rights under the CCPA, including the right to know what is collected and to request deletion; we do not sell personal information as that term is defined there.
To exercise any of these, email revvaro86@gmail.com. We will respond within 30 days.
6. Security
Passwords are hashed with bcrypt and never stored in plain text. Traffic is served over HTTPS. Access to production data is limited. No system is perfectly secure, and we cannot guarantee absolute security, but we will notify affected users promptly if a breach materially affects them.
7. Cookies
We use a session cookie to keep you logged in, and browser local storage to remember small preferences such as your selected state. We do not currently use advertising or cross-site tracking cookies.
Children
Revvaro is not intended for anyone under 18 and we do not knowingly collect their information.
Contact
Questions about this policy: revvaro86@gmail.com.