Privacy Policy

It matters how we're handling your data, because we sit in two different roles:

• As a controller/business (in our own right): for data about Site visitors, prospective clients who contact us, and our own clients' business contacts (e.g., the people we invoice or work with day-to-day). This Policy primarily addresses this role.
• As a processor/service provider (on behalf of our clients): when we run outbound campaigns, enrich contact data, or manage CRM/marketing systems for a client, we process personal data about that client's prospects and customers under that client's instructions. If you are a prospect who received an email or call as part of a campaign we ran for one of our clients, your data is controlled by that client, not by us, and requests about that data (access, deletion, opt-out) should generally be directed to the client in question, though we will assist in routing such requests where possible. Contact us at hello@revopslogic.com if you're unsure who to contact.

We do not knowingly collect sensitive personal data (e.g., health, biometric, or financial account data beyond billing) and ask that you not send us such data unless specifically requested.

We use personal data to:

• Respond to inquiries and provide requested information;
• Schedule and conduct discovery calls and client engagements;
• Deliver, operate, and improve the Services;
• Process payments and manage billing;
• Send service-related communications and, where permitted, marketing communications about our own services;
• Maintain security, prevent fraud, and comply with legal obligations;
• Analyze Site usage to improve content and user experience.

Where GDPR applies, we rely on the following legal bases:

• Contract: to provide Services you've requested or engaged us for.
• Legitimate interests: to respond to inquiries, market our own B2B services to businesses, secure our systems, and improve the Site, balanced against your rights and interests.
• Consent: where required (e.g., certain cookies, or specific marketing opt-ins), which you may withdraw at any time.
• Legal obligation: for tax, accounting, and regulatory compliance.

We and our service providers use cookies and similar technologies to operate the Site, remember preferences, and understand usage (e.g., via analytics tools). You can control cookies through your browser settings; where required by law (e.g., in the EU/UK), we will request consent via a cookie banner before setting non-essential cookies. Disabling cookies may affect Site functionality.

We do not sell personal data. We share personal data with:

• Service providers / subprocessors who help us operate our business and deliver Services, which may include: Clay, Instantly, Zoho CRM, HubSpot, monday.com, Zapier, Make, Chili Piper, Brevo, Mailchimp, Kixie, Clearbit, HighLevel, RB2B, Attio, Calendly, Stripe, and Razorpay. These providers are contractually restricted to using data only to provide services to us and, where applicable, our clients.
• Our clients, where we act as their processor for campaign or CRM data, as described in Section 1.
• Professional advisors (lawyers, accountants) as needed.
• Regulators or authorities, where required by law, or to protect our rights, property, or safety, or that of others.
• A successor entity, in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy (or a materially similar one).

We are based in India and use service providers located in various countries, including the United States and the European Union. This means personal data may be transferred to, stored, and processed in countries other than the country in which it was originally collected, including countries that may not have data protection laws equivalent to those in your jurisdiction.

Where we transfer personal data out of the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (or the UK International Data Transfer Addendum), or other lawful transfer mechanisms. We take reasonable steps to ensure recipients provide an adequate level of protection consistent with this Policy and applicable law.

We retain personal data for as long as necessary to fulfil the purposes described in this Policy, including to provide Services, comply with legal, tax, and accounting obligations, resolve disputes, and enforce agreements. Retention periods vary depending on the type of data and applicable legal requirements; where we act as a processor for a client, we retain and delete data per that client's instructions and our contract with them.

We implement reasonable technical and organizational measures (such as access controls, encryption in transit, and vendor due diligence) designed to protect personal data against unauthorized access, loss, misuse, or alteration. No system is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have some or all of the following rights regarding your personal data. To exercise any of these, contact us at hello@revopslogic.com; we may need to verify your identity before acting on a request.

If you are in the EU/EEA or UK (GDPR): You have the right to access, correct, delete, or restrict processing of your personal data; the right to data portability; the right to object to processing (including for direct marketing); and the right to withdraw consent at any time without affecting prior lawful processing. You also have the right to lodge a complaint with your local supervisory authority.

If you are in California or another US state with a comprehensive privacy law: You may have the right to know what personal information we collect and how we use/disclose it, to request deletion or correction, to opt out of the sale or "sharing" of personal information (we do not sell personal information), and to non-discrimination for exercising your rights.

If you are in Singapore (PDPA): You have the right to withdraw consent to the collection, use, or disclosure of your personal data, and to request access to and correction of your personal data, subject to exceptions permitted under the PDPA.

If you are in Australia (Privacy Act / Australian Privacy Principles): You have the right to access and seek correction of your personal information, and to make a complaint about a suspected breach of the Australian Privacy Principles, including to the Office of the Australian Information Commissioner (OAIC) if unresolved.

If you are in India (DPDP Act): You have the right to access information about how your personal data is processed, request correction and erasure of your personal data, nominate another person to exercise your rights in the event of death or incapacity, and grievance redressal via our Grievance Officer below.

The Site and Services are intended for business use by adults and are not directed at children. We do not knowingly collect personal data from individuals under 18 (or the applicable age of digital consent in their jurisdiction). If you believe a child has provided us personal data, contact us and we will take steps to delete it.

Our Site does not currently respond to "Do Not Track" browser signals.

The Site may link to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated Policy on this page with a revised "Last Updated" date, and where changes are material, we will provide additional notice (e.g., via email or a Site banner) where required by law.

In accordance with applicable data protection law (including India's IT Rules and DPDP Act), you may direct questions, requests, or complaints to:

If you are located in the EEA or UK and wish to raise a concern with a supervisory authority, you may contact your local data protection authority. If you are located in Australia, you may contact the OAIC (oaic.gov.au). If you are located in Singapore, you may contact the Personal Data Protection Commission (pdpc.gov.sg).