Privacy Policy

This Privacy Policy ("Policy") explains how Revioport collects, uses, shares, and protects information when you use our website, mobile-first storefronts, review-capture tools, AI review assistant, analytics features, and related services (together, the "Services"). Revioport is developed and managed by Letymes Inc ("Letymes," "we," "us," or "our").

Please read this Policy carefully, especially the sections in bold. By using the Services you confirm that you have read, understood, and agreed to this Policy. If you do not agree, please do not use the Services.

This Policy applies only to the Services we provide. It does not cover third-party products, websites, or integrations that you may connect to the Services (for example, payment processors, social platforms, or maps providers). Those third parties have their own privacy policies, which we encourage you to review.

Roles. When a merchant uses Revioport to collect reviews from their customers, the merchant is the data controller of those customers' personal information and Revioport acts as a data processor on the merchant's behalf. When you interact directly with Revioport (for example, by signing up for a merchant account or visiting our marketing site), Letymes is the controller of your personal information.

1. Information we collect

1.1 Information you provide directly

We collect information you give us when you interact with the Services, including:

• Merchant account information. When you create a Revioport merchant account, we collect your name, email address, password, business name, storefront name and domain (slug), country, industry, and contact phone number.
• Storefront content. Information you upload or configure to run your storefront, including business descriptions, branding, products, services, and review prompts.
• Review content. Ratings, written reviews, photos, and any other feedback that customers submit through a merchant's Revioport storefront.
• Reviewer contact information. If a merchant asks reviewers for an email address, name, or phone number to follow up, we collect that information on the merchant's behalf.
• Billing information. When you subscribe to a paid plan, our payment processor (Stripe) collects your payment method details. We receive limited information such as the last four digits of the card, billing country, and subscription status; we do not store full card numbers.
• Communications. Messages you send us through email or support channels, including any information you choose to include.

1.2 Information collected automatically

When you use the Services we automatically collect certain information, including:

• Device and connection data. IP address, browser type and version, operating system, device identifiers, language settings, referring URL, and time zone.
• Usage data. Pages and storefronts viewed, links clicked, review submissions, QR-code scans, time spent, and similar telemetry that helps us understand how the Services are used.
• Aggregate analytics. Storefront page views, average ratings, conversion metrics, and other aggregate statistics shown on the merchant analytics dashboard.
• Log data. Server logs, error reports, and diagnostic information used to maintain and secure the Services.

1.3 Information from third parties

We may receive information from third parties when you choose to connect them, for example: authentication providers (such as Clerk) when you sign in, payment processors (such as Stripe) for billing and fraud signals, and integrations you authorize (such as social platforms or maps services).

2. How we use your information

We use the information described above to:

• Provide, operate, and maintain the Services, including hosting storefronts, capturing and displaying reviews, and generating analytics.
• Run our AI review assistant — for example, to suggest refinements that preserve a reviewer's voice while improving clarity, and to flag potentially sensitive content before it is published. We do not use customer review content to train third-party foundation models.
• Authenticate users, manage subscriptions, process payments, send receipts, and prevent fraud.
• Respond to support requests and communicate with you about service updates, security alerts, and administrative messages. These transactional messages cannot be opted out of while you maintain an account.
• Send marketing communications about Revioport features and offers, where permitted by law. You can unsubscribe at any time using the link in those messages.
• Detect, investigate, and prevent abuse, security incidents, and violations of our Terms of Service.
• Comply with legal obligations and enforce our agreements.
• Improve the Services, including measuring feature performance, debugging issues, and developing new capabilities. Where we use information for product improvement, we rely on de-identified or aggregated data whenever practical.

We will not use your personal information for purposes materially different from those described in this Policy without your consent.

3. Cookies and similar technologies

We and our service providers use cookies, local storage, web beacons, and similar technologies to keep you signed in, remember preferences, secure the Services, measure performance, and understand how the Services are used. You can control cookies through your browser settings; disabling cookies may limit some features of the Services.

We may use limited analytics tooling (for example, error monitoring and product analytics) that relies on these technologies. Where required by law, we will request your consent before placing non-essential cookies.

4. How we share and disclose information

We do not sell your personal information. We share information only in the following circumstances:

• With merchants. When you submit a review on a merchant's storefront, we share that review (and any contact information you provided) with the merchant who operates the storefront.
• With service providers. We share information with vendors that help us run the Services — including hosting and infrastructure (Vercel, Supabase), authentication (Clerk), payments (Stripe), email delivery, error monitoring, and analytics. These providers are bound by contracts that require them to protect your information and use it only on our instructions.
• With your consent. When you direct us to share information — for example, by enabling an integration with a third-party platform.
• For legal reasons. When we believe in good faith that disclosure is necessary to comply with applicable law, legal process, or a lawful request from public authorities; to enforce our terms; or to protect the rights, property, or safety of Letymes, our users, or the public.
• Business transfers. If Letymes is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such transfer and any choices you may have.

Notice for California residents: we do not sell personal information as defined by the California Consumer Privacy Act (CCPA), and have not sold any personal information in the preceding twelve months.

5. How we protect your information

We use industry-standard technical and organizational measures designed to protect personal information from unauthorized access, disclosure, alteration, and loss. These include encryption in transit (TLS/HTTPS), encryption at rest for sensitive fields, access controls, audit logging, and regular security reviews. Payment card data is handled directly by our PCI-compliant payment processor and is not stored on Revioport servers.

No method of transmission over the internet or electronic storage is fully secure. We cannot guarantee absolute security of your information. If we become aware of a security incident that affects your personal information, we will notify you and the relevant authorities as required by applicable law.

We retain personal information only for as long as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it.

6. Your rights and choices

Depending on where you live, you may have the following rights regarding personal information that Revioport holds about you:

• Access and portability. Request a copy of the personal information we hold about you in a portable format.
• Correction. Ask us to correct information that is inaccurate or incomplete. Most account information can be edited directly in your Revioport account settings.
• Deletion. Ask us to delete your personal information. You may also delete your account at any time from account settings; once deleted, we will remove or anonymize your information except where retention is required by law.
• Objection and restriction. Object to or request restriction of certain processing activities.
• Withdraw consent. Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Marketing opt-out. Unsubscribe from marketing emails using the link in any such message.
• Complaint. Lodge a complaint with your local data protection authority.

If you are an end customer of a merchant who uses Revioport and you wish to exercise these rights with respect to data the merchant collected through Revioport, please contact the merchant directly. We will support the merchant in responding to your request.

To exercise rights with respect to information Letymes controls, contact us using the details in section 10. We will respond within the time period required by applicable law (and in any event within 30 days). For your protection, we may need to verify your identity before fulfilling a request.

7. Children's privacy

The Services are not intended for children under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

8. International data transfers

Revioport is operated from the United States and our infrastructure providers may store and process information in multiple regions. If you access the Services from outside your country of residence, your information may be transferred to, stored in, and processed in countries whose data protection laws differ from those of your country. Where required by law, we use appropriate safeguards such as standard contractual clauses to protect personal information that crosses borders.

9. Updates to this policy

We may update this Policy from time to time. When we make material changes we will update the "Last updated" date at the top and, where appropriate, provide additional notice (for example, by email or an in-product banner). Your continued use of the Services after the changes take effect means you accept the updated Policy.

10. How to contact us

Revioport is operated by Letymes Inc. If you have questions, comments, or requests about this Policy or our handling of your information, please contact us:

If you are not satisfied with our response, you may contact your local data protection authority.