Revity DPA

Roles & scope

• Customer is the controller; Revity is the processor.
• Purpose: billing integrity monitoring, alerts, and related services you configure.
• Data subjects: your customers and team members whose data you send to Stripe/Revity.
• Data types: billing metadata (invoices, subscriptions, prices, discounts), contact details, configuration data; Revity does not store card PANs.

Processing instructions

• We process personal data only on documented instructions from you, including via your use of the product.
• We will notify you if we are legally required to process data beyond your instructions unless prohibited by law.

Security

Revity implements technical and organizational measures outlined on our Security page, including encryption in transit/at rest, access controls, logging, and incident response practices.

Subprocessors

We use vetted subprocessors (e.g., hosting provider, MongoDB, email provider, analytics). The current list is available upon request and will be updated with material changes. Subscribe to changes via privacy@revity.app.

Data subject rights & assistance

• We will assist you in responding to data subject requests (access, rectification, deletion, restriction, portability, objection) as required by law.
• Upon termination or your request, we will delete or return personal data unless retention is required by law.

International transfers

Where applicable, transfers are governed by the EU Standard Contractual Clauses and/or UK addendum. Hosting region details are available on request.

Breach notification

We will notify you without undue delay after becoming aware of a personal data breach affecting your data, including details to help you meet any reporting obligations.

Contact

Privacy inquiries: privacy@revity.app
Security inquiries: security@revity.app