Privacy Policy

Version: 2026-11-09 · Updated: November 9, 2026

Revdoku, at revdoku.com, publishes documentation sites from GitHub repositories, with a support mailbox for each site, private file storage and collaboration for people and authorized agents. Revdoku, Armenia operates the website and the Service. This notice covers personal information on our website and Service. Contact support@revdoku.com with privacy questions or requests.

Information we handle

• Account information: email, profile details, authentication information, memberships, permissions, settings and records of agreement acceptance. If you choose Sign in with Google or GitHub, that provider gives us your name and email address.
• Content: files, versions, metadata, incoming and sent messages, sender and recipient details, headers, attachments and related activity. Sources include you, collaborators, integrations and email senders.
• Service and device information: IP addresses and the approximate location they indicate, browser and device details, requests, access and activity logs, errors, security signals and usage totals. The website retains referral/campaign parameters in browser storage for attribution.
• Billing and communications: subscription and transaction records from Polar, our payment provider; support, abuse, appeal and legal correspondence. Polar has its own privacy notice.

Purposes and access

We use information to authenticate users, receive and store email and files, provide versions and collaboration, execute authorized agent requests, calculate usage, process billing, support customers, maintain the Service, investigate misuse and comply with law.

Private storage is not public publication. Administrators, members and agents access content within their permissions; administrators can manage access and remove content. Authorized agents may transfer data to their providers under those providers’ practices. Choose permissions carefully.

Revdoku controls account, website, security and billing processing. We generally process customers’ files and emails on their instructions; customers remain responsible for their lawful basis and notices. A Data Processing Agreement is available on request for business customers.

AI agents. A built-in AI agent checks incoming email for prompt injection and similar risks and labels it, for example as Junk. It is off by default, and account administrators can turn it on. AI agents that you set up read email only as their settings allow. All AI runs on Amazon Web Services (Amazon Bedrock) in the same region as your account’s data, and AWS does not keep the data or use it to train models. AI can miss harmful content or label an email wrongly. We do not guarantee its results and, to the extent the law permits, are not responsible for them (see section 7 of the Terms of Use). We do not use AI on high-security accounts.

Where applicable, our legal bases are providing a requested contract, legitimate interests in operating and protecting the Service, compliance with legal duties, and consent where required. Acknowledging this notice is not consent to unrelated optional processing.

Providers, sharing and location

We do not sell your personal information, share it for cross-context behavioral advertising, or use private files or emails to train general-purpose AI models.

Our servers, database and email receiving and sending run on Amazon Web Services in Northern Virginia, United States. Files, email messages and attachments, published websites and their backups are stored in Cloudflare R2 in the eastern United States. These providers process personal information for us:

Cloudflare handles each request in the data center nearest to the visitor before it reaches our servers in the United States. File and attachment uploads and downloads go directly between your browser or agent and Cloudflare R2 storage. Our earlier deployment in Frankfurt, Germany, with the accounts and files created there before November 2026, is kept only until we have confirmed the move. We plan to delete it by December 5, 2026.

Revdoku is operated from Armenia, so our personnel can access data from there. Email transmission, external integrations, authorized recipients and providers’ support or operational processing may involve other countries. Where personal data leaves the EU, we use the safeguards the law requires, such as Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

We disclose information to providers as needed for infrastructure, authentication, payments, support and security, and to recipients you authorize. Personnel and providers may access relevant information for these purposes or abuse investigations, subject to access restrictions and law. Email spam/malware checks do not detect every threat.

We may preserve or disclose relevant information for valid legal process, legally permitted protection of rights or emergencies, and legally required reports. Private communications are disclosed only as applicable law permits; an abuse complaint alone does not authorize disclosure of unrelated private files or email. Copyright notices and counter-notices may be forwarded as described in our DMCA policy. Information may transfer with a merger or business sale, subject to applicable privacy protections.

Retention and your choices

You can delete content through available controls or request account deletion through support. We keep information while your account is active. Versions, backups and records can remain after deletion on these schedules:

• Accounts on the Free plan that nobody uses for 60 days can be deleted with their mailboxes, emails and files, as the Terms of Use describe.
• File backups keep deleted and earlier file versions for up to 365 days.
• Raw incoming email waits at Amazon for up to 7 days for delivery. Our raw copy for processing is deleted after 30 days.
• Activity logs are kept for your plan’s period, 30 or 90 days.
• Database backups expire within 90 days. Server and security logs expire within 365 days.
• Records of blocked email attempts are kept for 90 days.
• Email addresses from unfinished sign-ups are kept until sign-up is finished or you ask us to delete them.
• Billing and legal records are kept as long as the law requires.

These are our usual periods. Some copies can remain longer, for example during an incident or a legal hold.

Copies already received by other people or external tools are outside our control. We use security safeguards, but no system is completely secure.

Depending on applicable law, you may request access, correction, deletion or a portable copy, object to or restrict processing, withdraw consent, authorize a representative, or complain to a supervisory authority. Contact support; we may verify identity/authority and explain lawful exceptions. For customer-controlled content, contact its administrator; we can assist. We do not discriminate for exercising applicable privacy rights.

Cookies and similar storage support sessions, security, preferences and attribution. Browser controls can restrict them, although essential features may stop working. We do not currently change our practices in response to “Do Not Track.” We do not sell data or share it for targeted advertising, including when Global Privacy Control is enabled. External services have their own tracking practices.

The Service is for adults, not directed to children under 18. Contact us if a child has created an account. We will post updates here before they take effect and may also notify users by email or in the Service, except where law or urgent security requires otherwise; consent will be requested where required.