Privacy Policy

Version: 2026-09-25 · Updated: September 25, 2026

Revdoku, at revdoku.com, provides cloud storage, incoming email and collaboration for people and authorized agents. This notice covers personal information on our website and Service. Contact [email protected] with privacy questions or requests.

Information we handle

• Account information: email, profile details, authentication information, memberships, permissions, settings and records of agreement acceptance. Sign-in providers such as Google or GitHub provide identity information when you use them.
• Content: files, versions, metadata, incoming messages, sender and recipient details, headers, attachments and related activity. Sources include you, collaborators, integrations and email senders.
• Service and device information: IP addresses, browser and device details, requests, access and activity logs, errors, security signals and usage totals. The website retains referral/campaign parameters in browser storage for attribution.
• Billing and communications: subscription and transaction records from Polar or another identified payment provider; support, abuse, appeal and legal correspondence. Payment providers have their own notices.

Purposes and access

We use information to authenticate users, receive and store email and files, provide versions and collaboration, execute authorized agent requests, calculate usage, process billing, support customers, maintain the Service, investigate misuse and comply with law.

Private storage is not public publication. Administrators, members and agents access content within their permissions; administrators can manage access and remove content. Authorized agents may transfer data to their providers under those providers’ practices. Choose permissions carefully.

Revdoku controls account, website, security and billing processing. We generally process customers’ files and emails on their instructions; customers remain responsible for their lawful basis and notices. A Data Processing Agreement is available for business customers.

Where applicable, our legal bases are providing a requested contract, legitimate interests in operating and protecting the Service, compliance with legal duties, and consent where required. Acknowledging this notice is not consent to unrelated optional processing.

Providers, sharing and location

We do not sell your personal information, share it for cross-context behavioral advertising, or use private files or emails to train general-purpose AI models.

Amazon AWS and Cloudflare provide infrastructure. Storage and computing use EU-based data centres by default. Region display and switching are not available yet. Email transmission, external integrations, authorized recipients and providers’ support or operational processing may involve other countries; default EU infrastructure is not a promise that every data flow stays in the EU. Applicable international-transfer safeguards are required where the law calls for them.

We disclose information to providers as needed for infrastructure, authentication, payments, support and security, and to recipients you authorize. Personnel and providers may access relevant information for these purposes or abuse investigations, subject to access restrictions and law. Email spam/malware checks do not detect every threat.

We may preserve or disclose relevant information for valid legal process, legally permitted protection of rights or emergencies, and legally required reports. Private communications are disclosed only as applicable law permits; an abuse complaint alone does not authorize disclosure of unrelated private files or email. Copyright notices and counter-notices may be forwarded as described in our DMCA policy. Information may transfer with a merger or business sale, subject to applicable privacy protections.

Retention and your choices

You can delete content through available controls or request account deletion through support. Versions, backups and operational records may persist after deletion while required for recovery, security, billing, disputes or legal duties. Retention depends on the information’s purpose, plan settings and applicable obligations. Copies already received by other people or external tools are outside our control. We use security safeguards, but no system is completely secure.

Depending on applicable law, you may request access, correction, deletion or a portable copy, object to or restrict processing, withdraw consent, authorize a representative, or complain to a supervisory authority. Contact support; we may verify identity/authority and explain lawful exceptions. For customer-controlled content, contact its administrator; we can assist. We do not discriminate for exercising applicable privacy rights.

Cookies and similar storage support sessions, security, preferences and attribution. Browser controls can restrict them, although essential features may stop working. We do not currently change our practices in response to “Do Not Track.” We do not sell data or share it for targeted advertising, including when Global Privacy Control is enabled. External services have their own tracking practices.

The Service is for adults, not directed to children under 18. Contact us if a child has created an account. We will post updates here and notify users of material changes by email or in the Service before they take effect, except where law or urgent security requires otherwise; consent will be requested where required.