Privacy Policy

Effective date: April 25, 2026 · Revolv / R-Evolv Inc.

1. What We Collect

We collect information you provide directly:

Account data: name, email address, optional profile photo
Listing data: item name, description, category, condition, price, photos you upload
Transaction data: items purchased, offers made, messages sent between users
Driver data: vehicle type, city zone, job history (drivers only)
Waitlist data: name, email, city, and role-specific fields submitted on waitlist forms

We also collect limited technical data automatically:

Browser type and version
IP address (not linked to user identity in logs)
Pages visited and time on page (aggregate analytics only)

2. Location Data

Location data is handled with strict privacy protections:

Your GPS location is only ever used client-side to centre the map and calculate distances from you to listings. It is never sent to our servers or shared with other users.
Listing locations are city-level only — no street address is ever shown to buyers.
Driver location sharing is opt-in only. If you enable "Share for delivery," your location is visible only to the specific driver handling your job, only during the active delivery window.
We do not build location profiles or sell location data.

3. AI Processing

Revolv uses AI services to power certain features:

Item identification (Vision AI): Photos you upload for listing or search are sent to OpenAI's Vision API for identification. OpenAI processes these under their Privacy Policy. We do not use your photos to train AI models without your explicit consent.
Semantic search: Search queries are sent to OpenAI's Embeddings API to generate a vector for matching. Query text is processed but not stored long-term by Revolv.
SupplAi™ chat: Chat messages are processed by OpenAI's GPT API. We do not store chat history beyond the current session.

4. How We Use Your Data

To operate the marketplace: show your listings, facilitate messages and transactions
To calculate your Smart Score and Eco Score (uses only data you've provided in listings)
To send transactional emails (listing confirmed, offer received, message notification)
To improve the Platform (aggregate analytics, not individual profiling)
To comply with legal obligations

We do not use your personal data for targeted advertising. We do not sell your personal data.

Supabase: Our database and authentication provider. Data is stored in US-East AWS data centres with encryption at rest. Supabase Privacy Policy
Stripe: Payment processing. Stripe handles all payment card data — Revolv never sees or stores card numbers. Stripe Privacy Policy
OpenAI: AI inference (vision, embeddings, chat). Processed under OpenAI's API privacy terms; not used for training.
Netlify: Hosting and serverless functions. Netlify Privacy Policy
Other users: Your listing content (name, photos, city, price) is public to other users. Your email and precise location are never shared with other users.

We do not share personal data with any other third parties except as required by law.

6. Retention

Account data is retained until you delete your account.
Transaction records are retained for 7 years for tax and legal compliance.
Waitlist data is deleted 12 months after the relevant feature launches.
You may request deletion of your personal data at any time (see Your Rights below).

7. Your Rights (PIPEDA / Quebec Law 25)

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Law 25, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Delete your account and personal data (subject to legal retention requirements)
Withdraw consent to processing where processing is consent-based
Data portability — receive your data in a structured, machine-readable format
Lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC)

To exercise any right, email laszlobrianczako@gmail.com with the subject "Privacy Request." We will respond within 30 days.

8. Cookies & Analytics

Revolv uses localStorage (not cookies) to store your preferences (dark mode, accessibility settings, recently viewed items). No tracking cookies are set. We do not use Google Analytics, Facebook Pixel, or any third-party ad trackers.

9. Children's Privacy

Revolv is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal information, contact us immediately.

10. Security

We use industry-standard security practices: HTTPS everywhere, Supabase Row Level Security (RLS) so users can only access their own data, encrypted passwords via Supabase Auth (bcrypt), and API keys stored in environment variables never exposed to the client.

No system is 100% secure. If you discover a security vulnerability, please disclose it responsibly to laszlobrianczako@gmail.com.

11. Changes to This Policy

We will notify you of material changes via email or in-app notification at least 14 days before they take effect. The "effective date" at the top of this page is always current.

12. Contact

Privacy inquiries: laszlobrianczako@gmail.com

R-Evolv Inc. · Toronto, Ontario, Canada · Privacy Officer: Laszlo Czako