Privacy Policy

[Company legal name] ("Revelo", "we") runs the Revelo marketplace. This policy explains what personal information we collect, why, who sees it, and your choices. Questions: privacy@joinrevelo.co.

Depending on how you use Revelo:

• Account: your name, email, password (stored hashed by our login provider), your role, and that you agreed to our terms and said you are 18 or older.
• Profile: bio, location or school, songs and links you add, social accounts you link (handle, followers, rates), photos you choose to add.
• Activity: your swipes and choices, deals, messages in deal rooms, contracts you sign (including your typed name, time, IP address and device), work you submit, reviews, reports, and notifications.
• Payments: deal amounts, fees and balances. Card and bank details are handled by Stripe; we do not see or store card numbers.
• Identity checks (street team members): we use Stripe Identity. You photograph a government ID and take a selfie in Stripe's flow. Stripe processes those images. We receive the result (verified or not), your name and date of birth as read from the ID, the document type and its expiry date. We do not receive or keep the images.
• Technical: device and browser information, IP address and logs needed to run and secure the service. We use essential cookies to keep you logged in. We do not use advertising cookies.
• Embeds: if you tap to play a video or song from Spotify, Apple Music, YouTube, SoundCloud, TikTok or Instagram, that provider loads in the page and may collect data under its own policy.

To run the service: create your account, match you with deals, open deal rooms, generate and store contracts, hold and release payments, settle problems, verify identity and age, keep Revelo safe (spam, fraud, blocked messages), send you notifications and emails you can turn off, improve how matching works (the algorithm learns from swipes and outcomes), and meet legal obligations.

• Where the law asks for a legal basis (for example in the EU and UK): performing our contract with you, our legitimate interests in running and securing the service, meeting legal obligations, and your consent where we ask for it.

Other users see your public profile, songs, reach and ratings. People in a deal see the deal room, contract and work. The Revelo team can see information needed to run the service, review reports, resolve disputes and review identity results; admin actions are logged.

• Service providers who process data for us: Supabase (database, login, file storage), Vercel (hosting), Stripe (payments, payouts and identity checks), our email provider, and a video-call provider.
• Authorities or other parties when the law requires it, or to protect people's safety or our rights.
• A buyer, if Revelo is ever sold, under the same protections.
• We do not sell your personal information and we do not share it for advertising.

We keep your information while your account is open. After you delete your account we remove your profile, songs, linked accounts and notifications. We keep what we must or need to keep:

• Signed contracts, submitted work, payments, ledger entries and reviews for deals with other people: kept as a record of those deals, and for tax and accounting law (typically 7 years). Your name on them becomes "Deleted user".
• Identity results (verified or not, name, date of birth, document type, expiry): while your account is open and as needed afterwards to prevent fraud and meet legal duties. [For counsel: set the exact period.]
• Records of blocked messages and reports: while needed for safety, then deleted.
• Backups: deleted on a rolling schedule.

You can:

• see and edit your profile in the app;
• download a copy of your data from Account & privacy;
• delete your account from Account & privacy (some things must be settled first, see the Terms);
• turn off email alerts in your account menu;
• contact us to ask about, correct, restrict or object to how we use your information.
• If you are in the EU/UK you have rights to access, rectification, erasure, restriction, portability and objection, and to complain to your data protection authority. If you are in California you have the right to know, delete and correct, and not to be discriminated against for using these rights. We do not sell or share personal information as defined by California law.

We use encryption in transit, access controls, row-level security in our database, private storage for files, and audit logs for admin actions. No system is perfectly secure. Tell us at once if you think your account is at risk.

Our providers may process data in the United States and other countries. Where required we rely on lawful transfer mechanisms such as standard contractual clauses. [For counsel: confirm.]

Revelo is for people 18 and older. If we learn that someone under 18 has an account we will close it and delete their information, except where the law requires us to keep it.

We may update this policy. If the change matters we will tell you in the app and ask you to accept the new version.

[Company legal name], [Company address]. Privacy questions: privacy@joinrevelo.co.